hm, nem akarja kitorolni az ADS fertozest.
Na most jelenitsd meg a rejtet es a véded rejtet fajlokat.
Talald meg a c:\BOOT.INI fajlot,
Jobb klik tulajdonsaga, tavolitsd el, a pipat csak olvasasra,
masold ide a tartalmat, aztan ide irom hogyan tovabb

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\Installer\MSI13.tmp moved successfully.
C:\WINDOWS\Installer\MSI14.tmp moved successfully.
C:\WINDOWS\Installer\MSI17.tmp moved successfully.
C:\WINDOWS\Installer\MSI177.tmp moved successfully.
C:\WINDOWS\Installer\MSI178.tmp moved successfully.
C:\WINDOWS\Installer\MSI1E.tmp moved successfully.
C:\WINDOWS\Installer\MSI47.tmp moved successfully.
C:\WINDOWS\Installer\MSI51.tmp moved successfully.
Error: Unable to interpret <:ADS> in the current context!
Error: Unable to interpret <@C:\WINDOWS\SET7.tmp:KAVICHS> in the current context!
Error: Unable to interpret <@C:\WINDOWS\SET3.tmp:KAVICHS> in the current context!
Error: Unable to interpret <@C:\boot.ini:KAVICHS> in the current context!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Isti
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Isti.LAPTOP
->Temp folder emptied: 45265 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 17001167 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 16,00 mb


OTL by OldTimer - Version 3.2.20.6 log created on 02022011_211123

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Ok, csinalhatod a scriptet.

Egy pilanat varjal

Meg egy script, mert nem tudta torolni az ADS, fertozest

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-746137067-1202660629-1957994488-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ deleted successfully.
C:\Program Files\BS_Player\tbBS_P.dll moved successfully.
HKU\S-1-5-21-746137067-1202660629-1957994488-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "http://search.conduit.com/?ctid=CT1750559&SearchSource=13" removed from browser.startup.homepage
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\ deleted successfully.
C:\Program Files\Adobe\Acrobat 5.0 ME\Reader\ActiveX\AcroIEHelper.ocx moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Program Files\ConduitEngine\ConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ not found.
File C:\Program Files\BS_Player\tbBS_P.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Program Files\ConduitEngine\ConduitEngine.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ not found.
File C:\Program Files\BS_Player\tbBS_P.dll not found.
Registry value HKEY_USERS\S-1-5-21-746137067-1202660629-1957994488-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}\ not found.
File C:\Program Files\BS_Player\tbBS_P.dll not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3214481-b288-11de-be6f-00087448f03b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f3214481-b288-11de-be6f-00087448f03b}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3214481-b288-11de-be6f-00087448f03b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f3214481-b288-11de-be6f-00087448f03b}\ not found.
C:\WINDOWS\002258_.tmp deleted successfully.
C:\WINDOWS\E220AutoRunLog.tmp deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET7.tmp deleted successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
File C:\WINDOWS\System32\sgnfzen.dll.vir not found.
C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus folder moved successfully.
C:\Documents and Settings\All Users\Application Data\ESET folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\SecurityScanner\McUICnt folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\SecurityScanner folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom\SSScheduler folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom\McUICnt folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom\McCHSvc folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\McUICnt\McUICnt folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\McUICnt folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\McCHSvc folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\Common\McCHSvc folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS\Common folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\MCLOGS folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee folder moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee Security Scan folder moved successfully.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.372_to_5.0.375.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.383_to_5.0.384.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.388_to_5.0.390.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.325_326_to_5.0.327.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.372_375_to_5.0.376.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.383_384_to_5.0.385.exe not found.
File C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.388_390_to_5.0.391.exe not found.
Unable to delete ADS C:\WINDOWS\SET7.tmp:KAVICHS .
Unable to delete ADS C:\WINDOWS\SET3.tmp:KAVICHS .
Unable to delete ADS C:\boot.ini:KAVICHS .
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Isti.LAPTOP\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Isti.LAPTOP\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point (0)

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Isti
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 817234 bytes
->Flash cache emptied: 1919183 bytes

User: Isti.LAPTOP
->Temp folder emptied: 25873016 bytes
->Temporary Internet Files folder emptied: 1409091 bytes
->Java cache emptied: 344670 bytes
->FireFox cache emptied: 51223498 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 2610070 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 80,00 mb


OTL by OldTimer - Version 3.2.20.6 log created on 02022011_205326

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Futtasd az OTL, programot, az ablakjba masold be a scriptet es klik az RunFix
a logjat a restart utan tedd ide.

Igen, kevesb a MEMORIA, de ez nem segit, epen forditva, ahogy irtam ez az IOBIT nem jo,Torold,megirom a scriptet es ide teszem.

Igen, az Avira van.
SmartRam-ot tettem fel az IObittol, mivel keves a fizikai memoria. Toroljem?

CCC egy fel ora mulva majd ide irom hogyan tovabb.

AZ IOBIT-cegtol amit fel raktal mindent tavolitsd el, ez egy kinai ceg es mindent amit csinalnak, csak oszevisza van kalapacsolva, tobb kart okkoznak mint hasznot, legutoljara az Adwanced system care adat bazisat a Malwarebytestol loptak,ell

Van ot a Kaspersky antivirusbol egy csomo maradek, tehat most az AVIRA van??, ha igen majd kitoroljuk.

Extras.txt

OTL Extras logfile created on: 02.02.2011 18:41:10 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Isti.LAPTOP\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000418 | Country: Romania | Language: ROM | Date Format: dd.MM.yyyy

255,00 Mb Total Physical Memory | 81,00 Mb Available Physical Memory | 32,00% Memory free
933,00 Mb Paging File | 564,00 Mb Available in Paging File | 60,00% Paging File free
Paging file location(s): D:\pagefile.sys 700 700 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 5,00 Gb Total Space | 1,47 Gb Free Space | 29,48% Space Free | Partition Type: NTFS
Drive D: | 13,63 Gb Total Space | 0,87 Gb Free Space | 6,38% Space Free | Partition Type: NTFS

Computer Name: LAPTOP | User Name: Isti | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDBrowse] -- "C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe" "%1" (ACD Systems, Ltd.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"4048:TCP" = 4048:TCP:*:Enabled:pyslff

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Yahoo!\Messenger\YPager.exe" = C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server -- (Yahoo! Inc.)
"C:\Program Files\oDC\oDC.exe" = C:\Program Files\oDC\oDC.exe:*:Enabled:oDC
"D:\StrongDC\StrongDC.exe" = D:\StrongDC\StrongDC.exe:*:Enabled:StrongDC++ -- (Big Muscle, KohlSoft® Corporation )
"D:\StrongDC\peogram\StrongDC.exe" = D:\StrongDC\peogram\StrongDC.exe:*:Enabled:StrongDC++
"C:\Program Files\StrongDC++\StrongDC.exe" = C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger -- (Yahoo! Inc.)
"C:\Program Files\IncrediMail\Bin\IncMail.exe" = C:\Program Files\IncrediMail\Bin\IncMail.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Program Files\IncrediMail\Bin\ImApp.exe" = C:\Program Files\IncrediMail\Bin\ImApp.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Program Files\IncrediMail\Bin\ImpCnt.exe" = C:\Program Files\IncrediMail\Bin\ImpCnt.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"E:\APP\DITSVR.EXE" = E:\APP\DITSVR.EXE:*:Enabled:DITServer Module
"E:\Chestionare_v2.2.exe" = E:\Chestionare_v2.2.exe:*:Enabled:Chestionare Auto - CD Verificare


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{0F9196C6-58B4-445B-B56E-B1200FECC151}" = Microsoft Bootvis
"{15382D89-6EF6-4D21-9484-B500F2B10E46}" = PhotoMail Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3FEF132F-973E-4255-A8A5-81C83FD6F858}" = Platform4 Player
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{588AA47B-9115-44D3-B2E5-4F10BC659D6C}" = Nokia PC Connectivity Solution
"{5E97F3BD-CDDC-4188-9D98-532E14FABB5D}" = IncrediMail
"{605C5258-7549-4F4C-9E40-D8327CE6C62E}" = Platform4 Player ActiveX Control
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77296E63-8C19-462B-ABA1-F510750A8C51}" = Nokia PC Suite
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{99A17B9E-3901-400B-BCD7-2ACD8FFE328B}" = System Requirements Lab for Intel
"{9D320694-A63C-4F52-95FF-68CC16B95840}" = FWT Connect
"{AF5E8D43-49AD-4BE7-A941-2BB0A8CACA62}" = ACDSee 5.0 Standard
"{E4DD8B33-6F9B-41C5-96FF-5DBF27ED23E7}" = Nokia Connectivity Cable Driver
"010D072E91408D6B7C6FC65489B6D30C027605F5" = Windows Driver Package - Nokia Modem (04/06/2006 6.8.0.17)
"Adobe Acrobat 5.0 ME" = Adobe Acrobat 5.0 ME
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BS_Player Toolbar" = BS Player Toolbar
"BSPlayer1" = BSPlayer
"BSPlayerf" = BS.Player FREE
"CCleaner" = CCleaner
"conduitEngine" = Conduit Engine
"Driver Magician_is1" = Driver Magician 3.48
"Eset NOD32 v3.0.642 FiX1.2 by TemDono_is1" = NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up
"Hard Disk Sentinel_is1" = Hard Disk Sentinel PRO
"IncrediMail" = IncrediMail 2.0
"Installing HSP56 MicroModem Drivers" = PCTEL 2304WT V.92 MDC Modem Drivers
"Intersection_is1" = Intersection version 1.2
"KLiteCodecPack_is1" = K-Lite Codec Pack 2.25 Full
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan Plus
"Micro DVD Player" = Micro DVD Player
"Mobile Partner" = Mobile Partner
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"PhotoMail" = PhotoMail Maker
"Totalcmd" = Total Commander (Remove or Repair)
"WebSTAR DPX2100 Uninstall" = Scientific Atlanta WebSTAR 2000 series Cable Modem
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = WinRAR 4.00 beta 5 (32-bit)
"Yahoo! Messenger" = Yahoo! Messenger

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 28.05.2010 13:12:06 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 03.06.2010 03:14:05 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 06.06.2010 01:14:12 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 18.06.2010 12:16:50 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 19.06.2010 01:17:37 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 19.06.2010 09:14:30 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 19.06.2010 09:32:53 | Computer Name = LAPTOP | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 6.0.2900.2180, faulting
module unknown, version 0.0.0.0, fault address 0x51000000.

Error - 25.07.2010 05:48:40 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 25.07.2010 10:28:25 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

Error - 25.07.2010 10:39:49 | Computer Name = LAPTOP | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 25.07.2010 11:37:42 | Computer Name = LAPTOP | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
OTTHON-D3598429 that believes that it is the master browser for the domain on transport
NwlnkNb. The master browser is stopping or an election is being forced.

Error - 26.07.2010 12:07:43 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Ati HotKey Poller service
to connect.

Error - 26.07.2010 12:07:51 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7000
Description = The Ati HotKey Poller service failed to start due to the following
error: %%1053

Error - 26.07.2010 12:07:51 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Eset Nod32 Boot service
to connect.

Error - 26.07.2010 12:07:51 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7000
Description = The Eset Nod32 Boot service failed to start due to the following error:
%%1053

Error - 26.07.2010 12:21:32 | Computer Name = LAPTOP | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
QAZ-98499144978 that believes that it is the master browser for the domain on transport
NwlnkNb. The master browser is stopping or an election is being forced.

Error - 30.07.2010 09:48:52 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Ati HotKey Poller service
to connect.

Error - 30.07.2010 09:48:55 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7000
Description = The Ati HotKey Poller service failed to start due to the following
error: %%1053

Error - 30.07.2010 09:48:55 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Eset Nod32 Boot service
to connect.

Error - 30.07.2010 09:48:55 | Computer Name = LAPTOP | Source = Service Control Manager | ID = 7000
Description = The Eset Nod32 Boot service failed to start due to the following error:
%%1053


< End of report >

========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"SmartRAM" = "D:\SmartRam\Sup_SmartRAM.exe" /m -- [2003.05.01 16:49:07 | 000,202,256 | ---- | M] (IObit)

< c:\windows\*.* /U >
[4 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2005.09.20 18:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2003.03.17 19:19:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AMMYY
[2011.01.27 20:51:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira
[2010.04.29 14:48:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010.05.12 11:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IM
[2010.05.12 11:02:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IncrediMail
[2009.09.04 07:15:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2005.09.20 18:34:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal
[2004.11.18 08:35:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro
[2003.05.01 16:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.07.25 16:41:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2010.07.25 16:41:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan
[2005.10.01 09:16:48 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010.04.28 14:44:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MicroWorld
[2006.11.08 07:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSN6
[2006.07.14 12:57:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2010.05.12 11:19:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PhotoMail
[2006.12.01 21:52:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2011.02.02 18:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
[2009.09.08 13:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo!

< %ALLUSERSPROFILE%\Application Data\*.exe /s >
[2004.11.18 08:37:37 | 000,058,127 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.372_to_5.0.375.exe
[2004.11.18 08:37:44 | 000,058,127 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.383_to_5.0.384.exe
[2004.11.18 08:37:48 | 000,058,127 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.388_to_5.0.390.exe
[2006.01.31 23:07:58 | 000,063,402 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.325_326_to_5.0.327.exe
[2006.02.03 23:08:31 | 000,063,402 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.372_375_to_5.0.376.exe
[2006.02.03 23:08:38 | 000,063,402 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.383_384_to_5.0.385.exe
[2006.02.03 23:08:47 | 000,063,402 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\Bases\Patches\patch_pers_5.0.388_390_to_5.0.391.exe

< %APPDATA%\*. >
[2010.04.30 14:23:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\ACD Systems
[2009.09.08 13:22:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Adobe
[2009.10.02 14:16:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Help
[2009.09.04 10:37:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Identities
[2003.05.01 16:57:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\IObit
[2009.09.04 11:52:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Macromedia
[2003.05.01 16:05:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Malwarebytes
[2003.05.01 17:03:06 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Microsoft
[2010.05.23 06:51:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Mozilla
[2010.01.24 16:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Nokia
[2010.01.24 17:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Nokia Multimedia Player
[2009.09.04 10:37:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\PC Suite
[2010.04.28 14:49:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\SopCast
[2011.02.02 18:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Sun
[2011.02.02 18:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\SystemRequirementsLab
[2003.05.01 16:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\WinRAR

< %APPDATA%\*.exe /s >
[2010.06.19 06:29:07 | 002,605,008 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
[2003.05.01 17:03:07 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_18be6784.exe
[2003.05.01 17:03:06 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_294823.exe
[2003.05.01 17:03:07 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_2cd672ae.exe
[2003.05.01 17:03:07 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_4ae13d6c.exe


< MD5 for: AGP440.SYS >
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\system32\dllcache\agp440.sys
[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\system32\drivers\agp440.sys
[2001.08.17 15:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\AGP440.SYS

< MD5 for: ATAPI.SYS >
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2004.08.03 23:56:48 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2004.08.03 23:56:48 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\WINDOWS\system32\autochk.exe
[2004.08.03 23:56:48 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\WINDOWS\system32\dllcache\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\system32\drivers\cdrom.sys

< MD5 for: CHANGER.SYS >
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys
[2004.08.03 22:00:14 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.03 23:56:42 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=10654F9DDCEA9C46CFB77554231BE73B -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2004.08.03 23:56:42 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=10654F9DDCEA9C46CFB77554231BE73B -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2004.08.03 23:56:44 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2004.08.03 23:56:44 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2004.08.03 23:56:50 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\explorer.exe
[2004.08.03 23:56:50 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2004.08.04 00:05:44 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2004.08.03 21:59:08 | 000,081,280 | ---- | M] (Microsoft Corporation) MD5=4AF58CA3425F28FC5E3DB47DC122F722 -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 21:59:20 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=C321C95318495909A0066FB0EDC97287 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll

< MD5 for: ISAPNP.SYS >
[2001.08.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=E504F706CCB699C2596E9A3DA1596E87 -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2001.08.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=E504F706CCB699C2596E9A3DA1596E87 -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.03 23:56:52 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2004.08.03 23:56:52 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2004.08.03 22:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2004.08.03 22:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\dllcache\ndis.sys
[2004.08.03 22:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\drivers\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.03 23:56:46 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2004.08.03 23:56:46 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.03 23:56:46 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2004.08.03 23:56:46 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.03 23:56:58 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2004.08.03 23:56:58 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2004.08.03 23:56:58 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2004.08.03 23:56:58 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys

< MD5 for: USERINIT.EXE >
[2004.08.03 23:56:58 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2004.08.03 23:56:58 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\system32\dllcache\userinit.exe
[2004.08.03 23:56:58 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.03 23:56:58 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2004.08.03 23:56:58 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.03 23:56:48 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=2ED0B7F12A60F90092081C50FA0EC2B2 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2004.08.03 23:56:48 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=2ED0B7F12A60F90092081C50FA0EC2B2 -- C:\WINDOWS\system32\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2005.09.20 20:00:59 | 000,090,112 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2005.09.20 20:00:59 | 000,630,784 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2005.09.20 20:00:59 | 000,397,312 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.02.02 18:16:31 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\deployJava1.dll
[2011.02.02 18:16:34 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\java.exe
[2011.02.02 18:16:35 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\javacpl.cpl
[2011.02.02 18:16:35 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\javaw.exe
[2011.02.02 18:16:36 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\javaws.exe
[2011.02.02 16:05:58 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

========== Alternate Data Streams ==========

@Alternate Data Stream - 68 bytes -> C:\WINDOWS\SET7.tmp:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\WINDOWS\SET3.tmp:KAVICHS
@Alternate Data Stream - 68 bytes -> C:\boot.ini:KAVICHS

< End of report >

OTL.txt

OTL logfile created on: 02.02.2011 18:41:10 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Isti.LAPTOP\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000418 | Country: Romania | Language: ROM | Date Format: dd.MM.yyyy

255,00 Mb Total Physical Memory | 81,00 Mb Available Physical Memory | 32,00% Memory free
933,00 Mb Paging File | 564,00 Mb Available in Paging File | 60,00% Paging File free
Paging file location(s): D:\pagefile.sys 700 700 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 5,00 Gb Total Space | 1,47 Gb Free Space | 29,48% Space Free | Partition Type: NTFS
Drive D: | 13,63 Gb Total Space | 0,87 Gb Free Space | 6,38% Space Free | Partition Type: NTFS

Computer Name: LAPTOP | User Name: Isti | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.02.02 18:19:43 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Isti.LAPTOP\Desktop\OTL.exe
PRC - [2011.02.02 18:16:43 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\java\bin\jqs.exe
PRC - [2010.12.13 08:40:07 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010.12.13 08:39:54 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.12.13 08:39:54 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.04.01 20:06:33 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010.01.14 21:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2004.08.03 23:56:52 | 000,815,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mmc.exe
PRC - [2004.08.03 23:56:50 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2003.05.01 16:49:07 | 000,202,256 | ---- | M] (IObit) -- D:\SmartRam\Sup_SmartRAM.exe


========== Modules (SafeList) ==========

MOD - [2011.02.02 18:19:43 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Isti.LAPTOP\Desktop\OTL.exe
MOD - [2004.08.03 23:57:02 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2011.02.02 18:16:43 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- D:\Program Files\java\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2010.12.13 08:40:07 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010.12.13 08:39:54 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.01.15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2006.04.12 10:36:56 | 000,176,640 | ---- | M] (Nokia.) [Disabled | Stopped] -- C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- (ServiceLayer)
SRV - [2001.08.23 14:00:00 | 000,003,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\System32\regedt32.exe -- (NOD32FiXTemDono)


========== Driver Services (All) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ViaIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ultra)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (TosIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc8xx)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc810)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_u3)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_hi)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Sparrow)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Simbad)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1280)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1240)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql12160)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Ql10wnt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1080)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2hib)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (PCIIde)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (mraid35x)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ini910u)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (i2omp)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (hpt3xx)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (hpn)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (dpti2o)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (dac960nt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Cpqarray)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (CmdIde)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (cd20xrnt)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Atdisk)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3550)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3350p)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (amsint)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (AliIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78xx)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78u2)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Aha154x)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (adpu160m)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (abp480n5)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Abiosdsk)
DRV - [2010.12.13 08:40:21 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.12.13 08:40:21 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.06.17 14:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.06.17 14:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2010.02.24 14:31:30 | 000,454,016 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\mrxsmb.sys -- (MRxSmb)
DRV - [2009.12.31 18:14:12 | 000,352,640 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\srv.sys -- (Srv)
DRV - [2009.06.22 13:34:52 | 000,092,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\ksecdd.sys -- (KSecDD)
DRV - [2009.04.28 22:20:06 | 000,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\PxHelp20.sys -- (PxHelp20)
DRV - [2008.12.30 11:55:18 | 000,102,656 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2008.12.13 11:26:38 | 000,102,400 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008.10.23 14:25:30 | 000,088,960 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hmemdm.sys -- (MobileAdapter)
DRV - [2008.08.14 11:51:43 | 000,138,368 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\afd.sys -- (AFD)
DRV - [2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip.sys -- (Tcpip)
DRV - [2006.03.24 07:32:00 | 000,127,488 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2006.03.24 07:32:00 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2006.03.24 07:32:00 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic)
DRV - [2004.08.04 00:01:10 | 000,139,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\rdpwd.sys -- (RDPWD)
DRV - [2004.08.04 00:01:08 | 000,040,840 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\termdd.sys -- (TermDD)
DRV - [2004.08.04 00:01:08 | 000,021,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdtcp.sys -- (TDTCP)
DRV - [2004.08.04 00:01:08 | 000,012,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdpipe.sys -- (TDPIPE)
DRV - [2004.08.03 22:20:08 | 000,176,512 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\rdbss.sys -- (Rdbss)
DRV - [2004.08.03 22:15:56 | 000,060,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sysaudio.sys -- (sysaudio)
DRV - [2004.08.03 22:15:54 | 000,064,896 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\serial.sys -- (Serial)
DRV - [2004.08.03 22:15:22 | 000,107,904 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\mup.sys -- (Mup)
DRV - [2004.08.03 22:15:10 | 000,574,592 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\ntfs.sys -- (Ntfs)
DRV - [2004.08.03 22:15:06 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wdmaud.sys -- (wdmaud)
DRV - [2004.08.03 22:14:38 | 000,162,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\netbt.sys -- (NetBT)
DRV - [2004.08.03 22:14:38 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\i8042prt.sys -- (i8042prt)
DRV - [2004.08.03 22:14:32 | 000,091,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndiswan.sys -- (NdisWan)
DRV - [2004.08.03 22:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\ndis.sys -- (NDIS)
DRV - [2004.08.03 22:14:30 | 000,074,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ipsec.sys -- (IPSec)
DRV - [2004.08.03 22:14:28 | 000,048,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspptp.sys -- (PptpMiniport) WAN Miniport (PPTP)
DRV - [2004.08.03 22:14:24 | 000,051,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rasl2tp.sys -- (Rasl2tp) WAN Miniport (L2TP)
DRV - [2004.08.03 22:14:18 | 000,143,360 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\fastfat.sys -- (Fastfat)
DRV - [2004.08.03 22:14:12 | 000,063,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\cdfs.sys -- (Cdfs)
DRV - [2004.08.03 22:08:48 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbccgp.sys -- (usbccgp)
DRV - [2004.08.03 22:08:48 | 000,026,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBSTOR.SYS -- (USBSTOR)
DRV - [2004.08.03 22:08:44 | 000,057,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbhub.sys -- (usbhub)
DRV - [2004.08.03 22:08:38 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbuhci.sys -- (usbuhci)
DRV - [2004.08.03 22:08:06 | 000,030,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\modem.sys -- (Modem)
DRV - [2004.08.03 22:07:58 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\drmkaud.sys -- (drmkaud)
DRV - [2004.08.03 22:07:50 | 000,171,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kmixer.sys -- (kmixer)
DRV - [2004.08.03 22:07:48 | 000,119,936 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\pcmcia.sys -- (Pcmcia)
DRV - [2004.08.03 22:07:48 | 000,068,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\pci.sys -- (PCI)
DRV - [2004.08.03 22:07:48 | 000,015,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mssmbios.sys -- (mssmbios)
DRV - [2004.08.03 22:07:48 | 000,006,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\splitter.sys -- (splitter)
DRV - [2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\agp440.sys -- (agp440)
DRV - [2004.08.03 22:07:40 | 000,052,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dmusic.sys -- (DMusic)
DRV - [2004.08.03 22:07:40 | 000,014,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmbatt.sys -- (CmBatt)
DRV - [2004.08.03 22:07:38 | 000,187,776 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ACPI.sys -- (ACPI)
DRV - [2004.08.03 22:07:18 | 000,799,744 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot)
DRV - [2004.08.03 22:07:18 | 000,153,344 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmio.sys -- (dmio)
DRV - [2004.08.03 22:07:08 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\vga.sys -- (VgaSave)
DRV - [2004.08.03 22:06:26 | 000,073,472 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sr.sys -- (sr)
DRV - [2004.08.03 22:05:08 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspppoe.sys -- (RasPppoe)
DRV - [2004.08.03 22:05:04 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\asyncmac.sys -- (AsyncMac)
DRV - [2004.08.03 22:04:58 | 000,034,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wanarp.sys -- (Wanarp)
DRV - [2004.08.03 22:04:52 | 000,134,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ipnat.sys -- (IpNat)
DRV - [2004.08.03 22:04:46 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipinip.sys -- (IpInIp)
DRV - [2004.08.03 22:04:34 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2004.08.03 22:04:20 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psched.sys -- (PSched)
DRV - [2004.08.03 22:04:14 | 000,035,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msgpc.sys -- (Gpc)
DRV - [2004.08.03 22:03:22 | 000,034,560 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\netbios.sys -- (NetBIOS)
DRV - [2004.08.03 22:03:14 | 000,012,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ndisuio.sys -- (Ndisuio)
DRV - [2004.08.03 22:01:20 | 000,124,800 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\fltmgr.sys -- (FltMgr)
DRV - [2004.08.03 22:01:16 | 000,196,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rdpdr.sys -- (rdpdr)
DRV - [2004.08.03 22:00:58 | 000,181,248 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mrxdav.sys -- (MRxDAV)
DRV - [2004.08.03 22:00:54 | 000,087,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\irda.sys -- (irda)
DRV - [2004.08.03 22:00:48 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MSIRCOMM.sys -- (MSIRCOMM)
DRV - [2004.08.03 22:00:48 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irenum.sys -- (IRENUM)
DRV - [2004.08.03 22:00:44 | 000,030,848 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\npfs.sys -- (Npfs)
DRV - [2004.08.03 22:00:42 | 000,019,072 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\msfs.sys -- (Msfs)
DRV - [2004.08.03 22:00:32 | 000,066,176 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\udfs.sys -- (Udfs)
DRV - [2004.08.03 22:00:18 | 000,052,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\volsnap.sys -- (VolSnap)
DRV - [2004.08.03 22:00:16 | 000,041,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\imapi.sys -- (Imapi)
DRV - [2004.08.03 22:00:14 | 000,263,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\http.sys -- (HTTP)
DRV - [2004.08.03 22:00:08 | 000,029,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ip6fw.sys -- (ip6fw)
DRV - [2004.08.03 21:59:56 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\disk.sys -- (Disk)
DRV - [2004.08.03 21:59:56 | 000,011,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\sfloppy.sys -- (Sfloppy)
DRV - [2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cdrom.sys -- (Cdrom)
DRV - [2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\atapi.sys -- (atapi)
DRV - [2004.08.03 21:59:42 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\intelide.sys -- (IntelIde)
DRV - [2004.08.03 21:59:38 | 000,057,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\redbook.sys -- (redbook)
DRV - [2004.08.03 21:59:28 | 000,027,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fdc.sys -- (Fdc)
DRV - [2004.08.03 21:59:28 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\flpydisk.sys -- (Flpydisk)
DRV - [2004.08.03 21:59:20 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\p3.sys -- (P3)
DRV - [2004.08.03 21:59:18 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\processr.sys -- (Processor)
DRV - [2004.08.03 21:59:08 | 000,080,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\parport.sys -- (Parport)
DRV - [2004.08.03 21:59:08 | 000,015,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\serenum.sys -- (serenum)
DRV - [2004.08.03 21:58:42 | 000,007,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mskssrv.sys -- (MSKSSRV)
DRV - [2004.08.03 21:58:42 | 000,004,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mspqm.sys -- (MSPQM)
DRV - [2004.08.03 21:58:42 | 000,004,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\swenum.sys -- (swenum)
DRV - [2004.08.03 21:58:40 | 000,005,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mspclock.sys -- (MSPCLOCK)
DRV - [2004.08.03 21:58:34 | 000,209,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\update.sys -- (Update)
DRV - [2004.08.03 21:58:34 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kbdclass.sys -- (Kbdclass)
DRV - [2004.08.03 21:58:34 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mouclass.sys -- (Mouclass)
DRV - [2004.08.03 21:58:32 | 000,059,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atmarpc.sys -- (Atmarpc)
DRV - [2004.08.03 21:58:32 | 000,042,240 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\mountmgr.sys -- (MountMgr)
DRV - [2004.08.03 21:39:38 | 000,142,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aec.sys -- (aec)
DRV - [2004.06.10 22:42:38 | 000,015,429 | R--- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Sacm2K.sys -- (USBCM)
DRV - [2004.02.24 22:47:04 | 000,679,424 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2002.11.22 10:56:10 | 000,476,955 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\vpctcom.sys -- (Vpctcom)
DRV - [2002.11.06 13:23:34 | 000,135,260 | ---- | M] (PCTEL, INC.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptserial.sys -- (Ptserial)
DRV - [2002.11.06 13:23:16 | 000,066,111 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\vvoice.sys -- (Vvoice)
DRV - [2002.11.06 13:22:50 | 000,689,821 | ---- | M] (PCTEL, INC.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\vmodem.sys -- (Vmodem)
DRV - [2001.08.23 14:00:00 | 000,125,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ftdisk.sys -- (Ftdisk)
DRV - [2001.08.23 14:00:00 | 000,038,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\ndproxy.sys -- (NDProxy)
DRV - [2001.08.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\isapnp.sys -- (isapnp)
DRV - [2001.08.23 14:00:00 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\fips.sys -- (Fips)
DRV - [2001.08.23 14:00:00 | 000,032,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipfltdrv.sys -- (IpFilterDriver)
DRV - [2001.08.23 14:00:00 | 000,032,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkfwd.sys -- (NwlnkFwd)
DRV - [2001.08.23 14:00:00 | 000,027,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2001.08.23 14:00:00 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\partmgr.sys -- (PartMgr)
DRV - [2001.08.23 14:00:00 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\cdaudio.sys -- (Cdaudio)
DRV - [2001.08.23 14:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2001.08.23 14:00:00 | 000,016,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspti.sys -- (Raspti)
DRV - [2001.08.23 14:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k)
DRV - [2001.08.23 14:00:00 | 000,012,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkflt.sys -- (NwlnkFlt)
DRV - [2001.08.23 14:00:00 | 000,011,648 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC)
DRV - [2001.08.23 14:00:00 | 000,009,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndistapi.sys -- (NdisTapi)
DRV - [2001.08.23 14:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rasacd.sys -- (RasAcd)
DRV - [2001.08.23 14:00:00 | 000,006,784 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\parvdm.sys -- (ParVdm)
DRV - [2001.08.23 14:00:00 | 000,005,888 | ---- | M] (Microsoft Corp., Veritas Software.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmload.sys -- (dmload)
DRV - [2001.08.23 14:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rdpcdd.sys -- (RDPCDD)
DRV - [2001.08.23 14:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\mnmdd.sys -- (mnmdd)
DRV - [2001.08.23 14:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\beep.sys -- (Beep)
DRV - [2001.08.23 14:00:00 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\null.sys -- (Null)
DRV - [2001.08.17 16:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\swmidi.sys -- (swmidi)
DRV - [2001.08.17 15:59:44 | 000,003,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\audstub.sys -- (audstub)
DRV - [2001.08.17 15:58:00 | 000,009,344 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\compbatt.sys -- (Compbatt)
DRV - [2001.08.17 15:51:32 | 000,019,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rasirda.sys -- (Rasirda) WAN Miniport (IrDA)
DRV - [2001.08.17 14:20:04 | 000,096,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ac97intc.sys -- (ac97intc) Intel(r) 82801 Audio Driver Install Service (WDM)
DRV - [2001.08.17 14:11:06 | 000,066,591 | ---- | M] (3Com Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\el90xbc5.sys -- (EL90XBC)
DRV - [2001.08.17 14:10:28 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)
DRV - [2001.08.17 13:02:20 | 000,009,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidusb.sys -- (HidUsb)
DRV - [2001.08.17 12:56:16 | 000,007,552 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS -- (SONYPVU1) Sony USB Filter Driver (SONYPVU1)
DRV - [2001.08.17 12:48:00 | 000,012,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mouhid.sys -- (mouhid)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ro/
IE - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "BS Player Customized Web Search"
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT1750559&SearchSource=13"
FF - prefs.js..extensions.enabledItems: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:3.2.5.2

FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: D:\Program Files\java\lib\deploy\jqs\ff [2011.02.02 18:17:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.05.23 06:50:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.02.02 18:19:54 | 000,000,000 | ---D | M]

[2010.05.23 06:51:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Mozilla\Extensions
[2011.02.02 16:40:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Mozilla\Firefox\Profiles\zn0raabf.default\extensions
[2003.04.04 17:16:33 | 000,000,000 | ---D | M] (BS Player Community Toolbar) -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Mozilla\Firefox\Profiles\zn0raabf.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
[2010.12.15 16:48:16 | 000,000,921 | ---- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Mozilla\Firefox\Profiles\zn0raabf.default\searchplugins\conduit.xml
[2011.02.02 18:20:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.02.02 18:20:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.02.02 18:16:54 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.04.01 19:36:17 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipediaro.xml

O1 HOSTS File: ([2006.01.30 17:50:33 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 ME\Reader\ActiveX\AcroIEHelper.ocx ()
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\java\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\java\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\..\Toolbar\WebBrowser: (BS Player Toolbar) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.)
O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003..\Run: [SmartRAM] D:\SmartRam\Sup_SmartRAM.exe (IObit)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1
O7 - HKU\S-1-5-21-746137067-1202660629-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 1 = avnotify.exe
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)
O16 - DPF: {530F7E80-690F-438E-8A4F-E6CAECB4B6F3} http://192.168.0.150/CMSPlugin.cab (PLUGIN Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 7234726371 (WUWebControl Class)
O16 - DPF: {6F80BF27-CB16-4589-8C6A-DB422AAB2ED9} http://192.168.0.150/vcredist_x86.exe (HEM Video Decoder)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.09.20 17:17:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{f3214481-b288-11de-be6f-00087448f03b}\Shell - "" = AutoRun
O33 - MountPoints2\{f3214481-b288-11de-be6f-00087448f03b}\Shell\AutoRun - "" = Auto&Play
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.divxa32 - C:\WINDOWS\System32\divxa32.acm (Kristal StudioD
FileDescription)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.imc - C:\WINDOWS\System32\IMC32.acm (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.3iv2 - C:\WINDOWS\System32\3ivxVfWCodec.dll (3ivx.com)
Drivers32: vidc.3ivx - C:\WINDOWS\System32\3ivxVfWCodec.dll (3ivx.com)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: VIDC.i263 - C:\WINDOWS\System32\I263_32.drv (Intel Corporation)
Drivers32: vidc.I420 - C:\WINDOWS\System32\I263_32.drv (Intel Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\Ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\Ir32_32.dll ()
Drivers32: VIDC.IV40 - C:\WINDOWS\System32\Ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv41 - C:\WINDOWS\System32\Ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\Ir50_32.dll (Ligos Corporation)
Drivers32: VIDC.VP31 - C:\WINDOWS\System32\vp31vfw.dll (On2.com)
Drivers32: VIDC.VP60 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP61 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP62 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.wmv3 - C:\WINDOWS\System32\WMV9VCM.dll (Microsoft Corporation)
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56308606093492224)

========== Files/Folders - Created Within 30 Days ==========

[2011.02.02 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2011.02.02 18:30:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\SystemRequirementsLab
[2011.02.02 18:27:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2011.02.02 18:22:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2011.02.02 18:22:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011.02.02 18:19:54 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011.02.02 18:19:53 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011.02.02 18:19:52 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011.02.02 18:19:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011.02.02 18:19:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011.02.02 18:19:34 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Isti.LAPTOP\Desktop\OTL.exe
[2011.02.02 18:05:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Sun
[2011.02.02 17:36:26 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Isti.LAPTOP\Recent
[2011.02.02 17:14:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Hard Disk Sentinel
[2011.02.02 17:07:36 | 000,526,184 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\WINDOWS\System32\XceedCry.dll
[2011.02.02 17:07:36 | 000,456,536 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\WINDOWS\System32\XCEEDZIP.DLL
[2011.02.02 17:07:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Driver Magician
[2011.02.02 17:07:35 | 000,224,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Tabctl32.ocx
[2011.02.02 17:07:35 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Msinet.ocx
[2011.02.02 17:07:34 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Comdlg32.ocx
[2011.02.02 16:42:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\RH_Backups
[2011.02.02 16:40:26 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2011.02.02 16:38:24 | 000,114,688 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\atipdlxx.dll
[2011.02.02 16:38:24 | 000,102,400 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\Oemdspif.dll
[2011.02.02 16:38:24 | 000,024,064 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\ativcoxx.dll
[2011.02.02 16:38:24 | 000,017,408 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\atitvo32.dll
[2011.02.02 16:38:23 | 006,111,232 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\atioglxx.dll
[2011.02.02 16:38:23 | 001,057,568 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d2ag.dll
[2011.02.02 16:38:23 | 000,290,816 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\atiiiexx.dll
[2011.02.02 16:38:23 | 000,081,920 | ---- | C] ( ATI Technologies Inc.) -- C:\WINDOWS\System32\ATIDDC.DLL
[2011.02.02 16:38:23 | 000,030,720 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\ati2edxx.dll
[2011.02.02 16:38:23 | 000,028,672 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\Ati2mdxx.exe
[2011.01.27 21:16:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Isti.LAPTOP\Start Menu\Programs\Administrative Tools
[2011.01.27 21:06:15 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2011.01.27 20:52:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Avira
[2011.01.27 20:52:11 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2011.01.27 20:52:09 | 000,135,096 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011.01.27 20:52:09 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011.01.27 20:52:09 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2011.01.27 20:52:09 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2011.01.27 20:51:47 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011.01.27 20:51:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2007.03.15 09:33:14 | 000,015,429 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\Sacm2K.sys
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.02.02 18:19:43 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Isti.LAPTOP\Desktop\OTL.exe
[2011.02.02 18:16:36 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011.02.02 18:16:35 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011.02.02 18:16:35 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011.02.02 18:16:34 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011.02.02 18:16:31 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011.02.02 18:16:19 | 000,001,192 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1202660629-1957994488-1003UA.job
[2011.02.02 17:25:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.02.02 17:18:33 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2011.02.02 16:05:58 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.01.29 19:41:45 | 000,045,056 | ---- | M] () -- C:\Documents and Settings\Isti.LAPTOP\Desktop\41 DE SFATURI PENTRU VIATA LUNGA St.doc
[2011.01.27 21:16:21 | 000,007,224 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[2011.01.27 21:07:38 | 000,000,810 | RHS- | M] () -- C:\Documents and Settings\Isti.LAPTOP\ntuser.pol
[2011.01.27 20:36:23 | 000,311,938 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.01.27 20:36:23 | 000,040,326 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.02.02 17:18:24 | 000,000,830 | ---- | C] () -- C:\Documents and Settings\Isti.LAPTOP\Desktop\Yahoo! Messenger.lnk
[2011.02.02 17:18:11 | 000,000,785 | ---- | C] () -- C:\Documents and Settings\Isti.LAPTOP\Desktop\MSM Messenger.lnk
[2011.02.02 17:18:00 | 000,001,768 | ---- | C] () -- C:\Documents and Settings\Isti.LAPTOP\Desktop\IncrediMail.lnk
[2011.02.02 17:07:36 | 000,110,602 | ---- | C] () -- C:\WINDOWS\System32\xcdsfx32.bin
[2011.02.02 16:38:23 | 000,397,312 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2011.02.02 16:38:23 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
[2011.01.27 21:11:13 | 000,007,224 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2011.01.27 21:07:38 | 000,000,810 | RHS- | C] () -- C:\Documents and Settings\Isti.LAPTOP\ntuser.pol
[2009.09.04 10:42:05 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\Isti.LAPTOP\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.03.24 09:10:18 | 000,696,320 | ---- | C] () -- C:\WINDOWS\System32\HEMavcodec.dll
[2008.03.24 09:10:18 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\HEMmplayer.dll
[2007.03.15 09:33:15 | 000,053,693 | R--- | C] () -- C:\WINDOWS\UNDPX2K.sys
[2006.06.09 20:55:20 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SoundConverter.INI
[2005.12.07 11:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2005.09.21 11:28:59 | 000,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini
[2005.09.20 20:03:18 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005.09.20 18:31:00 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005.09.20 18:21:12 | 000,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2005.09.20 18:13:34 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\mdmmoh.dll
[2005.09.20 17:27:07 | 000,001,511 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2005.01.05 21:11:12 | 000,675,840 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.01.05 21:11:10 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.01.05 21:11:09 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.01.05 20:11:10 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.01.05 20:11:10 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.01.05 20:11:10 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.01.05 20:11:09 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2004.03.02 07:37:18 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2004.01.27 13:13:54 | 000,421,888 | ---- | C] () -- C:\WINDOWS\System32\OpenQuicktimeLib.dll
[2001.09.17 13:20:02 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2001.08.23 14:00:00 | 000,167,124 | ---- | C] () -- C:\WINDOWS\System32\sgnfzen.dll.vir
[2001.08.23 14:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

========== LOP Check ==========

[2005.09.20 18:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2003.03.17 19:19:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AMMYY
[2010.04.29 14:48:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010.05.12 11:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IM
[2010.05.12 11:02:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IncrediMail
[2009.09.04 07:15:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2005.09.20 18:34:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal
[2004.11.18 08:35:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro
[2010.04.28 14:44:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MicroWorld
[2006.07.14 12:57:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2010.05.12 11:19:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PhotoMail
[2006.12.01 21:52:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2009.03.10 05:22:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\ACD Systems
[2006.07.24 10:19:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\BSplayer Pro
[2006.06.12 21:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\DataLayer
[2005.09.20 18:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\InterTrust
[2006.06.11 10:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\Nokia
[2006.05.07 22:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\Nokia 6230i
[2006.07.14 13:01:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\PC Suite
[2006.07.24 11:14:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti\Application Data\Philips
[2010.04.30 14:23:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\ACD Systems
[2003.05.01 16:57:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\IObit
[2010.01.24 16:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Nokia
[2010.01.24 17:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\Nokia Multimedia Player
[2009.09.04 10:37:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\PC Suite
[2011.02.02 18:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Isti.LAPTOP\Application Data\SystemRequirementsLab

========== Purity Check ==========

Mar dehogynem.
Ha nincsenek nők meg sör ,bor ,és csak a legális nőt használjatok, akkor másnap nincsen se fejfájás se körömrágás, és egészen biztonságban vagytok.
De ha ezt nem tartjátok be akkor,jönnek a problémák. és így van valahogy a számítógéppel is.

Ezt stell sem gondolta komolyan.
Vagy csak arra számít, hogy hátha kevesebb munkája lesz.

Ez olyan, mint az élet nők meg sör (bor) nélkül.

Udv
1:Tuzfal>> Az windows7-tuzfala mar kielegito. mas tuzfal nem kel.
2:AntiSpyware>>A spybot mar a multe,minek oda mas ot van a Defender.
3:Antivirus>>a kaspersky fizetos, es valami furotakkat nem erdemes fel tenni, Tedd az AVAST-ot
4:Itt ott,letolteni es lefuttatni a Malwarebytest,
5:CCleaner, mas nem kel.

It irtam valamit a Windows7 tuzfalarol
http://www.virus-stell.com/2011/01/wind ... uzfal.html

totális védelem nem létezik, a legtöbb a felhasználótól függ,
1:Nincsen warez
2:Nincsen porno
3:Csak azt a programot hasznaljuk,toltcsuk le amit ismerunk es legalis helyrol.
4:Nincsen crack.
5:Az e-maileket igen ovatosan kezeljuk, meg ha a barotonktol kaptuk is a melekeltet.

Stell! Tudnál segiteni mit ajánlasz a legjobb védelmet Win7-hez ami totális véd. Halottam hogy kaspersky meg spybot egyszerre. De azért inkább egy tapasztalt embertől hallgatok meg javaslatot. Tehát mit javasolsz legjobb védelemnek?

Eltévesztetted a fórumot. Ez a security. Inkább a Win > Apró kérdések topicja (vagy valami videóval foglakozó (keresni kell)

Sziasztok!
Valaki tudna informáciot adni a AtiRadeon 3000 VGA videokártyárol hány MB? és az Ati Radeon PCI-e HD5450??

szia.
meglátod.

Szia Stell! Ma kaptam vissza a gépem.Most fogom az egészet újra húzni.Meg az informatikus haverunk aki a gépeinket szervizeli azt mondta elé rossz a hütése tehát ha ujra lesz huzva a win7. Kerül bele új hütés,HDD,RAM. És utána kiderül.

ok, nincsen mit,
Udv

levelem után megjavult végül is de azért gondoltam elküldöm neked amit kértél hátha találsz valamit
most más probléma nincsen
köszönöm

es mi a problema a gepeL??mert en virust nem latok.

File name:
nxEULauncher.exe
Submission date:
2011-01-05 16:18:32 (UTC)
Current status:
queued (#10) queued analysing finished
Result:
0/ 41 (0.0%)
http://www.virustotal.com/file-scan/rep ... 1294244312

teszteld lea www.virustotal.com
C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
a linket tedd ide.

Az hogy a combofix, lealt, lehetet akarmi, babraltad, klikelgetel, letiltotad ,a virus irtoval letiltotad, lehet akar mi

info.txt logfile of random's system information tool 1.08 2011-01-05 16:48:33

======Uninstall list======

-->MsiExec /X{8A809006-C25A-4A3A-9DAB-94659BCDB107}
µTorrent-->"C:\Program Files (x86)\uTorrent\uTorrent.exe" /UNINSTALL
7-Zip 9.15 (x64 edition)-->MsiExec.exe /I{23170F69-40C1-2702-0915-000001000000}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe -maintain activex
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Reader 9.4.1 - Hungarian-->MsiExec.exe /I{AC76BA86-7AD7-1038-7B44-A94000000001}
Borderlands-->MsiExec.exe /X{52B65911-1559-4ED5-9461-46957FDD48CD}
CCleaner-->"C:\Program Files (x86)\CCleaner\uninst.exe"
Combat Arms EU-->"C:\ProgramData\NexonEU\NGM\NGM.exe" -mode:uninstall -dll:ngm.nexoneu.com/cbangm/NGM/Bin/NGMDll.dll -game:50340359 -locale:EU
Cossacks 2 - Battle for Europe-->C:\Program Files (x86)\Cossacks 2 - Battle for Europe\Uninstall\uninstall.exe /C "/U:C:\Program Files (x86)\Cossacks 2 - Battle for Europe\Uninstall\uninstall.xml"
Cossacks II-->C:\Program Files (x86)\GSC Game World\Cossacks II\uninstall.exe
Empire Earth-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2447500B-22D7-47BD-9B13-1A927F43A267}\Setup.exe"
EVE Online (remove only)-->C:\Program Files (x86)\CCP\EVE\Uninstall.exe
EVEMon-->C:\Program Files (x86)\EVEMon\uninstall.exe
EVEREST Ultimate Edition v5.50-->"C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\unins000.exe"
FM Screen Capture Codec (Remove Only)-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\Windows\INF\fmcodec.inf
GIMP 2.6.11-->"C:\Program Files (x86)\GIMP-2.0\setup\unins000.exe"
Java(TM) 6 Update 22-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216021FF}
Junk Mail filter update-->MsiExec.exe /I{8E5233E1-7495-44FB-8DEB-4BE906D59619}
Malwarebytes' Anti-Malware-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148-->MsiExec.exe /X{EE936C7A-EA40-31D5-9B65-8E3E089C3828}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.6.13)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
NVIDIA Display Control Panel-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe DisplayControlPanel
NVIDIA Drivers-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{8A809006-C25A-4A3A-9DAB-94659BCDB107}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
OpenOffice.org 3.2-->MsiExec.exe /I{035F001B-3845-4586-A95F-0DD51FB4B34F}
PowerISO-->"C:\Program Files (x86)\PowerISO\uninstall.exe"
Revo Uninstaller 1.91-->C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe
Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
SUPERAntiSpyware-->"C:\Program Files\SUPERAntiSpyware\Uninstall.exe"
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
VLC media player 1.1.5-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Windows Live bejelentkezési segéd-->MsiExec.exe /I{733EB793-0840-4D69-97AA-6934FC79DB16}
Windows Live Communications Platform-->MsiExec.exe /I{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{99A98C71-A900-44E7-AD98-70E6368FB4D0}
Windows Live feltöltőeszköz-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Live Mail-->MsiExec.exe /I{BC0AEB49-94F7-4C0D-9ABC-AB45D32A6366}
Windows Live Messenger-->MsiExec.exe /X{257A92C3-7E41-4678-9144-6920F4289D0F}

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: A(z) Cryptographic Services szolgáltatás állapota: "stopped".
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: A(z) Windows Modules Installer szolgáltatás állapota: "stopped".
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: A(z) Software Protection szolgáltatás állapota: "stopped".
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: A(z) Windows Event Log szolgáltatás állapota: "stopped".
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: A(z) Volume Shadow Copy szolgáltatás állapota: "stopped".
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Információ
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Hibagyűjtő: , típus: 0
Esemény neve: PnPGenericDriverFound
Válasz: Not available
CAB-azonosító: 0

Probléma aláírása:
P1: x64
P2: PCI\VEN_10DE&DEV_0E22&SUBSYS_216619DA&REV_A1
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Csatolt fájlok:

A fájlok elérhetők lehetnek a következő helyen:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_f4db9290a3f03ef42b44b16f92298dcc6266e8_cab_06c9c5dd

Elemzési szimbólum:
Megoldás ismételt keresése: 0
Jelentés azonosítója: b7d3adfc-9f41-11df-895f-8991ef8d1093
Jelentés állapota: 6
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20100803205726.000000-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20100803205628.000000-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20100803205623.000000-000
Event Type: Információ
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: A felhasználóiprofil-szolgáltatás sikeresen elindult.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20100803205619.048883-000
Event Type: Információ
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Az EventSystem alrendszer 86400 másodpercre letiltja az eseménynapló ismétlődő bejegyzéseit. A letiltási időkorlát a REG_DWORD érték SuppressDuplicateDuration azonosítóval vezérelhető a következő beállításkulcsban: HKLM\Software\Microsoft\EventSystem\EventLog\
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20100803205619.000000-000
Event Type: Információ
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Egy biztonságengedélyezett helyi csoport módosult.

Tárgy:
Biztonsági azonosító: S-1-5-18
Fióknév: 37L4247E29-32$
Fiók tartománya: WORKGROUP
Bejelentkezési azonosító: 0x3e7

Csoport:
Biztonsági azonosító: S-1-5-32-551
A csoport neve: Backup Operators
Csoport tartománya: Builtin

Módosult attribútumok:
SAM-fiók neve: -
SID-előzmények: -

Egyéb információ:
Jogosultságok: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100803205605.851260-000
Event Type: Sikeres naplózás
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Egy biztonságengedélyezett helyi csoport jött létre.

Tárgy:
Biztonsági azonosító: S-1-5-18
Fióknév: 37L4247E29-32$
Fiók tartománya: WORKGROUP
Bejelentkezési azonosító: 0x3e7

Új csoport:
Biztonsági azonosító: S-1-5-32-551
A csoport neve: Backup Operators
Csoport tartománya: Builtin

Attribútumok:
SAM-fiók neve: Backup Operators
SID-előzmények: -

Egyéb információ:
Jogosultságok: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100803205605.851260-000
Event Type: Sikeres naplózás
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: A felhasználónkénti naplózási házirend táblázata létrehozva.

Elemek száma: 0
Házirend-azonosító: 0x32a40
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100803205605.554859-000
Event Type: Sikeres naplózás
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Egy fiók sikeresen bejelentkezett.

Tárgy:
Biztonsági azonosító: S-1-0-0
Fióknév: -
Fiók tartománya: -
Bejelentkezési azonosító: 0x0

Bejelentkezés típusa: 0

Új bejelentkezés:
Biztonsági azonosító: S-1-5-18
Fióknév: SYSTEM
Fiók tartománya: NT AUTHORITY
Bejelentkezési azonosító: 0x3e7
Bejelentkezés GUID azonosítója: {00000000-0000-0000-0000-000000000000}

Folyamatadatok:
Folyamatazonosító: 0x4
Folyamat neve:

Hálózati adatok:
Munkaállomás neve: -
Forrás hálózati cím: -
Forrásport: -

Részletes hitelesítési adatok:
Bejelentkezési folyamat: -
Hitelesítési csomag: -
Továbbított szolgáltatások: -
Csomagnév (csak NTLM): -
Kulcshossz: 0

Ez az esemény a bejelentkezési munkamenet létrehozása alkalmával generálódik. Az elért számítógépen jön létre.

A tárgy mezők jelzik a helyi rendszernek azt a fiókját, amely a bejelentkezést kérte. Ez leggyakrabban egy szolgáltatás, például a Kiszolgáló szolgáltatás, vagy egy helyi folyamat, például a Winlogon.exe vagy a Services.exe.

A bejelentkezés típusa mező azt jelzi, hogy milyen bejelentkezésre került sor. A leggyakoribb típus a 2-es (interaktív) és a 3-as (hálózati).

Az Új bejelentkezés mezők azt a fiókot jelzik, amelynek létrejött az új bejelentkezés, más szóval az a fiók, amely bejelentkezett.

A hálózat mezők jelzik, hogy honnan ered a távoli bejelentkezési kérés. A munkaállomás neve nem mindig érhető el, és egyes esetekben üresen maradhat.

A hitelesítési adatok mezők részletes információkkal szolgálnak az adott bejelentkezési kérésről.
- A bejelentkezési GUID egyedi azonosító, amelynek alapján összekapcsolható az esemény egy KDC-eseménnyel.
- A továbbított szolgáltatások arra utalnak, hogy milyen köztes szolgáltatások vettek részt ebben a bejelentkezési kérésben.
- A csomagnév azt jelzi, hogy az NTLM protokollok melyik alprotokollja voilt használatban.
- A kulcshossz a generált munkamenetkulcs hosszára utal. Ha nem került sor munkamenetkulcs-kérésére, 0 az értéke.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100803205603.651656-000
Event Type: Sikeres naplózás
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: A Windows indítása.

Ennek az eseménynek a naplózására az LSASS.EXE elindulásakor és a naplózási alrendszer inicializálásakor kerül sor.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100803205603.495656-000
Event Type: Sikeres naplózás
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;c:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
"PROCESSOR_REVISION"=1e05

-----------------EOF-----------------

Logfile of random's system information tool 1.08 (written by random/random)
Run by Gyuri86 at 2011-01-05 16:48:26
Microsoft Windows 7 Ultimate
System drive C: has 417 GB (87%) free of 477 GB
Total RAM: 4091 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:48:31, on 2011.01.05.
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\CCP\EVE\bin\ExeFile.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\OpenOffice.org 3\program\scalc.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files\trend micro\Gyuri86.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b56986.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 20792 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"taskhost.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9093b584-bb0c-402a-a364-bdbe0f0b68f3 -SystemEventPortName:HostProcess-07e89f99-3ba5-476d-a444-979985998fc9 -IoCancelEventPortName:HostProcess-d17cb5c7-3c76-4599-807c-324f70ed99f8 -NonStateChangingEventPortName:HostProcess-dc41ab83-2c0b-44bc-8588-24221c552fd0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f02243bf-2560-41c5-8117-c76a832e43c5
"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE"
C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\CCP\EVE\bin\ExeFile.exe" /nosplash /noconsole
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\OpenOffice.org 3\program\scalc.exe" -o "C:\Users\Gyuri86\Documents\europe1400\europe1400.ods"
"C:\Program Files (x86)\OpenOffice.org 3\program\scalc.exe" -o "C:\Users\Gyuri86\Documents\europe1400\europe1400.ods" -calc
"C:\Program Files (x86)\OpenOffice.org 3\program\scalc.exe" "-o" "C:\Users\Gyuri86\Documents\europe1400\europe1400.ods" "-calc" "-env:OOO_CWD=2C:\\Users\\Gyuri86\\Documents\\europe1400"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe40_ Global\UsGthrCtrlFltPipeMssGthrPipe40 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Gyuri86\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3836781324-3920629349-2182475775-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3836781324-3920629349-2182475775-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live bejelentkezési segítség - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-11-04 2919168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-12-03 14944136]
"KPeerNexonEU"=C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [2010-12-24 438272]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2010-04-12 180224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-05 16:48:26 ----D---- C:\rsit
2011-01-05 16:48:26 ----D---- C:\Program Files\trend micro
2011-01-03 22:01:31 ----SD---- C:\ComboFix
2011-01-03 22:01:11 ----A---- C:\Windows\SWXCACLS.exe
2011-01-03 21:56:16 ----A---- C:\Windows\zip.exe
2011-01-03 21:56:16 ----A---- C:\Windows\SWSC.exe
2011-01-03 21:56:16 ----A---- C:\Windows\SWREG.exe
2011-01-03 21:56:16 ----A---- C:\Windows\sed.exe
2011-01-03 21:56:16 ----A---- C:\Windows\PEV.exe
2011-01-03 21:56:16 ----A---- C:\Windows\NIRCMD.exe
2011-01-03 21:56:16 ----A---- C:\Windows\MBR.exe
2011-01-03 21:56:16 ----A---- C:\Windows\grep.exe
2011-01-03 21:56:10 ----D---- C:\Windows\ERDNT
2011-01-03 21:50:15 ----D---- C:\Qoobox
2010-12-25 16:34:02 ----SHD---- C:\ProgramData\SecuROM
2010-12-25 16:30:29 ----D---- C:\Program Files (x86)\2K Games
2010-12-24 17:27:50 ----D---- C:\ProgramData\Nexon
2010-12-24 13:37:04 ----D---- C:\Users\Gyuri86\AppData\Roaming\NVIDIA
2010-12-24 13:15:16 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-12-24 13:15:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-12-24 13:15:16 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-12-24 13:15:16 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-12-24 13:15:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-12-24 13:15:16 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-24 13:15:16 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-24 13:15:16 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-24 13:15:16 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-24 13:15:16 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-24 13:15:15 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-12-24 13:15:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-12-24 13:15:15 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-12-24 13:15:15 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-12-24 13:15:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-12-24 13:15:15 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-24 13:15:15 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-24 13:15:15 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-24 13:15:15 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-24 13:15:15 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-24 13:15:14 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-24 13:15:13 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-12-24 13:15:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-12-24 13:15:13 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-12-24 13:15:13 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-12-24 13:15:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-12-24 13:15:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-24 13:15:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-24 13:15:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-24 13:15:13 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-24 13:15:13 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-12-24 13:15:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-24 13:15:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-12-24 13:15:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-24 13:15:11 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-24 13:15:10 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-12-24 13:15:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-24 13:15:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-24 13:15:08 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-12-24 13:15:08 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-12-24 13:15:08 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-12-24 13:15:08 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-12-24 13:15:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-12-24 13:15:08 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-24 13:15:08 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-24 13:15:08 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-24 13:15:08 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-24 13:15:08 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-24 13:15:07 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-12-24 13:15:07 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-12-24 13:15:07 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-12-24 13:15:07 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-12-24 13:15:07 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-24 13:15:07 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-24 13:15:07 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-12-24 13:15:07 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-12-24 13:15:06 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-24 13:15:06 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-24 13:15:05 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-12-24 13:15:05 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-12-24 13:15:05 ----A---- C:\Windows\system32\xinput1_1.dll
2010-12-24 13:15:05 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-12-24 13:15:01 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-12-24 13:15:01 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-12-24 13:14:59 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-12-24 13:14:59 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-12-24 13:14:59 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-12-24 13:14:59 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-12-24 13:14:57 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-12-24 13:14:57 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-12-24 13:14:56 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-12-24 13:14:56 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-12-24 13:14:55 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-12-24 13:14:55 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-12-24 13:14:54 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-12-24 13:14:54 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-12-24 13:14:52 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-12-24 13:14:52 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-12-24 13:14:50 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-12-24 13:14:50 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-12-24 13:14:15 ----D---- C:\Windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2010-12-24 13:01:24 ----D---- C:\ProgramData\NexonEU
2010-12-24 12:54:22 ----D---- C:\Program Files (x86)\PowerISO
2010-12-24 12:54:22 ----A---- C:\Windows\system32\drivers\scdemu.sys
2010-12-24 12:20:47 ----D---- C:\Download
2010-12-24 12:20:13 ----D---- C:\Nexon
2010-12-24 12:20:13 ----A---- C:\Windows\SYSWOW64\nxEuUninstall.bat
2010-12-24 12:20:13 ----A---- C:\Windows\NEXON_EU_DownloaderUpdater.exe
2010-12-19 22:13:58 ----D---- C:\Users\Gyuri86\AppData\Roaming\TeamViewer
2010-12-14 20:15:57 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-14 20:15:57 ----A---- C:\Windows\system32\tzres.dll
2010-12-14 20:15:52 ----A---- C:\Windows\system32\mshtml.dll
2010-12-14 20:15:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-14 20:15:51 ----A---- C:\Windows\system32\mstime.dll
2010-12-14 20:15:51 ----A---- C:\Windows\system32\iertutil.dll
2010-12-14 20:15:51 ----A---- C:\Windows\system32\ieframe.dll
2010-12-14 20:15:50 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-14 20:15:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-14 20:15:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-14 20:15:48 ----A---- C:\Windows\system32\wininet.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-14 20:15:47 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\urlmon.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\ieui.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\iepeers.dll
2010-12-14 20:15:47 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-14 20:15:46 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-14 20:15:46 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-14 20:15:46 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-14 20:15:46 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-14 20:15:46 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-14 20:15:46 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-14 20:15:44 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-14 20:15:44 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-14 20:15:44 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-14 20:15:44 ----A---- C:\Windows\system32\taskschd.dll
2010-12-14 20:15:44 ----A---- C:\Windows\system32\taskeng.exe
2010-12-14 20:15:44 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-14 20:15:44 ----A---- C:\Windows\system32\schtasks.exe
2010-12-14 20:15:44 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-14 20:15:43 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-14 20:15:43 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-14 20:15:41 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-14 20:15:41 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-14 20:15:41 ----A---- C:\Windows\system32\atmlib.dll
2010-12-14 20:15:41 ----A---- C:\Windows\system32\atmfd.dll
2010-12-14 20:15:38 ----A---- C:\Windows\system32\win32k.sys
2010-12-14 20:15:33 ----A---- C:\Windows\system32\webio.dll
2010-12-14 20:15:32 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-14 20:15:31 ----A---- C:\Windows\system32\consent.exe
2010-12-13 10:15:28 ----D---- C:\ProgramData\ESET
2010-12-13 10:15:28 ----D---- C:\Program Files\ESET

======List of files/folders modified in the last 1 months======

2011-01-05 16:48:27 ----D---- C:\Windows\Temp
2011-01-05 16:48:26 ----RD---- C:\Program Files
2011-01-05 16:45:42 ----D---- C:\Users\Gyuri86\AppData\Roaming\Skype
2011-01-05 16:02:48 ----D---- C:\Users\Gyuri86\AppData\Roaming\skypePM
2011-01-05 12:23:45 ----D---- C:\Windows\system32\config
2011-01-05 12:16:41 ----D---- C:\Windows\System32
2011-01-05 12:16:40 ----D---- C:\Windows\inf
2011-01-05 12:16:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-05 12:12:32 ----D---- C:\ProgramData\NVIDIA
2011-01-04 07:14:16 ----SHD---- C:\System Volume Information
2011-01-03 21:57:53 ----D---- C:\Windows\Prefetch
2011-01-03 21:56:16 ----D---- C:\Windows
2011-01-02 06:48:03 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-01-01 19:22:05 ----D---- C:\Windows\SYSWOW64\drivers
2011-01-01 19:20:33 ----D---- C:\Users\Gyuri86\AppData\Roaming\uTorrent
2010-12-25 17:09:01 ----SHD---- C:\Windows\Installer
2010-12-25 16:34:02 ----HD---- C:\ProgramData
2010-12-25 16:30:29 ----RD---- C:\Program Files (x86)
2010-12-25 16:30:25 ----D---- C:\Windows\system32\catroot2
2010-12-25 16:29:56 ----RSD---- C:\Windows\assembly
2010-12-25 15:29:37 ----D---- C:\Windows\system32\Tasks
2010-12-25 13:39:45 ----SD---- C:\ProgramData\Microsoft
2010-12-24 13:15:16 ----D---- C:\Windows\SysWOW64
2010-12-24 13:14:14 ----D---- C:\Program Files (x86)\Common Files
2010-12-24 13:14:04 ----D---- C:\Windows\winsxs
2010-12-24 12:54:22 ----D---- C:\Windows\system32\drivers
2010-12-24 09:49:17 ----D---- C:\Program Files\SUPERAntiSpyware
2010-12-21 00:20:43 ----D---- C:\Windows\rescache
2010-12-20 06:10:28 ----D---- C:\Windows\debug
2010-12-16 21:33:40 ----D---- C:\ProgramData\CCP
2010-12-16 20:54:02 ----RD---- C:\Program Files (x86)\Skype
2010-12-16 20:53:43 ----D---- C:\ProgramData\Skype
2010-12-15 10:12:02 ----D---- C:\Windows\SYSWOW64\hu-HU
2010-12-15 10:12:02 ----D---- C:\Windows\SYSWOW64\en-US
2010-12-15 10:12:02 ----D---- C:\Windows\system32\hu-HU
2010-12-15 10:12:02 ----D---- C:\Windows\system32\en-US
2010-12-15 10:12:01 ----D---- C:\Program Files\Windows Mail
2010-12-15 10:12:01 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-15 10:12:00 ----D---- C:\Windows\SYSWOW64\migration
2010-12-15 10:12:00 ----D---- C:\Windows\system32\migration
2010-12-15 10:12:00 ----D---- C:\Program Files\Internet Explorer
2010-12-15 10:12:00 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-15 01:56:49 ----D---- C:\Windows\system32\catroot
2010-12-15 01:56:06 ----A---- C:\Windows\system32\MRT.exe
2010-12-13 10:15:45 ----D---- C:\Windows\system32\DriverStore
2010-12-13 03:19:45 ----SHD---- C:\$Recycle.Bin
2010-12-11 15:03:23 ----D---- C:\Windows\system32\NDF
2010-12-10 15:27:27 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-09-03 170104]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2010-06-21 131688]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 cpuz134;cpuz134; \??\C:\Users\Gyuri86\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-29 128752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-11-04 810144]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 159336]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-04 42360]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-08-04 1255736]

-----------------EOF-----------------

Na akkor mivan, mar jo-e??

így érthetőbb főnök. De ahogy a chrome meg firefox nekem leforditotta ugy kb ............ semmit nemértettem.

hm, teged erdelkel az instalation es az update, mit nem ertel ezen??


es ezen:??

Az a baj nem fordit értelmesen a chrome-se meg a firefox se.

Na hát ezekböl nem lettem okosabb bocsi.

Tedd Firefoxba es forditsd le, minden le van irva
http://sourceforge.net/apps/trac/libusb-win32/wiki
http://www.cscenter.pl/cs/baza_poradnik ... ro_cb.html

letöltöttem libusb-t ezeket hova kell helyezni.
Ja és mi ez a wmp-player. mert services.msc-be nemtalálom

Igen a minidump szerint , a problemat ez a driver okozza
libusb0

Ezt a drivert az USB-hasznalja az kulonfele usb eszkozok hozzaferesehez, ipod, telefon. vagy torold ki ezt a drivert libusb0
vagy tolds le ujat mert enek az ido bejegje regi Tue Mar 20 11:33:27 2007,
innen letolthetel ujat:
sourceforge.net.
A nagy ping, igen ilyen online jatekokal igy van, ha sokkan egyszere jatszanak akkor ez van, talan kikapcsolni az wmp-playert a services.msc ben.

kékhalálról az infók hátha ez plusz segitséget nyújt

Nem kizart. De amugy az msn is általába sokszor kifagy mostanába meg a gép nagyon pörög azaz pörgeti a ventiket. a játékokba eddig durván 50-70közötti pingem volt(GTA San andreas) most van 600as is.

Miert. csak nyugodtan nyisd ki az oldalat, es porszivozd ki, ovatosan, mert most ha jol ertem csak az a problema hogy kekhalaba megy??
volt ott egypar fertozes, de ezt mar eltavolitotuk, ezert eztet mar hardwer, vagy szoftver hibanak nezem,
Melegedes
Merevlemez>>
ileszto programok,
Memoria>>Memtest<<

Majd meglassuk.
Ma mar vegzek udv

értem hát igen táp elég meleg mostanába csak azabaj nem merem szétszedni régigépemét is szétszedtem és azota nemidul be a gép. szoval nemtudom. a többi dolog tiszta proci hütő meg ilyenek de amugy a ramom is kevés azért is pöröghet még a gép.

Ok, megvannak, majd holnap ide irom, miert van kekhalal, adig is, szet szedni az tapot, es kitisztitani a ventilatorokat,huteseket, de a szamitogepet lekapcsolni az aramtol.

Látom most ittvagy. szoval gyorsan lecsörgetem a dolgot igynem kell napokat várni mert sose sikerül téged elkapnom online.

http://leteckaposta.cz/
játszd fel ide, és a linket tedd ide.

esetleg mail cím amire tudom küldeni?

Nem is kell, torteni de vizsgald meg ha kivan e veve az automatikus restart.
1. Kattints a "Start", >futtatas ird be "Sysdm.cpl" (idézőjelek nélkül), és nyomjad meg az Entert.
2. Kattints a "Speciális" fülre, és kattints a "Beállítások" gombra a "Indítás és helyreállítás". Töröljd a "Automatikus újraindítás" opciót.

A gepnek most nem kebe ujraindulni ahogy irtad, de kekhalal kepernyon marad, ha ez megtortenik, akkor talald meg a minidump fajlokat , becsomagolod es kuldod.

nemtörténik semmi a shutdown -a kombinációra.

a start futtasba ird be shutdown -a
[enter]
aztan ha lesz kekhalal>>kapcsold be a rejtet, mappak fajlok megjeleniteset, tallald meg az c:\windows\minidump>.mappat-es tedd fell valahova, hogy letudjam tolteni, es kielemezni.

2010/12/28 20:15:53.0521 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46
2010/12/28 20:15:53.0521 ================================================================================
2010/12/28 20:15:53.0522 SystemInfo:
2010/12/28 20:15:53.0522
2010/12/28 20:15:53.0522 OS Version: 6.1.7600 ServicePack: 0.0
2010/12/28 20:15:53.0522 Product type: Workstation
2010/12/28 20:15:53.0522 ComputerName: BRUNO-PC
2010/12/28 20:15:53.0523 UserName: BRUNO
2010/12/28 20:15:53.0523 Windows directory: C:\Windows
2010/12/28 20:15:53.0523 System windows directory: C:\Windows
2010/12/28 20:15:53.0523 Processor architecture: Intel x86
2010/12/28 20:15:53.0523 Number of processors: 2
2010/12/28 20:15:53.0523 Page size: 0x1000
2010/12/28 20:15:53.0523 Boot type: Normal boot
2010/12/28 20:15:53.0523 ================================================================================
2010/12/28 20:16:00.0147 Initialize success
2010/12/28 20:16:04.0296 ================================================================================
2010/12/28 20:16:04.0296 Scan started
2010/12/28 20:16:04.0296 Mode: Manual;
2010/12/28 20:16:04.0296 ================================================================================
2010/12/28 20:16:06.0327 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
2010/12/28 20:16:06.0351 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
2010/12/28 20:16:06.0396 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
2010/12/28 20:16:06.0521 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
2010/12/28 20:16:06.0567 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
2010/12/28 20:16:06.0660 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
2010/12/28 20:16:06.0743 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
2010/12/28 20:16:06.0772 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
2010/12/28 20:16:06.0830 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
2010/12/28 20:16:06.0915 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
2010/12/28 20:16:06.0963 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
2010/12/28 20:16:06.0984 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
2010/12/28 20:16:07.0023 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
2010/12/28 20:16:07.0043 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
2010/12/28 20:16:07.0064 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
2010/12/28 20:16:07.0096 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
2010/12/28 20:16:07.0142 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
2010/12/28 20:16:07.0216 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
2010/12/28 20:16:07.0350 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
2010/12/28 20:16:07.0407 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
2010/12/28 20:16:07.0512 ASTRA32 (5fc1fed39ed5d3f71c7d2fc16a49e2a2) C:\Program Files\ASTRA32\ASTRA32.sys
2010/12/28 20:16:07.0630 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
2010/12/28 20:16:07.0661 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
2010/12/28 20:16:07.0824 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
2010/12/28 20:16:07.0870 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
2010/12/28 20:16:07.0998 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
2010/12/28 20:16:08.0063 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
2010/12/28 20:16:08.0217 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
2010/12/28 20:16:08.0247 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2010/12/28 20:16:08.0273 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2010/12/28 20:16:08.0306 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
2010/12/28 20:16:08.0420 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
2010/12/28 20:16:08.0443 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
2010/12/28 20:16:08.0459 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
2010/12/28 20:16:08.0484 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
2010/12/28 20:16:08.0700 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
2010/12/28 20:16:08.0753 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
2010/12/28 20:16:08.0793 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
2010/12/28 20:16:08.0841 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
2010/12/28 20:16:08.0966 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
2010/12/28 20:16:08.0985 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
2010/12/28 20:16:09.0017 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
2010/12/28 20:16:09.0047 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
2010/12/28 20:16:09.0183 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
2010/12/28 20:16:09.0221 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
2010/12/28 20:16:09.0284 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
2010/12/28 20:16:09.0429 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
2010/12/28 20:16:09.0461 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
2010/12/28 20:16:09.0493 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
2010/12/28 20:16:09.0567 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
2010/12/28 20:16:09.0724 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) C:\Windows\System32\drivers\dxgkrnl.sys
2010/12/28 20:16:09.0777 eamonm (73ce42907cf42bfb91bcd27fe7c7a7af) C:\Windows\system32\DRIVERS\eamonm.sys
2010/12/28 20:16:09.0897 easdrv (c7c17bc80b7264322207abc31f20ea84) C:\Windows\system32\DRIVERS\easdrv.sys
2010/12/28 20:16:10.0015 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
2010/12/28 20:16:10.0178 ehdrv (7d300a43a7bd8769e0f901bf9e1ae367) C:\Windows\system32\DRIVERS\ehdrv.sys
2010/12/28 20:16:10.0368 ElbyCDFL (ce37e3d51912e59c80c6d84337c0b4cd) C:\Windows\system32\Drivers\ElbyCDFL.sys
2010/12/28 20:16:10.0467 ElbyCDIO (178cc9403816c082d22a1d47fa1f9c85) C:\Windows\system32\Drivers\ElbyCDIO.sys
2010/12/28 20:16:10.0554 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
2010/12/28 20:16:10.0600 epfwwfpr (96f9030ca15a8d2e8d44e53c1f0e842d) C:\Windows\system32\DRIVERS\epfwwfpr.sys
2010/12/28 20:16:10.0714 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
2010/12/28 20:16:10.0772 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
2010/12/28 20:16:10.0807 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
2010/12/28 20:16:10.0933 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
2010/12/28 20:16:11.0000 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
2010/12/28 20:16:11.0018 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
2010/12/28 20:16:11.0048 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
2010/12/28 20:16:11.0184 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
2010/12/28 20:16:11.0221 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
2010/12/28 20:16:11.0254 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
2010/12/28 20:16:11.0290 fvevol (5592f5dba26282d24d2b080eb438a4d7) C:\Windows\system32\DRIVERS\fvevol.sys
2010/12/28 20:16:11.0389 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
2010/12/28 20:16:11.0446 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2010/12/28 20:16:11.0562 hamachi (833051c6c6c42117191935f734cfbd97) C:\Windows\system32\DRIVERS\hamachi.sys
2010/12/28 20:16:11.0698 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
2010/12/28 20:16:11.0780 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
2010/12/28 20:16:11.0810 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
2010/12/28 20:16:11.0901 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
2010/12/28 20:16:11.0944 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
2010/12/28 20:16:11.0984 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
2010/12/28 20:16:12.0078 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
2010/12/28 20:16:12.0165 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
2010/12/28 20:16:12.0224 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
2010/12/28 20:16:12.0293 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
2010/12/28 20:16:12.0357 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
2010/12/28 20:16:12.0420 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
2010/12/28 20:16:12.0544 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
2010/12/28 20:16:12.0599 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
2010/12/28 20:16:12.0645 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
2010/12/28 20:16:12.0719 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2010/12/28 20:16:12.0772 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
2010/12/28 20:16:12.0793 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
2010/12/28 20:16:12.0835 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
2010/12/28 20:16:12.0865 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
2010/12/28 20:16:12.0928 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
2010/12/28 20:16:13.0004 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
2010/12/28 20:16:13.0086 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
2010/12/28 20:16:13.0128 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
2010/12/28 20:16:13.0174 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
2010/12/28 20:16:13.0262 libusb0 (34d6730e198a5b0fce0790a6b4769ef2) C:\Windows\system32\drivers\libusb0.sys
2010/12/28 20:16:13.0349 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
2010/12/28 20:16:13.0420 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
2010/12/28 20:16:13.0438 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
2010/12/28 20:16:13.0472 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2010/12/28 20:16:13.0543 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2010/12/28 20:16:13.0626 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
2010/12/28 20:16:13.0727 MBAMProtector (836e0e09ca9869be7eb39ef2cf3602c7) C:\Windows\system32\drivers\mbam.sys
2010/12/28 20:16:13.0792 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
2010/12/28 20:16:13.0839 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
2010/12/28 20:16:13.0947 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
2010/12/28 20:16:14.0025 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
2010/12/28 20:16:14.0085 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
2010/12/28 20:16:14.0130 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
2010/12/28 20:16:14.0168 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
2010/12/28 20:16:14.0201 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
2010/12/28 20:16:14.0253 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
2010/12/28 20:16:14.0289 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
2010/12/28 20:16:14.0365 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys
2010/12/28 20:16:14.0385 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2010/12/28 20:16:14.0427 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2010/12/28 20:16:14.0476 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
2010/12/28 20:16:14.0558 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
2010/12/28 20:16:14.0628 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
2010/12/28 20:16:14.0642 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
2010/12/28 20:16:14.0658 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
2010/12/28 20:16:14.0733 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
2010/12/28 20:16:14.0753 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
2010/12/28 20:16:14.0772 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
2010/12/28 20:16:14.0822 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
2010/12/28 20:16:14.0843 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
2010/12/28 20:16:14.0860 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
2010/12/28 20:16:14.0886 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
2010/12/28 20:16:14.0949 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
2010/12/28 20:16:15.0079 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
2010/12/28 20:16:15.0161 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
2010/12/28 20:16:15.0272 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
2010/12/28 20:16:15.0349 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
2010/12/28 20:16:15.0382 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
2010/12/28 20:16:15.0401 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
2010/12/28 20:16:15.0445 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
2010/12/28 20:16:15.0484 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
2010/12/28 20:16:15.0514 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
2010/12/28 20:16:15.0652 netr73 (76b1157ef850830c5ece61d3e591ca8b) C:\Windows\system32\DRIVERS\netr73.sys
2010/12/28 20:16:15.0720 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
2010/12/28 20:16:15.0850 NPF (b48dc6abcd3aeff8618350ccbdc6b09a) C:\Windows\system32\drivers\npf.sys
2010/12/28 20:16:15.0900 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
2010/12/28 20:16:15.0919 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
2010/12/28 20:16:15.0974 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
2010/12/28 20:16:16.0066 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
2010/12/28 20:16:16.0132 NVHDA (a82534d453425f5fee4b6a583fdcf3eb) C:\Windows\system32\drivers\nvhda32v.sys
2010/12/28 20:16:16.0379 nvlddmkm (8b75f652726a2ba3197860f300514e3f) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2010/12/28 20:16:17.0184 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
2010/12/28 20:16:18.0446 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
2010/12/28 20:16:19.0071 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
2010/12/28 20:16:19.0125 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
2010/12/28 20:16:19.0300 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
2010/12/28 20:16:19.0317 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
2010/12/28 20:16:19.0339 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
2010/12/28 20:16:19.0386 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
2010/12/28 20:16:19.0407 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
2010/12/28 20:16:19.0448 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
2010/12/28 20:16:19.0553 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
2010/12/28 20:16:19.0589 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
2010/12/28 20:16:19.0797 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
2010/12/28 20:16:19.0829 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
2010/12/28 20:16:19.0949 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
2010/12/28 20:16:20.0044 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
2010/12/28 20:16:20.0156 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
2010/12/28 20:16:20.0196 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
2010/12/28 20:16:20.0232 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
2010/12/28 20:16:20.0346 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
2010/12/28 20:16:20.0396 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
2010/12/28 20:16:20.0484 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
2010/12/28 20:16:20.0508 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
2010/12/28 20:16:20.0545 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
2010/12/28 20:16:20.0570 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
2010/12/28 20:16:20.0590 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
2010/12/28 20:16:20.0642 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
2010/12/28 20:16:20.0737 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
2010/12/28 20:16:20.0767 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
2010/12/28 20:16:20.0787 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
2010/12/28 20:16:20.0832 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
2010/12/28 20:16:21.0016 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
2010/12/28 20:16:21.0063 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
2010/12/28 20:16:21.0113 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
2010/12/28 20:16:21.0275 SCDEmu (20b2751cd4c8f3fd989739ca661b9f30) C:\Windows\system32\drivers\SCDEmu.sys
2010/12/28 20:16:21.0316 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
2010/12/28 20:16:21.0360 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
2010/12/28 20:16:21.0474 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
2010/12/28 20:16:21.0507 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
2010/12/28 20:16:21.0543 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
2010/12/28 20:16:21.0618 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\Windows\system32\drivers\sfdrv01.sys
2010/12/28 20:16:21.0670 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
2010/12/28 20:16:21.0778 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
2010/12/28 20:16:21.0808 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
2010/12/28 20:16:21.0933 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\Windows\system32\drivers\sfhlp02.sys
2010/12/28 20:16:21.0973 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
2010/12/28 20:16:22.0096 sfsync02 (efebbc1d13fdb77a6af4eddfc7232edf) C:\Windows\system32\drivers\sfsync02.sys
2010/12/28 20:16:22.0167 sfvfs02 (d5a7e09d2c6a702809e49190d52adc9f) C:\Windows\system32\drivers\sfvfs02.sys
2010/12/28 20:16:22.0259 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
2010/12/28 20:16:22.0362 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2010/12/28 20:16:22.0398 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
2010/12/28 20:16:22.0457 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
2010/12/28 20:16:22.0552 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
2010/12/28 20:16:22.0662 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
2010/12/28 20:16:22.0662 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
2010/12/28 20:16:22.0674 sptd - detected Locked file (1)
2010/12/28 20:16:22.0770 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\Windows\system32\DRIVERS\srv.sys
2010/12/28 20:16:22.0817 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\Windows\system32\DRIVERS\srv2.sys
2010/12/28 20:16:22.0846 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\Windows\system32\DRIVERS\srvnet.sys
2010/12/28 20:16:22.0963 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
2010/12/28 20:16:23.0023 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
2010/12/28 20:16:23.0067 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
2010/12/28 20:16:23.0159 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
2010/12/28 20:16:23.0232 tap0901t (b7aee68d2e867cbf69b649b18fcedbbb) C:\Windows\system32\DRIVERS\tap0901t.sys
2010/12/28 20:16:23.0356 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
2010/12/28 20:16:23.0424 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
2010/12/28 20:16:23.0543 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
2010/12/28 20:16:23.0576 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
2010/12/28 20:16:23.0596 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
2010/12/28 20:16:23.0613 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
2010/12/28 20:16:23.0650 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
2010/12/28 20:16:23.0780 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
2010/12/28 20:16:23.0834 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
2010/12/28 20:16:23.0944 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
2010/12/28 20:16:23.0976 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
2010/12/28 20:16:24.0022 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
2010/12/28 20:16:24.0063 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
2010/12/28 20:16:24.0185 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
2010/12/28 20:16:24.0263 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
2010/12/28 20:16:24.0371 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
2010/12/28 20:16:24.0435 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
2010/12/28 20:16:24.0520 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
2010/12/28 20:16:24.0594 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
2010/12/28 20:16:24.0691 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
2010/12/28 20:16:24.0750 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
2010/12/28 20:16:24.0802 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
2010/12/28 20:16:24.0847 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
2010/12/28 20:16:24.0909 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2010/12/28 20:16:24.0955 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
2010/12/28 20:16:25.0012 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
2010/12/28 20:16:25.0089 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
2010/12/28 20:16:25.0134 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
2010/12/28 20:16:25.0208 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
2010/12/28 20:16:25.0299 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
2010/12/28 20:16:25.0370 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
2010/12/28 20:16:25.0413 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
2010/12/28 20:16:25.0513 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
2010/12/28 20:16:25.0565 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
2010/12/28 20:16:25.0615 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
2010/12/28 20:16:25.0679 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
2010/12/28 20:16:25.0730 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
2010/12/28 20:16:25.0816 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
2010/12/28 20:16:25.0896 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
2010/12/28 20:16:25.0922 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
2010/12/28 20:16:26.0085 VX1000 (d22c6b9c2f840d403fd387ad207a4b16) C:\Windows\system32\DRIVERS\VX1000.sys
2010/12/28 20:16:26.0336 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
2010/12/28 20:16:26.0390 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
2010/12/28 20:16:26.0404 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
2010/12/28 20:16:26.0536 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
2010/12/28 20:16:26.0590 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
2010/12/28 20:16:26.0707 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
2010/12/28 20:16:26.0747 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
2010/12/28 20:16:26.0932 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
2010/12/28 20:16:26.0994 WmBEnum (5d410936831f7fb58eff941eac3f6d3d) C:\Windows\system32\drivers\WmBEnum.sys
2010/12/28 20:16:27.0102 WmFilter (7a13cfde92956ca61a0927d766c5ad4f) C:\Windows\system32\drivers\WmFilter.sys
2010/12/28 20:16:27.0127 WmHidLo (1f596392149cac51f7c095af7d533934) C:\Windows\system32\drivers\WmHidLo.sys
2010/12/28 20:16:27.0182 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
2010/12/28 20:16:27.0328 WmVirHid (6f04646bc690f8bbfc344be32a60796d) C:\Windows\system32\drivers\WmVirHid.sys
2010/12/28 20:16:27.0359 WmXlCore (1d6ca43d562333f4dfb40bcef2453f3a) C:\Windows\system32\drivers\WmXlCore.sys
2010/12/28 20:16:27.0430 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
2010/12/28 20:16:27.0511 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
2010/12/28 20:16:27.0565 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
2010/12/28 20:16:27.0661 yukonw7 (b07c5b7efdf936ff93d4f540938725be) C:\Windows\system32\DRIVERS\yk62x86.sys
2010/12/28 20:16:27.0926 ================================================================================
2010/12/28 20:16:27.0926 Scan finished
2010/12/28 20:16:27.0926 ================================================================================
2010/12/28 20:16:27.0939 Detected object count: 1
2010/12/28 20:16:34.0715 Locked file(sptd) - User select action: Skip