Prosim o kontrolu

[ma11221]

Moj Log Z ComboFix
ComboFix 10-07-13.07 - Majo 14/07/2010 11:19:09.1.2 - x86
Microsoft® Windows Extreme™ Gamers Edition 6.0.6001.1.1252.44.1033.18.3324.2179 [GMT 2:00]
Running from: c:\users\Majo\Desktop\ComboFix.exe
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Created a new restore point
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\desktop.ini
C:\poppy.exe
c:\program files\Cheat Engine\dbk32.sys
c:\program files\FaceSmooch Toolbar\tbHElper.dll
C:\setup.exe
c:\windows\jusched.exe
c:\windows\My.ini
c:\windows\system32\Explorer
c:\windows\system32\Explorer\cd.txt
c:\windows\system32\Explorer\firefox.txt

.
((((((((((((((((((((((((( Files Created from 2010-06-14 to 2010-07-14 )))))))))))))))))))))))))))))))
.

2010-07-14 08:49 . 2010-07-14 08:58 -------- d-----w- c:\program files\a-squared Free
2010-07-13 14:56 . 2010-07-13 19:23 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-07-13 14:56 . 2010-07-13 16:18 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-07-13 10:58 . 2010-07-13 10:58 -------- d-----w- C:\Little Big Adventure
2010-07-13 07:59 . 2010-07-13 07:59 -------- d-----w- C:\WoW_AddonPack_TBC_2.4.3
2010-07-11 12:50 . 2009-11-03 12:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-07-11 12:50 . 2009-11-03 12:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-07-11 12:50 . 2010-07-14 09:27 -------- d-----w- c:\program files\Cheat Engine
2010-07-10 16:03 . 2010-07-10 16:03 -------- d-----w- c:\users\Majo\{7af2a915-6f36-476f-94cf-45b0bf816de0}
2010-07-10 14:25 . 2010-07-10 14:25 -------- d-----w- c:\programdata\Trymedia
2010-07-10 14:18 . 2010-07-10 14:49 -------- d-----w- c:\program files\Crashday - Speedcombat
2010-07-10 14:12 . 2004-04-23 12:23 2506752 ----a-w- c:\windows\system32\LWCtPl.dll
2010-07-10 14:12 . 2004-04-23 12:26 17344 ----a-w- c:\windows\system32\drivers\LHidHi.sys
2010-07-10 14:12 . 2004-04-23 12:26 13888 ----a-w- c:\windows\system32\drivers\LHidLo.sys
2010-07-10 14:12 . 2004-04-23 12:26 10432 ----a-w- c:\windows\system32\drivers\LUsbSys.sys
2010-07-10 14:12 . 2004-04-23 12:25 86016 ----a-w- c:\windows\system32\W9xDAPI.dll
2010-07-10 14:12 . 2000-11-28 09:35 27388 ----a-w- c:\windows\system32\drivers\ihidfilt.sys
2010-07-10 14:12 . 2010-07-10 14:12 -------- d-----w- c:\program files\Common Files\Logitech
2010-07-10 14:12 . 2004-04-23 12:26 33216 ----a-w- c:\windows\system32\LFLoad.sys
2010-07-10 14:12 . 2004-04-23 12:24 61440 ----a-w- c:\windows\system32\W9XdInst.dll
2010-07-10 14:12 . 2004-04-23 12:24 356352 ----a-w- c:\windows\system32\WMWizard.dll
2010-07-10 14:12 . 2004-04-14 08:54 163840 ----a-w- c:\windows\system32\WmJoyFrc.dll
2010-07-10 14:11 . 2010-07-10 14:11 -------- d-----w- c:\program files\Logitech
2010-07-10 14:11 . 2010-07-10 14:11 -------- d-----w- c:\program files\Common Files\InstallShield
2010-07-10 13:14 . 2010-07-10 13:14 -------- d-----w- c:\users\Majo\AppData\Roaming\IObit
2010-07-10 13:14 . 2010-07-10 13:14 -------- d-----w- c:\program files\IObit
2010-07-09 17:13 . 2010-07-09 17:13 -------- d-----w- C:\RtmK(09)
2010-07-08 18:47 . 2010-07-08 18:47 -------- d-----w- c:\users\Majo\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-07-08 16:17 . 2010-07-08 16:17 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-07-07 19:28 . 2010-07-07 19:29 -------- d-----w- c:\users\Majo\AppData\Roaming\GetRightToGo
2010-07-06 20:07 . 2010-07-06 20:07 -------- d-----w- c:\users\Majo\AppData\Roaming\Ubisoft
2010-07-06 20:06 . 2010-07-06 20:06 -------- d-----w- c:\programdata\Ubisoft
2010-07-05 13:54 . 2009-09-25 08:34 53280 ----a-w- c:\windows\system32\RHCoInst.dll
2010-07-05 13:54 . 2009-09-25 08:34 2968608 ----a-w- c:\windows\system32\RtkHDMI.dll
2010-07-05 13:54 . 2009-09-25 08:34 1352224 ----a-w- c:\windows\system32\RHDMIExt.dll
2010-07-05 13:54 . 2009-09-25 08:13 159232 ----a-w- c:\windows\system32\drivers\RtHDMIV.sys
2010-07-05 13:54 . 2009-03-09 03:32 290304 ----a-w- c:\windows\system32\RH3DAA32.dll
2010-07-05 13:54 . 2009-03-09 03:31 290304 ----a-w- c:\windows\system32\RH3DHT32.dll
2010-07-05 13:35 . 2010-07-05 13:36 -------- d-----w- c:\programdata\DriverScanner
2010-07-05 13:35 . 2010-07-05 13:35 -------- d-----w- c:\program files\Uniblue
2010-07-05 13:10 . 2010-07-05 13:10 -------- d-----w- c:\program files\TNod User & Password Finder
2010-07-05 13:10 . 2010-07-05 13:10 -------- d-----w- c:\users\Majo\AppData\Local\ESET
2010-07-05 13:07 . 2010-07-05 13:07 -------- d-----w- c:\program files\ESET
2010-07-04 18:32 . 2010-07-04 19:14 -------- d-----w- c:\users\Majo\AppData\Roaming\AbsoluteTelnet
2010-07-04 18:32 . 2010-07-04 19:14 -------- d-----w- c:\program files\AbsoluteTelnet
2010-07-04 14:51 . 2010-07-14 08:17 -------- d-----w- C:\World of Warcraft TBC
2010-07-04 11:08 . 2010-07-04 11:08 61445 ----a-w- C:\DarkCheatsv2.zip
2010-07-03 17:29 . 2010-07-03 17:29 0 ----a-w- c:\windows\nsreg.dat
2010-07-03 17:29 . 2010-07-03 17:29 -------- d-----w- c:\users\Majo\AppData\Local\Mozilla
2010-07-03 17:11 . 2010-07-14 09:27 -------- d-----w- c:\program files\FaceSmooch Toolbar
2010-07-01 11:55 . 2010-07-01 17:42 -------- d-----w- c:\program files\Counter-Strike Source
2010-07-01 09:45 . 2010-07-01 09:48 -------- d-----w- c:\windows\system32\Adobe
2010-06-30 11:49 . 2010-04-14 17:47 293376 ----a-w- c:\windows\system32\psisdecd.dll
2010-06-30 11:49 . 2010-04-14 17:46 428544 ----a-w- c:\windows\system32\EncDec.dll
2010-06-30 11:44 . 2010-04-16 16:05 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-06-30 11:44 . 2010-04-16 14:17 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-06-29 18:42 . 2010-06-29 18:42 -------- d-----w- c:\users\Majo\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-29 18:42 . 2010-06-29 18:42 -------- d-----w- c:\users\Majo\AppData\Roaming\Adobe Mini Bridge CS5
2010-06-29 18:32 . 2010-06-29 18:32 -------- d-----w- c:\program files\Adobe Media Player
2010-06-29 18:30 . 2010-06-29 18:30 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-06-29 18:24 . 2010-06-29 18:52 -------- d-----w- c:\users\Majo\AppData\Local\Adobe
2010-06-29 18:23 . 2010-06-29 18:37 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-06-29 18:23 . 2010-06-29 18:33 -------- d-----w- c:\program files\Common Files\Adobe
2010-06-29 15:30 . 2010-07-07 19:55 5002 ----a-w- c:\windows\system32\FilterData.dat
2010-06-29 15:19 . 2010-06-29 15:19 -------- d-----w- c:\program files\Microsoft.NET
2010-06-29 15:17 . 2009-11-08 17:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-06-29 15:17 . 2009-11-08 17:55 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-06-29 15:17 . 2009-11-08 17:55 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-06-29 15:17 . 2009-11-08 17:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-06-29 15:17 . 2009-11-08 17:55 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-06-29 14:43 . 2010-06-02 02:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-06-29 14:43 . 2010-06-02 02:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-06-29 11:46 . 2010-07-12 17:47 -------- d-----w- c:\program files\SpeedFan
2010-06-28 15:41 . 2010-06-28 15:41 -------- d-----w- c:\programdata\page
2010-06-28 15:41 . 2010-06-28 15:41 -------- d-----w- c:\program files\Ashampoo
2010-06-28 11:18 . 2010-06-28 11:19 -------- d-----w- c:\program files\SecondLifeViewer2
2010-06-28 11:11 . 2010-07-05 15:22 -------- d-----w- c:\users\Majo\AppData\Local\SecondLife
2010-06-28 11:11 . 2010-06-28 11:18 -------- d-----w- c:\users\Majo\AppData\Roaming\SecondLife
2010-06-27 17:01 . 2010-06-27 17:01 -------- d-----w- c:\program files\NCSoft
2010-06-27 16:46 . 2010-06-27 16:46 -------- d-----w- c:\users\Majo\AppData\Local\assembly
2010-06-27 09:33 . 2010-06-27 09:33 -------- d-----w- c:\program files\PFPortChecker
2010-06-26 11:05 . 2010-07-09 10:47 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-06-26 08:45 . 2010-06-26 08:45 -------- d-----w- c:\users\Majo\AppData\Local\ProphetX
2010-06-25 18:48 . 2010-06-25 18:48 -------- d-----w- c:\programdata\Blizzard
2010-06-25 16:18 . 2009-07-10 10:33 1589248 ----a-w- c:\windows\system32\libmysql_d.dll
2010-06-25 14:40 . 2010-06-25 14:40 -------- d-----w- c:\users\Majo\AppData\Local\Rowen_Coding_Productions
2010-06-23 17:35 . 2010-06-23 17:35 -------- d-----w- c:\program files\Unlocker
2010-06-23 17:10 . 2010-06-23 17:10 -------- d-----w- c:\users\Majo\AppData\Local\Microsoft Game Studios
2010-06-23 17:10 . 2010-06-23 17:10 -------- d-----w- c:\programdata\Microsoft Games
2010-06-23 17:10 . 2010-06-23 17:10 -------- d-----w- c:\users\Majo\AppData\Roaming\Microsoft Game Studios
2010-06-22 17:23 . 2010-07-10 13:40 -------- d-----w- c:\users\Majo\AppData\Local\Microsoft Games
2010-06-22 16:12 . 2010-06-22 16:12 -------- d-----w- c:\program files\MySQL
2010-06-21 18:08 . 2010-06-21 18:08 -------- d-----w- c:\program files\MSXML 4.0
2010-06-20 18:52 . 2010-06-20 18:52 -------- d-----w- c:\programdata\MySQL
2010-06-20 17:35 . 2010-02-03 13:56 26176 ---ha-w- c:\windows\system32\hamachi.sys
2010-06-20 17:35 . 2010-06-20 17:35 -------- d-----w- c:\program files\LogMeIn Hamachi
2010-06-20 17:35 . 2010-07-14 09:11 -------- d-----w- c:\users\Majo\AppData\Local\LogMeIn Hamachi
2010-06-20 11:05 . 2010-06-20 11:05 -------- d-----w- c:\users\Majo\AppData\Local\Google
2010-06-19 20:36 . 2010-06-19 20:36 -------- d-----w- c:\users\Majo\AppData\Local\Apps
2010-06-19 20:36 . 2010-06-19 20:36 -------- d-----w- c:\users\Majo\AppData\Local\Deployment
2010-06-17 15:07 . 2010-06-17 15:07 -------- d-----w- c:\program files\ICQ6Toolbar
2010-06-17 15:07 . 2010-06-17 15:07 -------- d-----w- c:\programdata\ICQ
2010-06-17 15:07 . 2010-06-17 15:07 -------- d-----w- c:\users\Majo\AppData\Local\AOL
2010-06-17 15:07 . 2010-06-17 15:08 -------- d-----w- c:\program files\ICQ7.2
2010-06-17 13:03 . 2010-06-17 13:03 -------- d-----w- c:\windows\Sun
2010-06-17 13:00 . 2010-07-01 18:17 99 ----a-w- c:\users\Majo\jagex_runescape_preferences2.dat
2010-06-17 13:00 . 2010-06-17 13:00 0 ----a-w- c:\users\Majo\jagex__preferences3.dat
2010-06-17 12:58 . 2010-06-17 12:58 -------- d-----w- C:\.jagex_cache_32
2010-06-17 12:57 . 2010-07-01 18:16 46 ----a-w- c:\users\Majo\jagex_runescape_preferences.dat
2010-06-17 12:57 . 2010-06-17 13:07 -------- d-----w- c:\windows\.jagex_cache_32
2010-06-17 12:56 . 2010-06-17 12:56 -------- d-----w- c:\users\Majo\AppData\Local\jagexlauncher
2010-06-17 12:55 . 2010-06-17 12:55 -------- d-----w- c:\program files\Common Files\Java
2010-06-17 12:55 . 2010-06-17 12:54 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-06-17 12:54 . 2010-06-17 12:54 -------- d-----w- c:\program files\Java
2010-06-17 11:54 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-06-17 11:48 . 2010-07-13 19:44 -------- d-----w- c:\users\Majo\AppData\Roaming\ICQ
2010-06-17 11:46 . 2008-06-20 01:14 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-06-17 11:46 . 2008-06-20 01:14 97800 ----a-w- c:\windows\system32\infocardapi.dll
2010-06-17 11:46 . 2008-06-20 01:14 11264 ----a-w- c:\windows\system32\icardres.dll
2010-06-17 11:46 . 2008-06-20 01:14 622080 ----a-w- c:\windows\system32\icardagt.exe
2010-06-17 11:46 . 2008-06-20 01:14 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2010-06-17 11:41 . 2008-07-27 18:03 158720 ----a-w- c:\windows\system32\mscorier.dll
2010-06-17 11:40 . 2008-07-27 18:03 83968 ----a-w- c:\windows\system32\mscories.dll
2010-06-17 11:38 . 2010-02-20 23:39 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-06-17 11:38 . 2010-02-20 23:37 31232 ----a-w- c:\windows\system32\httpapi.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-05 14:00 . 2010-07-05 13:59 2682880 ----a-w- c:\users\Majo\AppData\Roaming\Uniblue\DriverScanner\LatestUpdate.exe
2010-07-05 13:55 . 2006-07-03 06:07 3500462 ---ha-w- C:\logs.dat
2010-07-05 13:52 . 2010-07-05 13:36 17787900 ----a-w- c:\users\Majo\AppData\Roaming\Uniblue\DriverScanner\Download\hdaudio_func_01_ven_1002_dev_aa016_0_1_5945.exe
2010-07-01 12:45 . 2008-01-21 02:22 80051 ----a-w- c:\windows\system32\slmgr.vbs
2010-06-29 18:30 . 2010-06-29 18:30 38784 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-23 17:11 . 2006-11-02 12:35 -------- d-----w- c:\program files\Microsoft Games
2010-06-22 12:55 . 2010-06-22 12:55 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-06-17 12:56 . 2010-06-17 12:56 15086 ----a-r- c:\users\Majo\AppData\Roaming\Microsoft\Installer\{F01F95F8-7596-469D-A44B-C104106BA5F9}\launcher.exe
2010-06-17 12:26 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-06-17 12:25 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-06-15 13:13 . 2010-06-15 13:02 680 ----a-w- c:\users\Majo\AppData\Local\d3d9caps.dat
2010-06-02 02:55 . 2010-06-29 14:42 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2010-06-01 13:49 . 2010-06-01 13:49 3156992 --sh--w- C:\BLUDYBkB1Dc_save2pc.exe
2010-05-27 13:19 . 2010-05-27 13:19 853434 ----a-w- C:\Adobe CS5 Ultimate Activator.zip
2010-05-26 09:41 . 2010-06-29 14:42 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-05-26 09:41 . 2010-06-29 14:42 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-05-26 09:41 . 2010-06-29 14:42 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-05-26 09:41 . 2010-06-29 14:42 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2010-05-26 09:41 . 2010-06-29 14:42 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-05-20 11:52 . 2010-05-20 11:52 3156992 --sh--w- C:\BLUDYYaF6Jt_save2pc.exe
2010-05-04 18:42 . 2010-06-16 14:07 833024 ----a-w- c:\windows\system32\wininet.dll
2010-05-04 18:37 . 2010-06-16 14:07 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-05-04 17:03 . 2010-05-04 17:03 301056 ----a-w- C:\High Roller.exe
2010-05-04 16:53 . 2010-06-16 14:07 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2010-05-01 13:53 . 2010-06-16 14:03 2036224 ----a-w- c:\windows\system32\win32k.sys
2010-04-29 09:47 . 2010-04-29 09:47 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-04-29 09:47 . 2010-04-29 09:47 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-04-26 13:11 . 2010-04-26 13:11 788424 ----a-w- C:\cssrpg1.0.5.zip
2010-04-23 13:55 . 2010-06-16 14:11 2048 ----a-w- c:\windows\system32\tzres.dll
2010-04-16 16:10 . 2010-06-16 14:07 1314816 ----a-w- c:\windows\system32\quartz.dll
2010-04-16 16:05 . 2010-06-30 11:44 459776 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-04-16 16:05 . 2010-06-30 11:44 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-04-16 16:05 . 2010-06-30 11:44 541696 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-04-16 16:05 . 2010-06-30 11:44 2153984 ----a-w- c:\windows\AppPatch\AcGenral.dll
.

------- Sigcheck -------

[-] 2006-11-10 . 921D359C1168867B515C219ACCED9609 . 245248 . . [6.0.6000.16386] . . c:\windows\System32\shsvcs.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-08 15:40 1362320 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-08 1362320]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-08 1362320]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Skype"="d:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-06-16 322352]
"NCsoft Launcher"="c:\program files\NCSoft\Launcher\NCLauncher.exe" [2010-07-02 38184]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"ICQ"="c:\program files\ICQ7.2\ICQ.exe" [2010-06-17 133368]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingD6153"="del" [X]
"SpybotDeletingB256"="command.com" [2006-11-02 50648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-03-09 15872]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2145000]
"TNOD UP"="c:\program files\TNod User & Password Finder\TNODUP.exe" [2010-04-01 1811968]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 MySQL41;MySQL41;c:\program files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=c:\program files\MySQL\MySQL Server 5.1\my.ini MySQL41 [x]
R3 PAC207;Trust 100K Series Webcam;c:\windows\system32\DRIVERS\PFC027.SYS [2008-02-13 618112]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-06-15 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S2 a2free;a-squared Free Service;c:\program files\a-squared Free\a2service.exe [2010-04-15 1872320]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 c65013264;C-Media CM6501 Like Sound UDAX Interface;c:\windows\system32\drivers\c6501.sys [2007-02-07 1298944]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]

.
Contents of the 'Scheduled Tasks' folder

2010-07-14 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-07-10 13:35]

2010-07-14 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-07-10 12:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bigseekpro.com/facesmooch/{849BBF49 ... 0D61EE5ADB}
mStart Page = hxxp://www.bigseekpro.com/facesmooch/{849BBF49 ... 0D61EE5ADB}
IE: {{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - c:\program files\ICQ7.2\ICQ.exe
FF - ProfilePath - c:\users\Majo\AppData\Roaming\Mozilla\Firefox\Profiles\8nqlmetz.default\
FF - prefs.js: network.proxy.type - 2
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Java developer Script Browse - c:\windows\jusched.exe
HKLM-Run-C6501Sound - c6501.cpl



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-14 11:28
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mysql]
"ImagePath"="\"c:\world of warcraft tbc\AC Web Ultimate Repack\Server\mysql\bin\mysqld-nt\" \"--defaults-file=c:\world of warcraft tbc\AC Web Ultimate Repack\Server\mysql\bin\my.cnf\" mysql"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MySQL41]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL41"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2010-07-14 11:32:47
ComboFix-quarantined-files.txt 2010-07-14 09:32

Pre-Run: 2,594,803,712 bytes free
Post-Run: 2,442,371,072 bytes free

- - End Of File - - 218DBC35B6E97BFA9809EE2BEFF7F488

[motji]

Hezké odpoledne

Tyto složky znáte?
C:\RtmK(09)
c:\users\Majo\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1


poprosím o log ze rsitu, viz můj podpis.

A přečtěte si varování v mém podpise.

[ma11221]

jo proc??

[motji]

Co proč? Já se ptám, jestli je znáte, tedy o nich víte. Já je neznám a do pc Vám nevidím

[ma11221]

aha a co mam tam jeste pridat??

[motji]

Log ze Rsitu, odkaz najdete v mém podpise

[ma11221]

toto je z rsit
Logfile of random's system information tool 1.08 (written by random/random)
Run by Majo at 2010-07-14 18:00:55
Microsoft® Windows Extreme™ Gamers Edition Service Pack 1
System drive C: has 2 GB (1%) free of 157 GB
Total RAM: 3324 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:01:12, on 14/07/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18470)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
D:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NCSoft\Launcher\NCLauncher.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ManicTime\ManicTimeTracker.exe
C:\Program Files\Opera\opera.exe
D:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Majo\Downloads\RSIT.exe
C:\Program Files\trend micro\Majo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{8 ... 0D61EE5ADB}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{8 ... 0D61EE5ADB}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\FaceSmooch Toolbar\tbcore3.dll
O3 - Toolbar: GOM Player + Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [PAC207_Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [TNOD UP] "C:\Program Files\TNod User & Password Finder\TNODUP.exe" /i
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [ManicTime] C:\Program Files\ManicTime\ManicTimeTracker.exe /minimized /name:
O4 - Global Startup: Crystal Aion Launcher.lnk = D:\Program Files\NCsoft\AionEU\CrystalAion.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: mysql - Unknown owner - C:\World.exe (file missing)
O23 - Service: MySQL41 - Unknown owner - C:\Program.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 7092 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
GOM Player + Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-08 1362320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files\FaceSmooch Toolbar\tbcore3.dll [2010-02-16 2495488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - GOM Player + Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-08 1362320]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"PAC207_Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2007-12-10 323584]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2010-03-09 15872]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"TNOD UP"=C:\Program Files\TNod User & Password Finder\TNODUP.exe [2010-04-02 1811968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Skype"=D:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-06-16 322352]
"NCsoft Launcher"=C:\Program Files\NCSoft\Launcher\NCLauncher.exe [2010-07-02 38184]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-06-17 133368]
"ManicTime"=C:\Program Files\ManicTime\ManicTimeTracker.exe [2010-04-15 581960]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Crystal Aion Launcher.lnk - D:\Program Files\NCsoft\AionEU\CrystalAion.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2008-10-19 233888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=0
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-07-14 18:00:55 ----D---- C:\rsit
2010-07-14 18:00:55 ----D---- C:\Program Files\trend micro
2010-07-14 15:08:38 ----A---- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2010-07-14 15:07:01 ----D---- C:\Program Files\ManicTime
2010-07-14 11:32:51 ----SHD---- C:\$RECYCLE.BIN
2010-07-14 11:32:49 ----D---- C:\Windows\temp
2010-07-14 11:32:47 ----A---- C:\ComboFix.txt
2010-07-14 11:15:43 ----A---- C:\Windows\MBR.exe
2010-07-14 11:15:42 ----A---- C:\Windows\zip.exe
2010-07-14 11:15:42 ----A---- C:\Windows\SWSC.exe
2010-07-14 11:15:42 ----A---- C:\Windows\SWREG.exe
2010-07-14 11:15:42 ----A---- C:\Windows\sed.exe
2010-07-14 11:15:42 ----A---- C:\Windows\PEV.exe
2010-07-14 11:15:42 ----A---- C:\Windows\NIRCMD.exe
2010-07-14 11:15:42 ----A---- C:\Windows\grep.exe
2010-07-14 11:15:29 ----D---- C:\Windows\ERDNT
2010-07-14 11:13:42 ----D---- C:\Qoobox
2010-07-14 11:13:28 ----A---- C:\Windows\SWXCACLS.exe
2010-07-14 10:49:01 ----D---- C:\Program Files\a-squared Free
2010-07-13 18:00:42 ----A---- C:\Windows\wininit.ini
2010-07-13 16:56:50 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-07-13 16:56:50 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-07-13 12:58:34 ----D---- C:\Little Big Adventure
2010-07-13 09:59:33 ----D---- C:\WoW_AddonPack_TBC_2.4.3
2010-07-11 14:50:46 ----A---- C:\Windows\system32\d3dx9.dll
2010-07-11 14:50:46 ----A---- C:\Windows\system32\D3DX81ab.dll
2010-07-11 14:50:44 ----D---- C:\Program Files\Cheat Engine
2010-07-10 16:25:43 ----A---- C:\memory.txt
2010-07-10 16:25:03 ----D---- C:\ProgramData\Trymedia
2010-07-10 16:18:42 ----D---- C:\Program Files\Crashday - Speedcombat
2010-07-10 16:12:14 ----A---- C:\Windows\system32\LWCtPl.dll
2010-07-10 16:12:11 ----A---- C:\Windows\system32\W9xDAPI.dll
2010-07-10 16:12:11 ----A---- C:\Windows\system32\drivers\LUsbSys.sys
2010-07-10 16:12:11 ----A---- C:\Windows\system32\drivers\LHidLo.sys
2010-07-10 16:12:11 ----A---- C:\Windows\system32\drivers\LHidHi.sys
2010-07-10 16:12:11 ----A---- C:\Windows\system32\drivers\ihidfilt.sys
2010-07-10 16:12:10 ----D---- C:\Program Files\Common Files\Logitech
2010-07-10 16:12:10 ----A---- C:\Windows\system32\WMWizard.dll
2010-07-10 16:12:10 ----A---- C:\Windows\system32\WmJoyFrc.dll
2010-07-10 16:12:10 ----A---- C:\Windows\system32\W9XdInst.dll
2010-07-10 16:12:10 ----A---- C:\Windows\system32\LFLoad.sys
2010-07-10 16:11:52 ----D---- C:\Program Files\Logitech
2010-07-10 16:11:08 ----D---- C:\Program Files\Common Files\InstallShield
2010-07-10 15:14:24 ----D---- C:\Users\Majo\AppData\Roaming\IObit
2010-07-10 15:14:23 ----D---- C:\Program Files\IObit
2010-07-09 19:13:09 ----D---- C:\RtmK(09)
2010-07-09 12:47:25 ----A---- C:\ProgramData\driverinfo.txt
2010-07-08 20:47:54 ----D---- C:\Users\Majo\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-07-08 18:17:36 ----D---- C:\ProgramData\Blizzard Entertainment
2010-07-07 21:28:48 ----D---- C:\Users\Majo\AppData\Roaming\GetRightToGo
2010-07-06 22:07:26 ----D---- C:\Users\Majo\AppData\Roaming\Ubisoft
2010-07-06 22:06:46 ----D---- C:\ProgramData\Ubisoft
2010-07-06 16:53:00 ----A---- C:\Windows\WORDPAD.INI
2010-07-05 15:54:12 ----A---- C:\Windows\system32\RtkHDMI.dll
2010-07-05 15:54:12 ----A---- C:\Windows\system32\RHDMIExt.dll
2010-07-05 15:54:12 ----A---- C:\Windows\system32\RHCoInst.dll
2010-07-05 15:54:12 ----A---- C:\Windows\system32\RH3DHT32.dll
2010-07-05 15:54:12 ----A---- C:\Windows\system32\RH3DAA32.dll
2010-07-05 15:54:12 ----A---- C:\Windows\system32\drivers\RtHDMIV.sys
2010-07-05 15:35:08 ----D---- C:\ProgramData\DriverScanner
2010-07-05 15:35:08 ----D---- C:\Program Files\Uniblue
2010-07-05 15:10:35 ----D---- C:\Program Files\TNod User & Password Finder
2010-07-05 15:10:00 ----D---- C:\Users\Majo\AppData\Roaming\ESET
2010-07-05 15:07:56 ----D---- C:\ProgramData\ESET
2010-07-05 15:07:56 ----D---- C:\Program Files\ESET
2010-07-04 20:32:02 ----D---- C:\Users\Majo\AppData\Roaming\AbsoluteTelnet
2010-07-04 20:32:00 ----D---- C:\Program Files\AbsoluteTelnet
2010-07-04 16:51:44 ----D---- C:\World of Warcraft TBC
2010-07-03 19:29:32 ----D---- C:\Program Files\Mozilla Firefox
2010-07-03 19:11:52 ----D---- C:\Program Files\FaceSmooch Toolbar
2010-07-01 14:47:08 ----A---- C:\Windows\ntbtlog.txt
2010-07-01 13:55:08 ----D---- C:\Program Files\Counter-Strike Source
2010-07-01 11:45:01 ----D---- C:\Windows\system32\Adobe
2010-06-30 13:49:20 ----A---- C:\Windows\system32\psisdecd.dll
2010-06-30 13:49:19 ----A---- C:\Windows\system32\EncDec.dll
2010-06-30 13:44:21 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-30 13:44:21 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-29 20:42:35 ----D---- C:\Users\Majo\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-29 20:42:35 ----D---- C:\Users\Majo\AppData\Roaming\Adobe Mini Bridge CS5
2010-06-29 20:32:26 ----D---- C:\Program Files\Adobe Media Player
2010-06-29 20:30:39 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-06-29 20:30:36 ----D---- C:\Program Files\Adobe
2010-06-29 20:23:12 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-06-29 20:23:09 ----D---- C:\ProgramData\Adobe
2010-06-29 20:23:09 ----D---- C:\Program Files\Common Files\Adobe
2010-06-29 17:19:35 ----D---- C:\Program Files\Microsoft.NET
2010-06-29 17:17:18 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-29 17:17:18 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-29 17:17:18 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-29 17:17:18 ----A---- C:\Windows\system32\mscoree.dll
2010-06-29 17:17:18 ----A---- C:\Windows\system32\dfshim.dll
2010-06-29 16:43:02 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-06-29 16:43:02 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-06-29 16:42:59 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-06-29 16:42:58 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-06-29 16:42:58 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-06-29 16:42:58 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-06-29 16:42:58 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-06-29 16:42:57 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-06-29 16:42:57 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-06-29 16:42:57 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-06-29 16:42:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-06-29 16:42:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-06-29 16:42:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-06-29 16:42:55 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-06-29 16:42:54 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-06-29 16:42:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-06-29 16:42:53 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-06-29 16:42:53 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-06-29 16:42:53 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-06-29 16:42:51 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-06-29 16:42:51 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-06-29 16:42:51 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-06-29 16:42:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-06-29 16:41:17 ----D---- C:\Windows\system32\directx
2010-06-29 13:46:54 ----D---- C:\Program Files\SpeedFan
2010-06-28 17:41:36 ----D---- C:\ProgramData\page
2010-06-28 17:41:36 ----D---- C:\Program Files\Ashampoo
2010-06-28 13:18:45 ----D---- C:\Program Files\SecondLifeViewer2
2010-06-28 13:11:25 ----D---- C:\Users\Majo\AppData\Roaming\SecondLife
2010-06-27 19:01:55 ----D---- C:\Program Files\NCSoft
2010-06-27 11:33:22 ----D---- C:\Program Files\PFPortChecker
2010-06-26 13:05:19 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-06-25 20:48:32 ----D---- C:\ProgramData\Blizzard
2010-06-25 18:18:03 ----A---- C:\Windows\system32\libmysql_d.dll
2010-06-23 19:36:30 ----RASH---- C:\MSDOS.SYS
2010-06-23 19:36:30 ----RASH---- C:\IO.SYS
2010-06-23 19:35:25 ----D---- C:\Program Files\Unlocker
2010-06-23 19:10:23 ----D---- C:\ProgramData\Microsoft Games
2010-06-23 19:10:05 ----D---- C:\Users\Majo\AppData\Roaming\Microsoft Game Studios
2010-06-22 18:12:11 ----D---- C:\Program Files\MySQL
2010-06-22 14:53:33 ----A---- C:\Windows\my.ini.old
2010-06-21 20:08:35 ----D---- C:\Program Files\MSXML 4.0
2010-06-21 16:01:11 ----D---- C:\Windows\system32\appmgmt
2010-06-20 20:52:32 ----D---- C:\ProgramData\MySQL
2010-06-20 19:35:25 ----AH---- C:\Windows\system32\hamachi.sys
2010-06-20 19:35:23 ----D---- C:\Program Files\LogMeIn Hamachi
2010-06-17 17:07:32 ----D---- C:\Program Files\ICQ6Toolbar
2010-06-17 17:07:31 ----D---- C:\Users\Majo\AppData\Roaming\Mozilla
2010-06-17 17:07:31 ----D---- C:\ProgramData\ICQ
2010-06-17 17:07:15 ----D---- C:\Program Files\ICQ7.2
2010-06-17 15:03:23 ----D---- C:\Windows\Sun
2010-06-17 14:58:42 ----D---- C:\.jagex_cache_32
2010-06-17 14:57:04 ----D---- C:\Windows\.jagex_cache_32
2010-06-17 14:55:52 ----D---- C:\ProgramData\Sun
2010-06-17 14:55:50 ----D---- C:\Program Files\Common Files\Java
2010-06-17 14:55:21 ----A---- C:\Windows\system32\javaws.exe
2010-06-17 14:55:21 ----A---- C:\Windows\system32\deployJava1.dll
2010-06-17 14:55:20 ----A---- C:\Windows\system32\javaw.exe
2010-06-17 14:55:20 ----A---- C:\Windows\system32\java.exe
2010-06-17 14:54:54 ----D---- C:\Program Files\Java
2010-06-17 14:06:43 ----A---- C:\Windows\system32\thawbrkr.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\srchadmin.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\SearchFilterHost.exe
2010-06-17 14:06:43 ----A---- C:\Windows\system32\propsys.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\propdefs.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\msstrc.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\mssprxy.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\mssitlb.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\msshsq.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\msshooks.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\msscb.dll
2010-06-17 14:06:43 ----A---- C:\Windows\system32\korwbrkr.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\xmlfilter.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\wsepno.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\tquery.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2010-06-17 14:06:42 ----A---- C:\Windows\system32\SearchIndexer.exe
2010-06-17 14:06:42 ----A---- C:\Windows\system32\rtffilt.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\offfilt.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\nlhtml.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\mssvp.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\mssrch.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\mssphtb.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\mssph.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\msscntrs.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\mimefilt.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\chtbrkr.dll
2010-06-17 14:06:42 ----A---- C:\Windows\system32\chsbrkr.dll
2010-06-17 13:54:15 ----A---- C:\Windows\system32\browserchoice.exe
2010-06-17 13:48:00 ----D---- C:\Users\Majo\AppData\Roaming\ICQ
2010-06-17 13:46:28 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-06-17 13:46:28 ----A---- C:\Windows\system32\infocardapi.dll
2010-06-17 13:46:28 ----A---- C:\Windows\system32\icardres.dll
2010-06-17 13:46:28 ----A---- C:\Windows\system32\icardagt.exe
2010-06-17 13:46:27 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2010-06-17 13:41:03 ----A---- C:\Windows\system32\mscorier.dll
2010-06-17 13:40:59 ----A---- C:\Windows\system32\mscories.dll
2010-06-17 13:38:57 ----A---- C:\Windows\system32\nshhttp.dll
2010-06-17 13:38:56 ----A---- C:\Windows\system32\httpapi.dll
2010-06-17 13:38:56 ----A---- C:\Windows\system32\drivers\http.sys
2010-06-16 17:51:37 ----D---- C:\Users\Majo\AppData\Roaming\TeamViewer
2010-06-16 17:36:24 ----D---- C:\Program Files\SpacialAudio
2010-06-16 17:36:17 ----A---- C:\Windows\system32\GDS32.DLL
2010-06-16 17:36:04 ----D---- C:\Program Files\Firebird
2010-06-16 17:32:29 ----D---- C:\Program Files\uTorrent
2010-06-16 17:32:24 ----D---- C:\Users\Majo\AppData\Roaming\uTorrent
2010-06-16 16:40:50 ----D---- C:\Users\Majo\AppData\Roaming\PhotoScape
2010-06-16 16:40:41 ----D---- C:\Program Files\PhotoScape
2010-06-16 16:28:59 ----D---- C:\Program Files\PhotoFilter
2010-06-16 16:24:20 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2010-06-16 16:24:17 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2010-06-16 16:24:09 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2010-06-16 16:13:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-06-16 16:13:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-06-16 16:13:24 ----A---- C:\Windows\system32\kernel32.dll
2010-06-16 16:13:23 ----A---- C:\Windows\system32\apilogen.dll
2010-06-16 16:13:23 ----A---- C:\Windows\system32\amxread.dll
2010-06-16 16:13:18 ----A---- C:\Windows\system32\wmpdxm.dll
2010-06-16 16:13:13 ----A---- C:\Windows\system32\schannel.dll
2010-06-16 16:13:10 ----A---- C:\Windows\system32\pacerprf.dll
2010-06-16 16:13:10 ----A---- C:\Windows\system32\drivers\pacer.sys
2010-06-16 16:12:56 ----A---- C:\Windows\system32\Faultrep.dll
2010-06-16 16:12:55 ----A---- C:\Windows\system32\wersvc.dll
2010-06-16 16:12:45 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-06-16 16:12:45 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-06-16 16:12:45 ----A---- C:\Windows\system32\secproc_isv.dll
2010-06-16 16:12:45 ----A---- C:\Windows\system32\secproc.dll
2010-06-16 16:12:45 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-06-16 16:12:45 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-06-16 16:12:45 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-06-16 16:12:45 ----A---- C:\Windows\system32\RMActivate.exe
2010-06-16 16:12:44 ----A---- C:\Windows\system32\msdrm.dll
2010-06-16 16:12:28 ----A---- C:\Windows\system32\t2embed.dll
2010-06-16 16:12:16 ----A---- C:\Windows\system32\IPSECSVC.DLL
2010-06-16 16:12:15 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-06-16 16:12:15 ----A---- C:\Windows\system32\drivers\srv.sys
2010-06-16 16:12:13 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-06-16 16:12:08 ----A---- C:\Windows\system32\netiohlp.dll
2010-06-16 16:12:07 ----A---- C:\Windows\system32\TCPSVCS.EXE
2010-06-16 16:12:07 ----A---- C:\Windows\system32\ROUTE.EXE
2010-06-16 16:12:07 ----A---- C:\Windows\system32\NETSTAT.EXE
2010-06-16 16:12:07 ----A---- C:\Windows\system32\netevent.dll
2010-06-16 16:12:07 ----A---- C:\Windows\system32\MRINFO.EXE
2010-06-16 16:12:07 ----A---- C:\Windows\system32\HOSTNAME.EXE
2010-06-16 16:12:07 ----A---- C:\Windows\system32\finger.exe
2010-06-16 16:12:07 ----A---- C:\Windows\system32\ARP.EXE
2010-06-16 16:11:44 ----A---- C:\Windows\system32\wlansvc.dll
2010-06-16 16:11:44 ----A---- C:\Windows\system32\wlansec.dll
2010-06-16 16:11:44 ----A---- C:\Windows\system32\wlanmsm.dll
2010-06-16 16:11:44 ----A---- C:\Windows\system32\L2SecHC.dll
2010-06-16 16:11:41 ----A---- C:\Windows\system32\msxml6.dll
2010-06-16 16:11:41 ----A---- C:\Windows\system32\msxml3.dll
2010-06-16 16:11:38 ----A---- C:\Windows\system32\wdigest.dll
2010-06-16 16:11:38 ----A---- C:\Windows\system32\secur32.dll
2010-06-16 16:11:38 ----A---- C:\Windows\system32\msv1_0.dll
2010-06-16 16:11:38 ----A---- C:\Windows\system32\lsass.exe
2010-06-16 16:11:38 ----A---- C:\Windows\system32\lsasrv.dll
2010-06-16 16:11:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2010-06-16 16:11:36 ----A---- C:\Windows\system32\inetcomm.dll
2010-06-16 16:11:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-06-16 16:11:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-06-16 16:11:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-06-16 16:11:29 ----A---- C:\Windows\system32\WMVCORE.DLL
2010-06-16 16:11:28 ----A---- C:\Windows\system32\mf.dll
2010-06-16 16:11:25 ----A---- C:\Windows\system32\winhttp.dll
2010-06-16 16:11:23 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-16 16:11:14 ----A---- C:\Windows\system32\vbscript.dll
2010-06-16 16:11:12 ----A---- C:\Windows\system32\atl.dll
2010-06-16 16:11:11 ----A---- C:\Windows\system32\gdi32.dll
2010-06-16 16:11:08 ----A---- C:\Windows\system32\tzres.dll
2010-06-16 16:10:52 ----A---- C:\Windows\system32\xolehlp.dll
2010-06-16 16:10:52 ----A---- C:\Windows\system32\msdtcprx.dll
2010-06-16 16:10:50 ----A---- C:\Windows\system32\wkssvc.dll
2010-06-16 16:10:47 ----A---- C:\Windows\system32\mstscax.dll
2010-06-16 16:10:45 ----A---- C:\Windows\system32\es.dll
2010-06-16 16:10:44 ----A---- C:\Windows\system32\wmpeffects.dll
2010-06-16 16:10:42 ----A---- C:\Windows\system32\fontsub.dll
2010-06-16 16:10:42 ----A---- C:\Windows\system32\dciman32.dll
2010-06-16 16:10:42 ----A---- C:\Windows\system32\atmfd.dll
2010-06-16 16:10:41 ----A---- C:\Windows\system32\atmlib.dll
2010-06-16 16:10:40 ----A---- C:\Windows\system32\netapi32.dll
2010-06-16 16:08:27 ----A---- C:\Windows\system32\shell32.dll
2010-06-16 16:08:21 ----A---- C:\Windows\system32\localspl.dll
2010-06-16 16:08:19 ----A---- C:\Windows\explorer.exe
2010-06-16 16:08:09 ----A---- C:\Windows\system32\kd1394.dll
2010-06-16 16:08:08 ----A---- C:\Windows\system32\winresume.exe
2010-06-16 16:08:08 ----A---- C:\Windows\system32\winload.exe
2010-06-16 16:08:08 ----A---- C:\Windows\system32\ci.dll
2010-06-16 16:08:06 ----A---- C:\Windows\system32\srcore.dll
2010-06-16 16:08:06 ----A---- C:\Windows\system32\setbcdlocale.dll
2010-06-16 16:08:05 ----A---- C:\Windows\system32\srdelayed.exe
2010-06-16 16:08:05 ----A---- C:\Windows\system32\srclient.dll
2010-06-16 16:08:05 ----A---- C:\Windows\system32\rstrui.exe
2010-06-16 16:07:42 ----A---- C:\Windows\system32\rpcss.dll
2010-06-16 16:07:41 ----A---- C:\Windows\system32\sdohlp.dll
2010-06-16 16:07:41 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-06-16 16:07:41 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-06-16 16:07:41 ----A---- C:\Windows\system32\iasrecst.dll
2010-06-16 16:07:41 ----A---- C:\Windows\system32\iashost.exe
2010-06-16 16:07:41 ----A---- C:\Windows\system32\iasdatastore.dll
2010-06-16 16:07:41 ----A---- C:\Windows\system32\iasads.dll
2010-06-16 16:07:32 ----A---- C:\Windows\system32\jscript.dll
2010-06-16 16:07:26 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-06-16 16:07:24 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-06-16 16:07:24 ----A---- C:\Windows\system32\drivers\tunnel.sys
2010-06-16 16:07:15 ----A---- C:\Windows\system32\wininet.dll
2010-06-16 16:07:15 ----A---- C:\Windows\system32\occache.dll
2010-06-16 16:07:15 ----A---- C:\Windows\system32\mshtml.dll
2010-06-16 16:07:14 ----A---- C:\Windows\system32\urlmon.dll
2010-06-16 16:07:14 ----A---- C:\Windows\system32\ieframe.dll
2010-06-16 16:07:14 ----A---- C:\Windows\system32\ieapfltr.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\mstime.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\mshtmled.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-16 16:07:13 ----A---- C:\Windows\system32\iertutil.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\iepeers.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\ieencode.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-16 16:07:13 ----A---- C:\Windows\system32\ieaksie.dll
2010-06-16 16:07:12 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-16 16:07:05 ----A---- C:\Windows\system32\quartz.dll
2010-06-16 16:07:03 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-06-16 16:07:03 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-06-16 16:07:02 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-06-16 16:06:37 ----A---- C:\Windows\system32\win32spl.dll
2010-06-16 16:05:49 ----A---- C:\Windows\system32\drivers\rmcast.sys
2010-06-16 16:05:42 ----A---- C:\Windows\system32\emdmgmt.dll
2010-06-16 16:05:42 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-06-16 16:05:42 ----A---- C:\Windows\system32\dataclen.dll
2010-06-16 16:05:41 ----A---- C:\Windows\system32\drivers\nwifi.sys
2010-06-16 16:05:41 ----A---- C:\Windows\system32\cdd.dll
2010-06-16 16:05:20 ----A---- C:\Windows\system32\gameux.dll
2010-06-16 16:05:15 ----N---- C:\Windows\system32\MpSigStub.exe
2010-06-16 16:05:02 ----A---- C:\Windows\system32\WMNetMgr.dll
2010-06-16 16:05:01 ----A---- C:\Windows\system32\logagent.exe
2010-06-16 16:04:59 ----A---- C:\Windows\system32\wshext.dll
2010-06-16 16:04:59 ----A---- C:\Windows\system32\wscript.exe
2010-06-16 16:04:59 ----A---- C:\Windows\system32\scrrun.dll
2010-06-16 16:04:59 ----A---- C:\Windows\system32\scrobj.dll
2010-06-16 16:04:59 ----A---- C:\Windows\system32\cscript.exe
2010-06-16 16:04:56 ----A---- C:\Windows\system32\msasn1.dll
2010-06-16 16:04:55 ----A---- C:\Windows\system32\connect.dll
2010-06-16 16:04:53 ----A---- C:\Windows\system32\rpcrt4.dll
2010-06-16 16:03:52 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-06-16 16:03:50 ----A---- C:\Windows\system32\win32k.sys
2010-06-16 16:03:48 ----A---- C:\Windows\system32\rastls.dll
2010-06-16 16:03:48 ----A---- C:\Windows\system32\raschap.dll
2010-06-16 16:03:47 ----A---- C:\Windows\system32\WSDApi.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\tsbyuv.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\msyuv.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\msvidc32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\msvfw32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\msrle32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\mciavi32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\iyuv_32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\avifil32.dll
2010-06-16 16:03:44 ----A---- C:\Windows\system32\avicap32.dll
2010-06-16 16:03:42 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2010-06-16 16:03:35 ----A---- C:\Windows\system32\wmp.dll
2010-06-16 16:03:34 ----A---- C:\Windows\system32\unregmp2.exe
2010-06-16 16:03:33 ----A---- C:\Windows\system32\spwmp.dll
2010-06-16 16:03:33 ----A---- C:\Windows\system32\dxmasf.dll
2010-06-16 16:03:32 ----A---- C:\Windows\system32\wmploc.DLL
2010-06-16 00:31:40 ----D---- C:\Windows\Panther
2010-06-16 00:31:08 ----D---- C:\Windows\system32\OEM
2010-06-16 00:23:04 ----D---- C:\Windows.old
2010-06-15 21:25:19 ----A---- C:\Windows\system32\Remove.exe
2010-06-15 21:25:18 ----A---- C:\Windows\system32\Remover.ini
2010-06-15 21:25:18 ----A---- C:\Windows\system32\drivers\PFC027.SYS
2010-06-15 21:25:18 ----A---- C:\Windows\system32\CoInst_080213.dll
2010-06-15 21:25:16 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-15 21:25:16 ----D---- C:\Windows\PixArt
2010-06-15 21:25:16 ----D---- C:\Program Files\Trust
2010-06-15 21:25:16 ----D---- C:\Program Files\Common Files\PAC207
2010-06-15 21:25:16 ----A---- C:\Windows\system32\SP207.ini
2010-06-15 21:25:16 ----A---- C:\Windows\system32\P207USD.dll
2010-06-15 21:24:52 ----D---- C:\Users\Majo\AppData\Roaming\InstallShield
2010-06-15 19:21:12 ----D---- C:\Fraps2
2010-06-15 19:09:34 ----D---- C:\Ovladace
2010-06-15 19:04:45 ----A---- C:\Windows\system32\difxapi.dll
2010-06-15 19:04:45 ----A---- C:\Windows\system32\Cmeau6501.exe
2010-06-15 19:04:07 ----A---- C:\Windows\VMix.dll
2010-06-15 19:04:07 ----A---- C:\Windows\system32\drivers\c6501.sys
2010-06-15 19:04:07 ----A---- C:\Windows\system32\c6501rm.exe
2010-06-15 19:04:07 ----A---- C:\Windows\system32\c6501rm.dll
2010-06-15 19:04:07 ----A---- C:\Windows\system32\c6501p.dll
2010-06-15 19:04:07 ----A---- C:\Windows\system32\c6501a3d.dll
2010-06-15 19:04:07 ----A---- C:\Windows\system32\a3d.dll
2010-06-15 19:04:07 ----A---- C:\Windows\c6501.ini
2010-06-15 18:55:18 ----A---- C:\Windows\system32\CmdLineExt.dll
2010-06-15 18:47:23 ----D---- C:\Program Files\Driver-Soft
2010-06-15 18:40:48 ----A---- C:\Windows\system32\XceedZip.dll
2010-06-15 18:31:03 ----HDC---- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2010-06-15 18:25:48 ----D---- C:\ProgramData\Uniblue
2010-06-15 18:25:41 ----D---- C:\Users\Majo\AppData\Roaming\Uniblue
2010-06-15 18:00:37 ----D---- C:\Program Files\Realtek
2010-06-15 18:00:37 ----A---- C:\Windows\DIFxAPI.dll
2010-06-15 18:00:35 ----HD---- C:\Program Files\Temp
2010-06-15 17:53:42 ----D---- C:\Program Files\Common Files\Skype
2010-06-15 17:53:32 ----D---- C:\ProgramData\Skype
2010-06-15 17:52:01 ----D---- C:\Users\Majo\AppData\Roaming\Leadertech
2010-06-15 17:45:52 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-06-15 17:45:52 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-06-15 17:45:51 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-06-15 17:45:50 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\xinput1_3.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-06-15 17:45:49 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-06-15 17:45:46 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-06-15 17:45:46 ----A---- C:\Windows\system32\d3dx10.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\xinput1_2.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\xinput1_1.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-06-15 17:45:45 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-06-15 17:45:44 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-06-15 17:45:42 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-06-15 17:45:42 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-06-15 17:45:42 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-06-15 17:45:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-06-15 17:39:07 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-06-15 17:37:33 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-06-15 17:37:19 ----D---- C:\Program Files\DAEMON Tools Lite
2010-06-15 17:37:10 ----D---- C:\Users\Majo\AppData\Roaming\DAEMON Tools Lite
2010-06-15 17:33:16 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-15 17:22:56 ----D---- C:\Users\Majo\AppData\Roaming\Macromedia
2010-06-15 17:22:56 ----D---- C:\Users\Majo\AppData\Roaming\Adobe
2010-06-15 17:14:40 ----D---- C:\Program Files\Nextus
2010-06-15 17:13:52 ----D---- C:\Program Files\WinRAR
2010-06-15 16:49:13 ----D---- C:\Program Files\Ask.com
2010-06-15 16:48:55 ----D---- C:\Program Files\GRETECH
2010-06-15 16:45:22 ----D---- C:\Windows\system32\Macromed
2010-06-15 16:43:40 ----D---- C:\Program Files\AMD
2010-06-15 16:27:15 ----D---- C:\Program Files\Opera
2010-06-15 16:27:11 ----D---- C:\Users\Majo\AppData\Roaming\Skype
2010-06-15 16:26:55 ----SHD---- C:\Windows\Installer
2010-06-15 16:25:08 ----D---- C:\Users\Majo\AppData\Roaming\Opera
2010-06-15 16:18:57 ----ASH---- C:\hiberfil.sys
2010-06-15 15:49:04 ----D---- C:\Windows\SoftwareDistribution
2010-06-15 15:47:02 ----D---- C:\Windows\CSC
2010-06-15 15:32:35 ----ASH---- C:\pagefile.sys
2010-06-15 15:10:57 ----A---- C:\Windows\system32\wintrust.dll
2010-06-15 15:10:56 ----A---- C:\Windows\system32\cabview.dll
2010-06-15 15:02:30 ----D---- C:\Users\Majo\AppData\Roaming\Identities
2010-06-15 15:02:14 ----SD---- C:\Users\Majo\AppData\Roaming\Microsoft
2010-06-15 15:02:14 ----D---- C:\Users\Majo\AppData\Roaming\Media Center Programs
2010-06-15 15:00:11 ----A---- C:\Windows\system32\wups2.dll
2010-06-15 15:00:11 ----A---- C:\Windows\system32\wucltux.dll
2010-06-15 15:00:11 ----A---- C:\Windows\system32\wuaueng.dll
2010-06-15 15:00:11 ----A---- C:\Windows\system32\wuauclt.exe
2010-06-15 14:59:40 ----A---- C:\Windows\system32\wups.dll
2010-06-15 14:59:40 ----A---- C:\Windows\system32\wudriver.dll
2010-06-15 14:59:40 ----A---- C:\Windows\system32\wuapi.dll
2010-06-15 14:59:22 ----A---- C:\Windows\system32\wuwebv.dll
2010-06-15 14:59:22 ----A---- C:\Windows\system32\wuapp.exe
2010-06-15 14:57:39 ----D---- C:\Windows\Debug

======List of files/folders modified in the last 1 months======

2010-07-14 18:00:55 ----RD---- C:\Program Files
2010-07-14 15:08:38 ----D---- C:\ProgramData
2010-07-14 15:06:53 ----SHD---- C:\System Volume Information
2010-07-14 11:32:49 ----D---- C:\Windows
2010-07-14 11:28:11 ----A---- C:\Windows\system.ini
2010-07-14 11:28:03 ----D---- C:\Windows\system32\drivers\etc
2010-07-14 11:27:44 ----D---- C:\Windows\System32
2010-07-14 11:23:52 ----D---- C:\Windows\system32\drivers
2010-07-14 11:23:52 ----D---- C:\Windows\AppPatch
2010-07-14 11:23:50 ----D---- C:\Program Files\Common Files
2010-07-14 10:28:52 ----D---- C:\Windows\inf
2010-07-14 10:28:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-12 22:45:59 ----D---- C:\Windows\Prefetch
2010-07-12 21:05:32 ----D---- C:\BLUDY
2010-07-12 17:27:42 ----D---- C:\Ocne Klamy
2010-07-10 16:11:51 ----D---- C:\Windows\system32\catroot2
2010-07-10 15:16:47 ----D---- C:\Windows\Tasks
2010-07-10 15:16:47 ----D---- C:\Windows\system32\Tasks
2010-07-06 22:06:22 ----RSD---- C:\Windows\assembly
2010-07-05 17:28:42 ----D---- C:\Windows\system32\NDF
2010-07-05 15:57:04 ----RSHD---- C:\Windows\system32\install
2010-07-05 15:54:30 ----D---- C:\Windows\system32\catroot
2010-07-05 15:14:52 ----D---- C:\Windows\system32\WDI
2010-07-04 21:30:22 ----D---- C:\CS 1.6 V28
2010-07-04 20:32:02 ----SD---- C:\ProgramData\Microsoft
2010-07-04 13:34:42 ----D---- C:\Chess3D
2010-07-04 13:03:16 ----D---- C:\Windows\winsxs
2010-07-04 12:56:17 ----D---- C:\Windows\rescache
2010-07-03 14:50:24 ----D---- C:\ConvertX To DVD + Keygen
2010-07-03 14:50:06 ----D---- C:\ConvertX
2010-07-02 10:23:04 ----D---- C:\Windows\Microsoft.NET
2010-07-01 19:30:06 ----D---- C:\sfe_24
2010-07-01 14:50:49 ----D---- C:\Windows\addins
2010-07-01 14:45:07 ----A---- C:\Windows\system32\slmgr.vbs
2010-06-30 13:56:29 ----D---- C:\Windows\system32\wbem
2010-06-30 13:49:59 ----D---- C:\Windows\ehome
2010-06-29 20:33:21 ----RSD---- C:\Windows\Fonts
2010-06-29 17:19:41 ----D---- C:\Windows\system32\en-US
2010-06-23 21:05:27 ----D---- C:\Windows\system32\LogFiles
2010-06-23 19:11:06 ----D---- C:\Program Files\Microsoft Games
2010-06-23 19:10:28 ----D---- C:\Program Files\Common Files\microsoft shared
2010-06-23 15:51:52 ----D---- C:\Windows\Logs
2010-06-22 20:55:08 ----D---- C:\VSO.ConvertXToDVD.4.0.10.324.Final
2010-06-22 14:55:01 ----D---- C:\Windows\system32\drivers\UMDF
2010-06-20 19:56:06 ----D---- C:\Windows\twain_32
2010-06-17 14:26:13 ----D---- C:\Program Files\Windows Mail
2010-06-17 14:26:11 ----D---- C:\Windows\PolicyDefinitions
2010-06-17 14:26:10 ----D---- C:\Program Files\Movie Maker
2010-06-17 14:26:06 ----D---- C:\Windows\system32\Boot
2010-06-17 14:26:05 ----D---- C:\Windows\system32\migration
2010-06-17 14:26:05 ----D---- C:\Program Files\Internet Explorer
2010-06-17 14:26:04 ----D---- C:\Windows\system32\manifeststore
2010-06-17 14:26:03 ----D---- C:\Windows\system32\XPSViewer
2010-06-17 14:25:55 ----D---- C:\Program Files\Windows Media Player
2010-06-16 00:31:28 ----RAS---- C:\BOOTSECT.BAK
2010-06-16 00:31:27 ----D---- C:\Boot
2010-06-15 21:25:18 ----A---- C:\Windows\win.ini
2010-06-15 21:23:42 ----SD---- C:\Windows\Downloaded Program Files
2010-06-15 19:07:30 ----D---- C:\Windows\system
2010-06-15 15:02:13 ----RD---- C:\Users
2010-06-15 14:58:07 ----D---- C:\Windows\system32\restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fvevol;BitLocker Drive Encryption Filter Driver; C:\Windows\System32\DRIVERS\fvevol.sys [2008-01-21 145464]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-15 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-06-03 3695104]
R3 c65013264;C-Media CM6501 Like Sound UDAX Interface; C:\Windows\system32\drivers\c6501.sys [2007-02-07 1298944]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2009-09-25 159232]
S3 amys6jcb;amys6jcb; C:\Windows\system32\drivers\amys6jcb.sys []
S3 catchme;catchme; \??\C:\Users\Majo\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 PAC207;Trust 100K Series Webcam; C:\Windows\system32\DRIVERS\PFC027.SYS [2008-02-13 618112]
S3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2010-04-15 1872320]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-06-03 684032]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 mysql;mysql; C:\World of Warcraft TBC\AC Web Ultimate Repack\Server\mysql\bin\mysqld-nt --defaults-file=C:\World of Warcraft TBC\AC Web Ultimate Repack\Server\mysql\bin\my.cnf mysql []
S2 MySQL41;MySQL41; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=C:\Program Files\MySQL\MySQL Server 5.1\my.ini MySQL41 []
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[motji]

Udělejte na disku místo aspon na 5GB, 2GB jsou málo.

tuto stránku znáte?
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{8 ... 0D61EE5ADB}

odinstalujte Asktoolbar a Daemon toolbar


Ale v první řadě odinstalujte ten nelegální NOd a dejte nějaký free antivir, Avast nebo Aviru, jinak nepokračujeme .
Podle pravidel fora se zde nelegálními programy nezabýváme.

[ma11221]

no uz sem to odstranil co dal??

[ma11221]

Halo co dalej???

[ma11221]

UZ sem to odinstaloval

[motji]

Musíte vydržet, já nesedím pořád u počítače

tuto stránku znáte?
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{8 ... 0D61EE5ADB}

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Folder::
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\Ask.com
C:\Program Files\TNod User & Password Finder
 C:\Users\Majo\AppData\Roaming\ESET
C:\ProgramData\ESET
 C:\Program Files\ESET

Dirlook::
C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci




Otestujte na http://www.virustotal.com

C:\Windows\system32\drivers\c6501.sys
C:\Windows\system32\Remove.exe
c:\windows\System32\shsvcs.dll



Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.

[ma11221]

mas team viewer??

[ma11221]

prvy http://www.virustotal.com/analisis/2daf ... 1279127430
druhy http://www.virustotal.com/cs/analisis/a ... 1279128091
Treti http://www.virustotal.com/cs/analisis/1 ... 1279128270