PC nereaguje

[Miri@]

Dobrý den,

asi před týdnem jsem musela přeinstalovat operační systém (Win7), protože počítač nešel vůbec zapnout a to ani v nouzovém režimu. Po přeinstalování počítač začal fungovat zase normálně, až dodneška. Počítač sice lze zapnout, ale když kliknu na nějakou ikonku tak, přestane úplně reagovat, prosím o kontrolu logu

děkuji.




Logfile of random's system information tool 1.09 (written by random/random)
Run by Anh at 2011-09-16 19:34:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 438 GB (95%) free of 462 GB
Total RAM: 4003 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:34:02, on 16.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Safe mode with network support

Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Anh.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ModemOnHold] "C:\Program Files (x86)\Netwaiting\netWaiting.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Trend Micro Client/Server Security Agent RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\ntrtscan.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Trend Micro Client/Server Security Agent (svcGenericHost) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\tmlisten.exe
O23 - Service: Trend Micro Client/Server Security Agent Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmPfw.exe
O23 - Service: Trend Micro Client/Server Security Agent Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11432 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
C:\Windows\Explorer.EXE
ctfmon.exe
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=1156.0090B2C0.1136026089 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=1156.0090B160.946998060 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Anh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0\npSkypeChromePlugin.dll" --lang=cs --channel=1156.008F5A80.981362109 /prefetch:4
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=1156.069A56E0.96694067 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Anh\AppData\Local\Google\Chrome\APPLIC~1\130782~1.220\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Anh\AppData\Local\Google\Chrome\Application\13.0.782.220\gcswf32.dll" --lang=cs --channel=1156.06877000.1453079512 --flash-broker=1972 /prefetch:4
"C:\Users\Anh\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=1156.069A5000.309964051 /prefetch:3
"C:\Users\Anh\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Anh\AppData\Roaming\Mozilla\Firefox\Profiles\ft8y4vxm.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll [2010-07-21 285520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll [2010-07-21 218448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2010-12-17 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]
"AtherosBtStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [2010-12-17 613536]
"AthBtTray"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [2010-12-17 379040]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-01-20 525312]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-11-28 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-11-28 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-11-28 417304]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"=C:\Program Files (x86)\Netwaiting\netWaiting.exe [2008-01-16 25856]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2011-06-15 15141768]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2010-08-11 487561]
"OfficeScanNT Monitor"=C:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe [2011-02-27 1708048]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-06 336384]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-11-28 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-09-16 19:20:05 ----D---- C:\rsit
2011-09-16 19:20:05 ----D---- C:\Program Files\trend micro
2011-09-16 13:20:58 ----A---- C:\Windows\ntbtlog.txt
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-09-13 16:05:03 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-09-13 16:05:02 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-09-13 16:05:01 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-09-13 16:05:01 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-09-13 16:04:57 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-09-13 16:04:57 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-09-13 16:04:57 ----A---- C:\Windows\system32\fsutil.exe
2011-09-13 16:04:57 ----A---- C:\Windows\system32\esent.dll
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\storport.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-09-13 16:04:57 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-09-13 16:04:56 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-09-13 00:35:59 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-09-12 18:44:41 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-09-12 18:44:41 ----A---- C:\Windows\system32\tzres.dll
2011-09-12 18:44:05 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-09-12 18:44:05 ----A---- C:\Windows\system32\xmllite.dll
2011-09-12 18:44:04 ----A---- C:\Windows\system32\kerberos.dll
2011-09-12 18:44:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-09-12 18:44:01 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-09-12 18:44:01 ----A---- C:\Windows\system32\odbctrac.dll
2011-09-12 18:44:01 ----A---- C:\Windows\system32\odbccu32.dll
2011-09-12 18:44:01 ----A---- C:\Windows\system32\odbccr32.dll
2011-09-12 18:44:01 ----A---- C:\Windows\system32\odbccp32.dll
2011-09-12 18:44:00 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-09-12 18:44:00 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-09-12 18:44:00 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-09-12 18:44:00 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-09-12 18:43:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-09-12 18:43:53 ----A---- C:\Windows\system32\poqexec.exe
2011-09-12 18:43:52 ----A---- C:\Windows\explorer.exe
2011-09-12 18:43:51 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-09-12 18:43:49 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-09-12 18:43:49 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-09-12 18:43:49 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-09-12 18:43:49 ----A---- C:\Windows\system32\sbe.dll
2011-09-12 18:43:49 ----A---- C:\Windows\system32\EncDec.dll
2011-09-12 18:43:49 ----A---- C:\Windows\system32\CPFilters.dll
2011-09-12 18:43:45 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-09-12 18:43:45 ----A---- C:\Windows\system32\tquery.dll
2011-09-12 18:43:45 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-09-12 18:43:45 ----A---- C:\Windows\system32\mssrch.dll
2011-09-12 18:43:44 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-09-12 18:43:44 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-09-12 18:43:44 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-09-12 18:43:44 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-09-12 18:43:44 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-09-12 18:43:44 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-09-12 18:43:44 ----A---- C:\Windows\system32\mssvp.dll
2011-09-12 18:43:44 ----A---- C:\Windows\system32\mssphtb.dll
2011-09-12 18:43:44 ----A---- C:\Windows\system32\mssph.dll
2011-09-12 18:43:43 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2011-09-12 18:43:43 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-09-12 18:43:43 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-09-12 18:43:43 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-09-12 18:43:43 ----A---- C:\Windows\system32\msscntrs.dll
2011-09-12 18:43:42 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-09-12 18:43:41 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-09-12 18:43:41 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-09-12 18:43:40 ----A---- C:\Windows\system32\drivers\afd.sys
2011-09-12 18:43:36 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-09-12 18:43:36 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-09-12 18:43:32 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-09-12 18:43:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-09-12 18:43:32 ----A---- C:\Windows\system32\vbscript.dll
2011-09-12 18:43:32 ----A---- C:\Windows\system32\jscript.dll
2011-09-12 18:43:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-09-12 18:43:27 ----A---- C:\Windows\system32\XpsPrint.dll
2011-09-12 18:43:25 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-09-12 18:43:25 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-09-12 18:43:25 ----A---- C:\Windows\system32\mfc42u.dll
2011-09-12 18:43:25 ----A---- C:\Windows\system32\mfc42.dll
2011-09-12 18:42:56 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-09-12 18:42:56 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-09-12 18:42:56 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-09-12 18:42:56 ----A---- C:\Windows\system32\fontsub.dll
2011-09-12 18:42:56 ----A---- C:\Windows\system32\atmlib.dll
2011-09-12 18:42:56 ----A---- C:\Windows\system32\atmfd.dll
2011-09-12 18:42:54 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-09-12 18:42:53 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-09-12 18:42:53 ----A---- C:\Windows\system32\dnsapi.dll
2011-09-12 18:42:52 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-09-12 18:42:52 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-09-12 18:42:52 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-09-12 18:42:43 ----A---- C:\Windows\system32\d3d10_1.dll
2011-09-12 18:42:42 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-09-12 18:42:39 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-09-12 18:42:39 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-09-12 18:42:39 ----A---- C:\Windows\system32\drivers\srv.sys
2011-09-12 18:42:17 ----A---- C:\Windows\system32\winresume.exe
2011-09-12 18:42:17 ----A---- C:\Windows\system32\winload.exe
2011-09-12 18:42:17 ----A---- C:\Windows\system32\kdusb.dll
2011-09-12 18:42:17 ----A---- C:\Windows\system32\kdcom.dll
2011-09-12 18:42:17 ----A---- C:\Windows\system32\kd1394.dll
2011-09-12 18:42:13 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-09-12 18:42:13 ----A---- C:\Windows\system32\oleaut32.dll
2011-09-12 18:42:09 ----A---- C:\Windows\system32\KernelBase.dll
2011-09-12 18:42:09 ----A---- C:\Windows\system32\kernel32.dll
2011-09-12 18:42:08 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-09-12 18:42:08 ----A---- C:\Windows\system32\wow64win.dll
2011-09-12 18:42:08 ----A---- C:\Windows\system32\winsrv.dll
2011-09-12 18:42:08 ----A---- C:\Windows\system32\conhost.exe
2011-09-12 18:42:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-09-12 18:42:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-09-12 18:42:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-09-12 18:42:06 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-09-12 18:42:06 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-09-12 18:42:06 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-09-12 18:42:06 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-09-12 18:42:06 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-09-12 18:42:06 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-09-12 18:42:06 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-09-12 18:42:06 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-09-12 18:42:06 ----A---- C:\Windows\system32\wow64cpu.dll
2011-09-12 18:42:06 ----A---- C:\Windows\system32\wow64.dll
2011-09-12 18:42:06 ----A---- C:\Windows\system32\ntvdm64.dll
2011-09-12 18:42:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-09-12 18:42:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-09-12 18:42:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-09-12 18:42:04 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-09-12 18:42:03 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-09-12 18:42:02 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-09-12 18:42:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-09-12 18:42:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-09-12 18:42:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-09-12 18:42:01 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-09-12 18:42:01 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-09-12 18:42:01 ----A---- C:\Windows\SYSWOW64\user.exe
2011-09-12 18:41:57 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-09-12 18:41:57 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-09-12 18:41:57 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-09-12 18:41:56 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-09-12 18:41:56 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-09-12 18:41:54 ----A---- C:\Windows\system32\win32k.sys
2011-09-12 18:41:52 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-09-12 18:41:50 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-09-12 18:41:50 ----A---- C:\Windows\system32\prevhost.exe
2011-09-12 18:41:49 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-09-12 18:41:47 ----A---- C:\Windows\system32\inetcomm.dll
2011-09-12 18:41:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-09-12 18:41:44 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-09-12 18:41:41 ----A---- C:\Windows\system32\mshtml.dll
2011-09-12 18:41:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-09-12 18:41:40 ----A---- C:\Windows\system32\iertutil.dll
2011-09-12 18:41:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-09-12 18:41:39 ----A---- C:\Windows\system32\ieframe.dll
2011-09-12 18:41:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-09-12 18:41:38 ----A---- C:\Windows\system32\urlmon.dll
2011-09-12 18:41:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-09-12 18:41:37 ----A---- C:\Windows\system32\wininet.dll
2011-09-12 18:41:37 ----A---- C:\Windows\system32\msfeeds.dll
2011-09-12 18:41:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-09-12 18:41:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-09-12 18:41:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-09-12 18:41:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-09-12 18:41:36 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-09-12 18:41:36 ----A---- C:\Windows\system32\url.dll
2011-09-12 18:41:36 ----A---- C:\Windows\system32\mshtmled.dll
2011-09-12 18:41:36 ----A---- C:\Windows\system32\ieui.dll
2011-09-12 18:41:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-09-12 18:41:35 ----A---- C:\Windows\system32\jsproxy.dll
2011-09-12 18:41:26 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-09-12 18:41:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-09-12 18:41:25 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-09-11 21:10:17 ----D---- C:\Windows\Panther
2011-09-11 21:09:45 ----RA---- C:\Windows\csup.txt
2011-09-11 21:09:45 ----D---- C:\Windows\system32\OEM
2011-09-11 21:09:45 ----D---- C:\Hotfix
2011-09-11 21:09:45 ----D---- C:\Drivers
2011-09-11 21:08:33 ----A---- C:\Windows\system32\perfi005.dat
2011-09-11 21:08:33 ----A---- C:\Windows\system32\perfh005.dat
2011-09-11 21:08:33 ----A---- C:\Windows\system32\perfd005.dat
2011-09-11 21:08:33 ----A---- C:\Windows\system32\perfc005.dat
2011-09-11 21:08:13 ----D---- C:\Windows\SYSWOW64\cs
2011-09-11 21:08:12 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-09-11 21:08:12 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2011-09-11 21:08:12 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-09-11 21:08:12 ----D---- C:\Windows\system32\cs
2011-09-11 21:08:12 ----D---- C:\Windows\cs-CZ
2011-09-11 17:28:44 ----A---- C:\Windows\setup.INI
2011-09-11 17:28:43 ----A---- C:\Windows\LgUninst.exe
2011-09-11 17:28:32 ----D---- C:\Program Files (x86)\Lingea
2011-09-11 17:28:15 ----A---- C:\Windows\system32\TURegOpt.exe
2011-09-11 17:28:12 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2011-09-11 17:28:12 ----A---- C:\Windows\system32\uxtuneup.dll
2011-09-11 17:28:12 ----A---- C:\Windows\system32\authuitu.dll
2011-09-11 17:28:11 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2011-09-11 17:27:54 ----D---- C:\Users\Anh\AppData\Roaming\TuneUp Software
2011-09-11 17:27:46 ----D---- C:\Program Files (x86)\TuneUp Utilities 2011
2011-09-11 17:27:25 ----D---- C:\ProgramData\TuneUp Software
2011-09-11 17:27:17 ----SHD---- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-09-11 16:11:56 ----D---- C:\Users\Anh\AppData\Roaming\Skype
2011-09-11 16:11:16 ----RD---- C:\Program Files (x86)\Skype
2011-09-11 16:11:08 ----D---- C:\ProgramData\Skype
2011-09-11 15:11:40 ----D---- C:\Program Files\Common Files\DESIGNER
2011-09-11 15:10:42 ----D---- C:\Program Files\Microsoft Synchronization Services
2011-09-11 15:10:04 ----D---- C:\Windows\PCHEALTH
2011-09-11 15:10:04 ----D---- C:\Program Files\Microsoft Sync Framework
2011-09-11 15:10:04 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2011-09-11 15:10:04 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-09-11 15:08:33 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-09-11 15:07:45 ----D---- C:\Program Files\Microsoft Analysis Services
2011-09-11 15:07:45 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2011-09-11 15:07:37 ----D---- C:\Program Files (x86)\Microsoft Office
2011-09-11 15:07:31 ----D---- C:\Program Files\Microsoft Office
2011-09-11 15:07:30 ----D---- C:\ProgramData\Microsoft Help
2011-09-11 15:07:02 ----RHD---- C:\MSOCache
2011-09-11 13:31:27 ----D---- C:\Users\Anh\AppData\Roaming\WinRAR
2011-09-11 13:31:23 ----D---- C:\Program Files (x86)\WinRAR
2011-09-11 13:25:06 ----D---- C:\Program Files (x86)\Adobe
2011-09-11 13:24:06 ----D---- C:\ProgramData\Adobe
2011-09-11 13:20:38 ----D---- C:\Users\Anh\AppData\Roaming\Mozilla
2011-09-11 13:20:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-09-11 13:18:53 ----D---- C:\Users\Anh\AppData\Roaming\Macromedia
2011-09-11 13:18:53 ----D---- C:\Users\Anh\AppData\Roaming\Adobe
2011-09-11 13:11:22 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-09-11 13:11:22 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-09-11 13:11:20 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-09-11 13:11:19 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-09-11 13:11:19 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-09-11 13:11:18 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-09-11 13:11:18 ----A---- C:\Windows\system32\aswBoot.exe
2011-09-11 13:10:39 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-09-11 13:10:39 ----A---- C:\Windows\avastSS.scr
2011-09-11 13:10:30 ----D---- C:\ProgramData\AVAST Software
2011-09-11 13:10:30 ----D---- C:\Program Files\AVAST Software
2011-09-11 13:04:08 ----D---- C:\My programs
2011-09-11 13:01:16 ----D---- C:\Users\Anh\AppData\Roaming\ATI
2011-09-11 13:01:16 ----D---- C:\ProgramData\ATI
2011-09-11 12:57:13 ----D---- C:\Program Files\Common Files\Intel
2011-09-11 12:56:55 ----A---- C:\Windows\system32\IntcDAuC.dll
2011-09-11 12:56:55 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2011-09-11 12:55:55 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-09-11 12:55:48 ----A---- C:\Windows\SYSWOW64\atipblup.dat
2011-09-11 12:55:48 ----A---- C:\Windows\system32\atipblup.dat
2011-09-11 12:53:56 ----A---- C:\Windows\system32\coinst.dll
2011-09-11 12:53:53 ----A---- C:\Windows\SYSWOW64\atipblag.dat
2011-09-11 12:53:53 ----A---- C:\Windows\system32\atipblag.dat
2011-09-11 12:53:53 ----A---- C:\Windows\system32\ATIDEMGX.dll
2011-09-11 12:52:36 ----D---- C:\Program Files (x86)\ATI Technologies
2011-09-11 12:51:03 ----D---- C:\Program Files\ATI Technologies
2011-09-11 12:50:57 ----D---- C:\Program Files\ATI
2011-09-11 12:49:01 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2011-09-11 12:49:00 ----A---- C:\Windows\system32\RTNUninst64.dll
2011-09-11 12:49:00 ----A---- C:\Windows\system32\RtNicProp64.dll
2011-09-11 12:48:55 ----D---- C:\Program Files (x86)\Realtek
2011-09-11 12:47:14 ----D---- C:\Program Files (x86)\Renesas Electronics
2011-09-11 12:45:59 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2011-09-11 12:45:59 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2011-09-11 12:45:57 ----A---- C:\Windows\SYSWOW64\log.txt
2011-09-11 12:45:31 ----D---- C:\Intel
2011-09-11 12:45:27 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2011-09-11 12:45:25 ----D---- C:\Program Files (x86)\Intel
2011-09-11 12:45:24 ----D---- C:\Users\Anh\AppData\Roaming\InstallShield
2011-09-11 12:44:00 ----A---- C:\Windows\system32\imthx64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\stlang64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\slapoi64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\imapo64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\imapo32.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\AESTEC64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\AESTCo64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\AESTAR64.dll
2011-09-11 12:43:59 ----A---- C:\Windows\system32\AESTAC64.dll
2011-09-11 12:43:55 ----D---- C:\Windows\system32\SRSLabs
2011-09-11 12:43:12 ----N---- C:\Windows\system32\stapi64.dll
2011-09-11 12:43:12 ----A---- C:\Windows\system32\stcplx64.dll
2011-09-11 12:43:12 ----A---- C:\Windows\system32\stapo64.dll
2011-09-11 12:43:12 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2011-09-11 12:43:11 ----A---- C:\Windows\SYSWOW64\IMAPO32.dll
2011-09-11 12:43:11 ----A---- C:\Windows\system32\st646323.dll
2011-09-11 12:43:11 ----A---- C:\Windows\system32\MaxxAudioAPO3064.dll
2011-09-11 12:42:14 ----D---- C:\Program Files\IDT
2011-09-11 12:39:56 ----D---- C:\Program Files (x86)\Netwaiting
2011-09-11 12:34:51 ----A---- C:\mini-agent.txt
2011-09-11 12:32:42 ----D---- C:\Program Files (x86)\Dell Wireless
2011-09-11 12:32:05 ----D---- C:\Windows\Options
2011-09-11 12:32:05 ----A---- C:\Windows\system32\drivers\athrx.sys
2011-09-11 12:32:05 ----A---- C:\Windows\system32\athrx.sys
2011-09-11 12:31:49 ----D---- C:\ProgramData\Dell
2011-09-11 12:22:22 ----HD---- C:\ProgramData\CanonIJSolutionMenu
2011-09-11 12:22:17 ----HD---- C:\ProgramData\CanonIJMyPrinter
2011-09-11 12:22:12 ----D---- C:\ProgramData\CanonIJPLM
2011-09-11 12:14:40 ----D---- C:\Program Files\Common Files\CANON
2011-09-11 12:12:58 ----D---- C:\Program Files\Canon
2011-09-11 12:11:43 ----HD---- C:\ProgramData\CanonBJ
2011-09-11 12:11:20 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2011-09-11 12:11:06 ----A---- C:\Windows\SYSWOW64\CNHMCA.dll
2011-09-11 12:11:06 ----A---- C:\Windows\SYSWOW64\CNC250U.dll
2011-09-11 12:11:06 ----A---- C:\Windows\SYSWOW64\CNC250L.dll
2011-09-11 12:11:06 ----A---- C:\Windows\system32\CNHMCA6.dll
2011-09-11 12:11:06 ----A---- C:\Windows\system32\CNC250L.dll
2011-09-11 12:11:06 ----A---- C:\Windows\system32\CNC250I.dll
2011-09-11 12:11:06 ----A---- C:\Windows\system32\CNC250C.dll
2011-09-11 12:10:33 ----A---- C:\Windows\system32\CNMLM9W.DLL
2011-09-11 12:10:21 ----A---- C:\Windows\system32\CNC250O.dll
2011-09-11 12:10:10 ----A---- C:\Windows\system32\CNMIU9W.DLL
2011-09-11 12:10:00 ----HD---- C:\Program Files\CanonBJ
2011-09-11 12:09:20 ----D---- C:\Program Files (x86)\Canon
2011-09-11 11:48:25 ----A---- C:\tmuninst.ini
2011-09-11 11:47:32 ----D---- C:\Windows\system32\log
2011-09-11 11:47:05 ----D---- C:\Program Files (x86)\Trend Micro
2011-09-11 11:39:12 ----D---- C:\Windows\SYSWOW64\vmm32
2011-09-11 11:39:12 ----D---- C:\Program Files (x86)\Dell
2011-09-11 11:37:23 ----D---- C:\Users\Anh\AppData\Roaming\DigitalPersona
2011-09-11 11:31:24 ----D---- C:\ProgramData\Macrovision
2011-09-11 11:31:19 ----D---- C:\Users\Anh\AppData\Roaming\Macrovision
2011-09-11 11:31:18 ----D---- C:\Users\Anh\AppData\Roaming\FLEXnet
2011-09-11 11:31:16 ----D---- C:\Windows\DPDrv
2011-09-11 11:31:13 ----D---- C:\Windows\system32\zh-Hant
2011-09-11 11:31:13 ----D---- C:\Windows\system32\zh-Hans
2011-09-11 11:31:13 ----D---- C:\Windows\system32\tr
2011-09-11 11:31:13 ----D---- C:\Windows\system32\sv
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\zh-Hant
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\zh-Hans
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\tr
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\sv
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\ru
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\no
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\nl
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\ko
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\ja
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\it
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\gl-ES
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\fr
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\eu-ES
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\es
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\de
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\da
2011-09-11 11:31:11 ----D---- C:\Windows\SYSWOW64\ca-ES
2011-09-11 11:31:11 ----D---- C:\Windows\system32\ru
2011-09-11 11:31:11 ----D---- C:\Windows\system32\no
2011-09-11 11:31:11 ----D---- C:\Windows\system32\nl
2011-09-11 11:31:11 ----D---- C:\Windows\system32\ko
2011-09-11 11:31:11 ----D---- C:\Windows\system32\ja
2011-09-11 11:31:11 ----D---- C:\Windows\system32\it
2011-09-11 11:31:11 ----D---- C:\Windows\system32\gl-ES
2011-09-11 11:31:11 ----D---- C:\Windows\system32\fr
2011-09-11 11:31:11 ----D---- C:\Windows\system32\eu-ES
2011-09-11 11:31:11 ----D---- C:\Windows\system32\es
2011-09-11 11:31:11 ----D---- C:\Windows\system32\de
2011-09-11 11:31:11 ----D---- C:\Windows\system32\da
2011-09-11 11:31:11 ----D---- C:\Windows\system32\ca-ES
2011-09-11 11:31:11 ----D---- C:\ProgramData\FLEXnet
2011-09-11 11:31:11 ----D---- C:\Program Files\DigitalPersona
2011-09-11 11:31:11 ----D---- C:\Program Files (x86)\DigitalPersona
2011-09-11 11:30:33 ----SHD---- C:\Windows\Installer
2011-09-11 11:30:32 ----D---- C:\ProgramData\Downloaded Installations
2011-09-11 11:28:47 ----D---- C:\Users\Anh\AppData\Roaming\Creative
2011-09-11 11:23:34 ----D---- C:\Program Files (x86)\Creative
2011-09-11 11:22:40 ----D---- C:\Program Files (x86)\Dell Webcam
2011-09-11 11:22:39 ----A---- C:\Windows\system32\drivers\CtClsFlt.sys
2011-09-11 11:22:39 ----A---- C:\Windows\system32\drivers\CtAudDrv.sys
2011-09-11 11:22:35 ----D---- C:\Program Files (x86)\Creative Live! Cam
2011-09-11 11:21:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-09-11 11:18:20 ----D---- C:\Users\Anh\AppData\Roaming\Identities
2011-09-11 11:18:03 ----SD---- C:\Users\Anh\AppData\Roaming\Microsoft
2011-09-11 11:18:03 ----D---- C:\Users\Anh\AppData\Roaming\Media Center Programs
2011-09-11 11:17:56 ----SHD---- C:\Recovery
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Šablony
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Plocha
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Oblíbené položky
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Nabídka Start
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Dokumenty
2011-09-11 11:17:56 ----SHD---- C:\ProgramData\Data aplikací
2011-09-11 11:13:47 ----D---- C:\Windows\SoftwareDistribution
2011-09-11 11:11:37 ----D---- C:\Windows\Prefetch
2011-09-11 11:10:58 ----ASH---- C:\pagefile.sys
2011-09-11 11:10:53 ----SHD---- C:\System Volume Information
2011-09-11 11:10:53 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2011-09-17 04:51:49 ----D---- C:\Windows\system32\LogFiles
2011-09-16 19:20:05 ----RD---- C:\Program Files
2011-09-16 19:09:48 ----D---- C:\Windows\System32
2011-09-16 19:09:48 ----D---- C:\Windows\inf
2011-09-16 19:09:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-16 19:01:16 ----D---- C:\Windows\Temp
2011-09-16 13:33:03 ----D---- C:\Windows
2011-09-16 12:13:37 ----D---- C:\Windows\system32\config
2011-09-15 21:41:23 ----D---- C:\Windows\rescache
2011-09-15 21:40:54 ----D---- C:\Windows\system32\catroot2
2011-09-15 17:51:05 ----D---- C:\Windows\winsxs
2011-09-15 17:45:36 ----D---- C:\Windows\system32\catroot
2011-09-15 01:01:58 ----D---- C:\Program Files\Windows Sidebar
2011-09-15 01:01:58 ----D---- C:\Program Files\Windows Mail
2011-09-15 01:01:57 ----D---- C:\Program Files\Windows Photo Viewer
2011-09-15 01:01:57 ----D---- C:\Program Files\Windows Media Player
2011-09-15 01:01:57 ----D---- C:\Program Files\Windows Journal
2011-09-15 01:01:57 ----D---- C:\Program Files\Windows Defender
2011-09-15 01:01:57 ----D---- C:\Program Files\DVD Maker
2011-09-15 01:01:57 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-09-15 01:01:56 ----D---- C:\Windows\SYSWOW64\winrm
2011-09-15 01:01:56 ----D---- C:\Windows\SYSWOW64\slmgr
2011-09-15 01:01:56 ----D---- C:\Windows\SYSWOW64\migwiz
2011-09-15 01:01:56 ----D---- C:\Windows\SYSWOW64\en
2011-09-15 01:01:56 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2011-09-15 01:01:56 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-09-15 01:01:56 ----D---- C:\Program Files (x86)\Windows Media Player
2011-09-15 01:01:56 ----D---- C:\Program Files (x86)\Windows Mail
2011-09-15 01:01:56 ----D---- C:\Program Files (x86)\Windows Defender
2011-09-15 01:01:55 ----D---- C:\Windows\SYSWOW64\en-US
2011-09-15 01:01:46 ----D---- C:\Windows\SYSWOW64\WCN
2011-09-15 01:01:46 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2011-09-15 01:01:46 ----D---- C:\Windows\SYSWOW64\DriverStore
2011-09-15 01:01:46 ----D---- C:\Windows\SYSWOW64\Dism
2011-09-15 01:01:46 ----D---- C:\Windows\en-US
2011-09-15 01:01:45 ----D---- C:\Windows\system32\winrm
2011-09-15 01:01:45 ----D---- C:\Windows\system32\slmgr
2011-09-15 01:01:45 ----D---- C:\Windows\system32\migwiz
2011-09-15 01:01:45 ----D---- C:\Windows\system32\en-US
2011-09-15 01:01:45 ----D---- C:\Windows\system32\en
2011-09-15 01:01:45 ----D---- C:\Windows\system32\Boot
2011-09-15 01:01:40 ----D---- C:\Windows\system32\WCN
2011-09-15 01:01:40 ----D---- C:\Windows\system32\drivers\en-US
2011-09-15 01:01:40 ----D---- C:\Windows\system32\Dism
2011-09-15 01:01:39 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2011-09-15 01:01:39 ----D---- C:\Windows\Speech
2011-09-14 20:30:22 ----D---- C:\Windows\Logs
2011-09-14 20:12:21 ----D---- C:\Windows\Microsoft.NET
2011-09-14 20:12:03 ----RSD---- C:\Windows\assembly
2011-09-14 16:17:11 ----D---- C:\Windows\system32\wdi
2011-09-14 08:41:08 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-09-14 08:41:07 ----D---- C:\Windows\SysWOW64
2011-09-14 08:41:07 ----D---- C:\Windows\system32\drivers
2011-09-14 08:41:07 ----D---- C:\Windows\system32\cs-CZ
2011-09-14 08:41:04 ----D---- C:\Windows\system32\DriverStore
2011-09-13 07:30:51 ----RSD---- C:\Windows\Fonts
2011-09-13 07:30:50 ----D---- C:\Windows\AppPatch
2011-09-13 07:30:43 ----D---- C:\Program Files\Internet Explorer
2011-09-13 07:30:43 ----D---- C:\Program Files (x86)\Internet Explorer
2011-09-13 07:30:42 ----D---- C:\Windows\SYSWOW64\migration
2011-09-13 07:30:42 ----D---- C:\Windows\system32\migration
2011-09-13 00:35:59 ----RD---- C:\Program Files (x86)
2011-09-12 00:29:40 ----D---- C:\Windows\system32\Tasks
2011-09-11 21:09:46 ----D---- C:\Windows\system32\Recovery
2011-09-11 21:09:45 ----D---- C:\Windows\system32\oobe
2011-09-11 21:09:45 ----D---- C:\Windows\Setup
2011-09-11 21:08:13 ----D---- C:\Windows\servicing
2011-09-11 21:08:13 ----D---- C:\Windows\ehome
2011-09-11 21:08:12 ----D---- C:\Windows\SYSWOW64\wbem
2011-09-11 21:08:12 ----D---- C:\Windows\SYSWOW64\MUI
2011-09-11 21:08:12 ----D---- C:\Windows\SYSWOW64\com
2011-09-11 21:08:12 ----D---- C:\Windows\system32\MUI
2011-09-11 21:08:12 ----D---- C:\Windows\PolicyDefinitions
2011-09-11 21:08:12 ----D---- C:\Windows\IME
2011-09-11 21:08:11 ----D---- C:\Windows\system32\wbem
2011-09-11 21:08:11 ----D---- C:\Windows\system32\com
2011-09-11 17:27:25 ----HD---- C:\ProgramData
2011-09-11 15:11:41 ----D---- C:\Windows\ShellNew
2011-09-11 15:11:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-09-11 15:11:40 ----D---- C:\Program Files\Common Files
2011-09-11 15:10:27 ----D---- C:\Program Files (x86)\MSBuild
2011-09-11 15:10:04 ----SD---- C:\ProgramData\Microsoft
2011-09-11 15:08:14 ----A---- C:\Windows\win.ini
2011-09-11 15:08:12 ----D---- C:\Program Files\Common Files\System
2011-09-11 13:25:06 ----D---- C:\Program Files (x86)\Common Files
2011-09-11 13:18:16 ----D---- C:\Windows\Tasks
2011-09-11 12:45:59 ----D---- C:\Windows\SYSWOW64\drivers
2011-09-11 12:20:39 ----RSD---- C:\Windows\Media
2011-09-11 12:20:32 ----D---- C:\Windows\twain_32
2011-09-11 11:50:06 ----D---- C:\Windows\system32\NDF
2011-09-11 11:31:17 ----D---- C:\Windows\SYSWOW64\pt-PT
2011-09-11 11:31:17 ----D---- C:\Windows\SYSWOW64\pt-BR
2011-09-11 11:31:17 ----D---- C:\Windows\system32\pt-PT
2011-09-11 11:31:17 ----D---- C:\Windows\system32\pt-BR
2011-09-11 11:31:16 ----D---- C:\Windows\system32\WinBioPlugIns
2011-09-11 11:25:27 ----D---- C:\Windows\system32\CodeIntegrity
2011-09-11 11:22:14 ----D---- C:\Windows\system32\restore
2011-09-11 11:18:16 ----SHD---- C:\$Recycle.Bin
2011-09-11 11:18:03 ----RD---- C:\Users
2011-09-11 11:17:56 ----D---- C:\Program Files\Windows NT
2011-09-11 11:17:49 ----D---- C:\Windows\debug
2011-09-11 11:14:26 ----D---- C:\Windows\system32\sysprep
2011-09-11 11:13:39 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver; C:\Windows\system32\DRIVERS\tmlwf.sys [2010-11-08 196688]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 athr;Dell Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-24 2673664]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-12-17 28832]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-10-26 406632]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
S1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
S1 tmtdi;Trend Micro TDI Driver; C:\Windows\system32\DRIVERS\tmtdi.sys [2010-11-08 108624]
S2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
S2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
S2 TmFilter;Trend Micro Filter; \??\C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmXPFlt.sys [2011-03-24 310032]
S2 TmPreFilter;Trend Micro PreFilter; \??\C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmPreFlt.sys [2011-03-24 42768]
S2 tmwfp;Trend Micro WFP Callout Driver; C:\Windows\system32\DRIVERS\tmwfp.sys [2010-11-08 338000]
S2 VSApiNt;Trend Micro VSAPI NT; \??\C:\Program Files (x86)\Trend Micro\Client Server Security Agent\VSApiNt.sys [2011-03-24 1988368]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-06 8283136]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-06 295424]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-12-17 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-12-17 298144]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-12-17 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-12-17 55456]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-12-17 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-12-17 275616]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2010-06-07 174848]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-11-28 12252192]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-01-20 520192]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-07-07 11856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-12-29 440144]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-06 203776]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe [2010-10-01 151552]
S2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2010-12-17 53920]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
S2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
S2 ntrtscan;Trend Micro Client/Server Security Agent RealTime Scan; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\ntrtscan.exe [2011-02-18 1836616]
S2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-01-20 296448]
S2 svcGenericHost;Trend Micro Client/Server Security Agent; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe [2011-04-07 50704]
S2 tmlisten;Trend Micro Client/Server Security Agent Listener; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\tmlisten.exe [2011-02-18 2060896]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-09-01 2027840]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 TMBMServer;Trend Micro Unauthorized Change Prevention Service; C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe [2009-07-06 570632]
S3 TmPfw;Trend Micro Client/Server Security Agent Personal Firewall; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmPfw.exe [2010-07-21 596032]
S3 TmProxy;Trend Micro Client/Server Security Agent Proxy Service; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe [2010-07-21 917840]

-----------------EOF-----------------

[Rudy]

Log vypadá po virové stránce OK. Antivir máte Avast a Client Server Security Agent. Zkuste jeden z nich vypnout, zda se něco změní. Není vhodné mít 2 AV s realtime ochranou.

[Miri@]

omlouvám se za hloupou otázku, ale jak ? Počítač mám puštěný v nouzovém režimu a nedaří se mi odinstalivat Client Server Security Agent.

[Rudy]

OK. Zkuste tedy obnovu systému k datu, kdy korektně fungoval.

[Miri@]

pokud tím myslíte Ovládací panely-Obnovení -Obnovení systému, tak to už jsem zkoušela taky.
Když kliknu ovšem na Spustit nástroj obnovení systémz, tak vyskočí okénko, že nemám vytvořené body obnovení, pak když pokračuju v návodu k vytvoření b.obnovy tedy zmačknutím na Ochrana systému, tak vyskočí okénko (,,Vlastnsti systému´´), který však s tim nemá nic společného, alespoň teda tam není nic o tom jak vatvořít bodyobnovení.

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[Miri@]

Posílám log:


ComboFix 11-09-16.01 - Anh 16.09.2011 21:54:13.1.4 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4003.3140 [GMT 2:00]
Spuštěný z: c:\users\Anh\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Trend Micro Client/Server Security Agent Antivirus *Disabled/Updated* {7193B549-236F-55EE-9AEC-F65279E59A92}
FW: Trend Micro Personal Firewall *Disabled* {50C2E989-60CF-0845-AFD3-290B7D301E79}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Trend Micro Client/Server Security Agent Anti-spyware *Disabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
c:\windows\system32\no
c:\windows\system32\no\DPCrProv.dll.mui
c:\windows\system32\no\DPFPApiUI.dll.mui
c:\windows\system32\no\DPPassFilter.dll.mui
c:\windows\system32\SV
c:\windows\system32\SV\DPCrProv.dll.mui
c:\windows\system32\SV\DPFPApiUI.dll.mui
c:\windows\system32\SV\DPPassFilter.dll.mui
c:\windows\SysWow64\comct332.ocx
c:\windows\SysWow64\no
c:\windows\SysWow64\no\DPCrProv.dll.mui
c:\windows\SysWow64\no\DPFPApiUI.dll.mui
c:\windows\SysWow64\no\DPPassFilter.dll.mui
c:\windows\SysWow64\SV
c:\windows\SysWow64\SV\DPCrProv.dll.mui
c:\windows\SysWow64\SV\DPFPApiUI.dll.mui
c:\windows\SysWow64\SV\DPPassFilter.dll.mui
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-16 do 2011-09-16 )))))))))))))))))))))))))))))))
.
.
2011-09-16 19:58 . 2011-09-16 19:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-16 18:41 . 2011-09-16 18:41 -------- d-----w- c:\program files (x86)\Google
2011-09-16 17:20 . 2011-09-16 17:34 -------- d-----w- c:\program files\trend micro
2011-09-16 17:20 . 2011-09-16 17:20 -------- d-----w- C:\rsit
2011-09-13 14:05 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-09-13 14:05 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-09-13 14:05 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-09-13 14:05 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-09-13 14:05 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-09-13 14:05 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-09-13 14:05 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-09-13 14:05 . 2011-04-28 03:55 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2011-09-13 14:05 . 2011-04-28 03:54 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-09-13 14:04 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-09-13 14:04 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-09-13 14:04 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-09-13 14:04 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-09-13 14:04 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-09-13 14:04 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-09-13 14:04 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-09-13 14:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-09-13 14:04 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-09-12 22:35 . 2011-09-12 22:35 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-09-12 16:43 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-09-12 16:42 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-09-12 16:41 . 2011-05-24 11:42 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-09-11 19:10 . 2011-09-11 09:18 -------- d-----w- c:\windows\Panther
2011-09-11 19:09 . 2011-09-11 19:09 -------- d-----w- C:\Hotfix
2011-09-11 19:09 . 2011-09-11 19:09 -------- d-----w- C:\Drivers
2011-09-11 19:09 . 2011-09-11 09:16 -------- d-----w- c:\windows\system32\OEM
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\cs
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\cs
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-09-11 19:05 . 2009-07-14 03:04 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2011-09-11 15:28 . 2001-12-06 01:00 26112 ----a-w- c:\windows\LgUninst.exe
2011-09-11 15:28 . 2011-09-11 15:28 -------- d-----w- c:\program files (x86)\Lingea
2011-09-11 15:28 . 2011-09-01 12:26 34624 ----a-w- c:\windows\system32\TURegOpt.exe
2011-09-11 15:28 . 2011-09-01 12:19 25920 ----a-w- c:\windows\system32\authuitu.dll
2011-09-11 15:28 . 2011-09-01 12:19 36160 ----a-w- c:\windows\system32\uxtuneup.dll
2011-09-11 15:28 . 2011-09-01 12:19 29504 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2011-09-11 15:28 . 2011-09-01 12:19 21312 ----a-w- c:\windows\SysWow64\authuitu.dll
2011-09-11 15:27 . 2011-09-11 15:28 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2011
2011-09-11 15:27 . 2011-09-11 15:28 -------- d-----w- c:\programdata\TuneUp Software
2011-09-11 15:27 . 2011-09-11 15:27 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-09-11 14:11 . 2011-09-11 14:11 -------- d-----r- c:\program files (x86)\Skype
2011-09-11 14:11 . 2011-09-11 14:11 -------- d-----w- c:\programdata\Skype
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\windows\PCHEALTH
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files (x86)\Microsoft.NET
2011-09-11 13:08 . 2011-09-11 13:08 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-09-11 13:07 . 2011-09-11 13:14 -------- d-----w- c:\programdata\Microsoft Help
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----r- C:\MSOCache
2011-09-11 11:25 . 2011-09-11 11:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-09-11 11:11 . 2011-09-06 20:38 301912 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-11 11:11 . 2011-09-06 20:36 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-11 11:11 . 2011-09-06 20:36 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-11 11:11 . 2011-09-06 20:38 601944 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-11 11:11 . 2011-09-06 20:36 58200 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-11 11:11 . 2011-09-06 20:45 254400 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-11 11:11 . 2011-09-06 20:36 65368 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-09-11 11:10 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-09-11 11:10 . 2011-09-06 20:45 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-09-11 11:10 . 2011-09-11 11:10 -------- d-----w- c:\programdata\AVAST Software
2011-09-11 11:10 . 2011-09-11 11:10 -------- d-----w- c:\program files\AVAST Software
2011-09-11 11:04 . 2011-09-11 15:27 -------- d-----w- C:\My programs
2011-09-11 11:01 . 2011-09-11 11:01 -------- d-----w- c:\programdata\ATI
2011-09-11 10:59 . 2011-09-11 10:59 0 ----a-w- c:\windows\ativpsrm.bin
2011-09-11 10:57 . 2011-09-11 10:57 -------- d-----w- c:\program files\Common Files\Intel
2011-09-11 10:57 . 2011-09-11 10:57 -------- d-----w- c:\program files (x86)\Common Files\Intel
2011-09-11 10:56 . 2010-10-14 16:28 317440 ----a-w- c:\windows\system32\drivers\IntcDAud.sys
2011-09-11 10:56 . 2010-10-14 16:27 14848 ----a-w- c:\windows\system32\IntcDAuC.dll
2011-09-11 10:55 . 2011-09-11 10:55 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-09-11 10:53 . 2011-01-06 04:08 58880 ----a-w- c:\windows\system32\coinst.dll
2011-09-11 10:53 . 2011-01-06 04:39 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-09-11 10:52 . 2011-09-11 10:55 -------- d-----w- c:\program files (x86)\ATI Technologies
2011-09-11 10:51 . 2011-09-11 10:56 -------- d-----w- c:\program files\ATI Technologies
2011-09-11 10:50 . 2011-09-11 10:50 -------- d-----w- c:\program files\ATI
2011-09-11 10:49 . 2010-10-26 03:08 406632 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-09-11 10:49 . 2010-01-05 16:39 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-09-11 10:49 . 2009-12-03 09:27 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-09-11 10:48 . 2011-09-11 10:48 -------- d-----w- c:\program files (x86)\Realtek
2011-09-11 10:47 . 2011-09-11 10:47 -------- d-----w- c:\program files (x86)\Renesas Electronics
2011-09-11 10:45 . 2010-10-05 18:50 8192 ----a-w- c:\windows\SysWow64\drivers\IntelMEFWVer.dll
2011-09-11 10:45 . 2010-10-05 18:50 8192 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2011-09-11 10:45 . 2011-09-11 10:45 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2011-09-11 10:45 . 2011-09-11 10:45 -------- d-----w- C:\Intel
2011-09-11 10:45 . 2010-09-21 07:59 56344 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2011-09-11 10:45 . 2011-09-11 10:57 -------- d-----w- c:\program files (x86)\Intel
2011-09-11 10:44 . 2010-10-14 17:56 390656 ----a-w- c:\windows\system32\imthx64.dll
2011-09-11 10:42 . 2011-09-11 10:44 -------- d-----w- c:\program files\IDT
2011-09-11 10:39 . 2011-09-11 10:40 -------- d-----w- c:\program files (x86)\Netwaiting
2011-09-11 10:32 . 2011-09-11 10:32 -------- d-----w- c:\program files (x86)\Common Files\Atheros
2011-09-11 10:32 . 2011-09-11 10:34 -------- d-----w- c:\program files (x86)\Dell Wireless
2011-09-11 10:32 . 2011-09-11 10:32 -------- d-----w- c:\windows\Options
2011-09-11 10:32 . 2010-11-24 09:33 2673664 ----a-w- c:\windows\system32\drivers\athrx.sys
2011-09-11 10:32 . 2010-11-24 09:33 2673664 ----a-w- c:\windows\system32\athrx.sys
2011-09-11 10:31 . 2011-09-11 10:32 -------- d-----w- c:\programdata\Dell
2011-09-11 10:22 . 2011-09-11 10:22 -------- d--h--w- c:\programdata\CanonIJSolutionMenu
2011-09-11 10:22 . 2011-09-11 10:22 -------- d--h--w- c:\programdata\CanonIJMyPrinter
2011-09-11 10:22 . 2011-09-11 11:50 -------- d-----w- c:\programdata\CanonIJPLM
2011-09-11 10:14 . 2011-09-11 10:14 -------- d-----w- c:\program files\Common Files\CANON
2011-09-11 10:12 . 2011-09-11 10:12 -------- d-----w- c:\program files\Canon
2011-09-11 10:11 . 2011-09-11 10:11 -------- d--h--w- c:\programdata\CanonBJ
2011-09-11 10:11 . 2010-02-04 03:00 83968 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPP9W.DLL
2011-09-11 10:11 . 2010-02-04 03:00 28672 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPD9W.DLL
2011-09-11 10:11 . 2011-09-11 10:11 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2011-09-11 10:11 . 2009-04-03 14:01 1321984 ----a-w- c:\windows\system32\CNC250C.dll
2011-09-11 10:11 . 2009-04-03 14:00 92672 ----a-w- c:\windows\system32\CNC250I.dll
2011-09-11 10:11 . 2009-04-03 13:57 106496 ----a-w- c:\windows\SysWow64\CNC250U.dll
2011-09-11 10:11 . 2009-03-11 09:36 328192 ----a-w- c:\windows\system32\CNC250L.dll
2011-09-11 10:11 . 2009-03-11 09:34 303104 ----a-w- c:\windows\SysWow64\CNC250L.dll
2011-09-11 10:11 . 2008-08-25 16:02 17920 ----a-w- c:\windows\system32\CNHMCA6.dll
2011-09-11 10:11 . 2008-08-25 16:02 15872 ----a-w- c:\windows\SysWow64\CNHMCA.dll
2011-09-11 10:10 . 2010-02-04 03:00 336896 ----a-w- c:\windows\system32\CNMLM9W.DLL
2011-09-11 10:10 . 2009-02-04 12:18 104960 ----a-w- c:\windows\system32\CNC250O.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-16 04:26 . 2011-09-12 16:42 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"="c:\program files (x86)\Netwaiting\netWaiting.exe" [2008-01-16 25856]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-06-15 15141768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-08-11 487561]
"OfficeScanNT Monitor"="c:\program files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe" [2011-02-26 1708048]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-06 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 TmFilter;Trend Micro Filter;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmXPFlt.sys [2011-03-24 310032]
R2 TmPreFilter;Trend Micro PreFilter;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmPreFlt.sys [2011-03-24 42768]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TmProxy;Trend Micro Client/Server Security Agent Proxy Service;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe [2010-07-21 917840]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Dell Wireless\Ath_CoexAgent.exe [2010-10-01 151552]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2010-12-17 53920]
S2 svcGenericHost;Trend Micro Client/Server Security Agent;c:\program files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe [2011-04-07 50704]
S2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-09-01 2027840]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TmPfw;Trend Micro Client/Server Security Agent Personal Firewall;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmPfw.exe [2010-07-21 596032]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-07-07 11856]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000Core.job
- c:\users\Anh\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-11 11:18]
.
2011-09-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000UA.job
- c:\users\Anh\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-11 11:18]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]
"AtherosBtStack"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" [2010-12-17 613536]
"AthBtTray"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe" [2010-12-17 379040]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-20 525312]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-11-28 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-11-28 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-11-28 417304]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"combofix"="c:\combofix\CF18477.3XE" [2010-11-21 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.dell.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 134.155.50.51 134.155.50.52
FF - ProfilePath - c:\users\Anh\AppData\Roaming\Mozilla\Firefox\Profiles\ft8y4vxm.default\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\HostedAgent.exe
c:\program files (x86)\Trend Micro\Client Server Security Agent\CNTAoSMgr.exe
c:\program files (x86)\DigitalPersona\Bin\DPAgent.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2011-09-16 22:08:19 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-16 20:08
.
Před spuštěním: Volných bajtů: 458 866 188 288
Po spuštění: Volných bajtů: 458 644 447 232
.
- - End Of File - - 25E5AA038FEBB22B1C240C5D355B802D

[Miri@]

Posílám log:


ComboFix 11-09-16.01 - Anh 16.09.2011 21:54:13.1.4 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4003.3140 [GMT 2:00]
Spuštěný z: c:\users\Anh\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Trend Micro Client/Server Security Agent Antivirus *Disabled/Updated* {7193B549-236F-55EE-9AEC-F65279E59A92}
FW: Trend Micro Personal Firewall *Disabled* {50C2E989-60CF-0845-AFD3-290B7D301E79}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Trend Micro Client/Server Security Agent Anti-spyware *Disabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
c:\windows\system32\no
c:\windows\system32\no\DPCrProv.dll.mui
c:\windows\system32\no\DPFPApiUI.dll.mui
c:\windows\system32\no\DPPassFilter.dll.mui
c:\windows\system32\SV
c:\windows\system32\SV\DPCrProv.dll.mui
c:\windows\system32\SV\DPFPApiUI.dll.mui
c:\windows\system32\SV\DPPassFilter.dll.mui
c:\windows\SysWow64\comct332.ocx
c:\windows\SysWow64\no
c:\windows\SysWow64\no\DPCrProv.dll.mui
c:\windows\SysWow64\no\DPFPApiUI.dll.mui
c:\windows\SysWow64\no\DPPassFilter.dll.mui
c:\windows\SysWow64\SV
c:\windows\SysWow64\SV\DPCrProv.dll.mui
c:\windows\SysWow64\SV\DPFPApiUI.dll.mui
c:\windows\SysWow64\SV\DPPassFilter.dll.mui
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-16 do 2011-09-16 )))))))))))))))))))))))))))))))
.
.
2011-09-16 19:58 . 2011-09-16 19:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-16 18:41 . 2011-09-16 18:41 -------- d-----w- c:\program files (x86)\Google
2011-09-16 17:20 . 2011-09-16 17:34 -------- d-----w- c:\program files\trend micro
2011-09-16 17:20 . 2011-09-16 17:20 -------- d-----w- C:\rsit
2011-09-13 14:05 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-09-13 14:05 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-09-13 14:05 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-09-13 14:05 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-09-13 14:05 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-09-13 14:05 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-09-13 14:05 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-09-13 14:05 . 2011-04-28 03:55 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2011-09-13 14:05 . 2011-04-28 03:54 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-09-13 14:04 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-09-13 14:04 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-09-13 14:04 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-09-13 14:04 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-09-13 14:04 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-09-13 14:04 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-09-13 14:04 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-09-13 14:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-09-13 14:04 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-09-12 22:35 . 2011-09-12 22:35 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-09-12 16:43 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-09-12 16:42 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-09-12 16:41 . 2011-05-24 11:42 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-09-11 19:10 . 2011-09-11 09:18 -------- d-----w- c:\windows\Panther
2011-09-11 19:09 . 2011-09-11 19:09 -------- d-----w- C:\Hotfix
2011-09-11 19:09 . 2011-09-11 19:09 -------- d-----w- C:\Drivers
2011-09-11 19:09 . 2011-09-11 09:16 -------- d-----w- c:\windows\system32\OEM
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\cs
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\cs
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\cs-CZ
2011-09-11 19:08 . 2011-09-11 19:08 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-09-11 19:05 . 2009-07-14 03:04 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2011-09-11 15:28 . 2001-12-06 01:00 26112 ----a-w- c:\windows\LgUninst.exe
2011-09-11 15:28 . 2011-09-11 15:28 -------- d-----w- c:\program files (x86)\Lingea
2011-09-11 15:28 . 2011-09-01 12:26 34624 ----a-w- c:\windows\system32\TURegOpt.exe
2011-09-11 15:28 . 2011-09-01 12:19 25920 ----a-w- c:\windows\system32\authuitu.dll
2011-09-11 15:28 . 2011-09-01 12:19 36160 ----a-w- c:\windows\system32\uxtuneup.dll
2011-09-11 15:28 . 2011-09-01 12:19 29504 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2011-09-11 15:28 . 2011-09-01 12:19 21312 ----a-w- c:\windows\SysWow64\authuitu.dll
2011-09-11 15:27 . 2011-09-11 15:28 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2011
2011-09-11 15:27 . 2011-09-11 15:28 -------- d-----w- c:\programdata\TuneUp Software
2011-09-11 15:27 . 2011-09-11 15:27 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-09-11 14:11 . 2011-09-11 14:11 -------- d-----r- c:\program files (x86)\Skype
2011-09-11 14:11 . 2011-09-11 14:11 -------- d-----w- c:\programdata\Skype
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\windows\PCHEALTH
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-09-11 13:10 . 2011-09-11 13:10 -------- d-----w- c:\program files (x86)\Microsoft.NET
2011-09-11 13:08 . 2011-09-11 13:08 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-09-11 13:07 . 2011-09-11 13:14 -------- d-----w- c:\programdata\Microsoft Help
2011-09-11 13:07 . 2011-09-11 13:07 -------- d-----r- C:\MSOCache
2011-09-11 11:25 . 2011-09-11 11:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-09-11 11:11 . 2011-09-06 20:38 301912 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-11 11:11 . 2011-09-06 20:36 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-11 11:11 . 2011-09-06 20:36 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-11 11:11 . 2011-09-06 20:38 601944 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-11 11:11 . 2011-09-06 20:36 58200 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-11 11:11 . 2011-09-06 20:45 254400 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-11 11:11 . 2011-09-06 20:36 65368 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-09-11 11:10 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-09-11 11:10 . 2011-09-06 20:45 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-09-11 11:10 . 2011-09-11 11:10 -------- d-----w- c:\programdata\AVAST Software
2011-09-11 11:10 . 2011-09-11 11:10 -------- d-----w- c:\program files\AVAST Software
2011-09-11 11:04 . 2011-09-11 15:27 -------- d-----w- C:\My programs
2011-09-11 11:01 . 2011-09-11 11:01 -------- d-----w- c:\programdata\ATI
2011-09-11 10:59 . 2011-09-11 10:59 0 ----a-w- c:\windows\ativpsrm.bin
2011-09-11 10:57 . 2011-09-11 10:57 -------- d-----w- c:\program files\Common Files\Intel
2011-09-11 10:57 . 2011-09-11 10:57 -------- d-----w- c:\program files (x86)\Common Files\Intel
2011-09-11 10:56 . 2010-10-14 16:28 317440 ----a-w- c:\windows\system32\drivers\IntcDAud.sys
2011-09-11 10:56 . 2010-10-14 16:27 14848 ----a-w- c:\windows\system32\IntcDAuC.dll
2011-09-11 10:55 . 2011-09-11 10:55 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-09-11 10:53 . 2011-01-06 04:08 58880 ----a-w- c:\windows\system32\coinst.dll
2011-09-11 10:53 . 2011-01-06 04:39 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-09-11 10:52 . 2011-09-11 10:55 -------- d-----w- c:\program files (x86)\ATI Technologies
2011-09-11 10:51 . 2011-09-11 10:56 -------- d-----w- c:\program files\ATI Technologies
2011-09-11 10:50 . 2011-09-11 10:50 -------- d-----w- c:\program files\ATI
2011-09-11 10:49 . 2010-10-26 03:08 406632 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-09-11 10:49 . 2010-01-05 16:39 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-09-11 10:49 . 2009-12-03 09:27 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-09-11 10:48 . 2011-09-11 10:48 -------- d-----w- c:\program files (x86)\Realtek
2011-09-11 10:47 . 2011-09-11 10:47 -------- d-----w- c:\program files (x86)\Renesas Electronics
2011-09-11 10:45 . 2010-10-05 18:50 8192 ----a-w- c:\windows\SysWow64\drivers\IntelMEFWVer.dll
2011-09-11 10:45 . 2010-10-05 18:50 8192 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2011-09-11 10:45 . 2011-09-11 10:45 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2011-09-11 10:45 . 2011-09-11 10:45 -------- d-----w- C:\Intel
2011-09-11 10:45 . 2010-09-21 07:59 56344 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2011-09-11 10:45 . 2011-09-11 10:57 -------- d-----w- c:\program files (x86)\Intel
2011-09-11 10:44 . 2010-10-14 17:56 390656 ----a-w- c:\windows\system32\imthx64.dll
2011-09-11 10:42 . 2011-09-11 10:44 -------- d-----w- c:\program files\IDT
2011-09-11 10:39 . 2011-09-11 10:40 -------- d-----w- c:\program files (x86)\Netwaiting
2011-09-11 10:32 . 2011-09-11 10:32 -------- d-----w- c:\program files (x86)\Common Files\Atheros
2011-09-11 10:32 . 2011-09-11 10:34 -------- d-----w- c:\program files (x86)\Dell Wireless
2011-09-11 10:32 . 2011-09-11 10:32 -------- d-----w- c:\windows\Options
2011-09-11 10:32 . 2010-11-24 09:33 2673664 ----a-w- c:\windows\system32\drivers\athrx.sys
2011-09-11 10:32 . 2010-11-24 09:33 2673664 ----a-w- c:\windows\system32\athrx.sys
2011-09-11 10:31 . 2011-09-11 10:32 -------- d-----w- c:\programdata\Dell
2011-09-11 10:22 . 2011-09-11 10:22 -------- d--h--w- c:\programdata\CanonIJSolutionMenu
2011-09-11 10:22 . 2011-09-11 10:22 -------- d--h--w- c:\programdata\CanonIJMyPrinter
2011-09-11 10:22 . 2011-09-11 11:50 -------- d-----w- c:\programdata\CanonIJPLM
2011-09-11 10:14 . 2011-09-11 10:14 -------- d-----w- c:\program files\Common Files\CANON
2011-09-11 10:12 . 2011-09-11 10:12 -------- d-----w- c:\program files\Canon
2011-09-11 10:11 . 2011-09-11 10:11 -------- d--h--w- c:\programdata\CanonBJ
2011-09-11 10:11 . 2010-02-04 03:00 83968 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPP9W.DLL
2011-09-11 10:11 . 2010-02-04 03:00 28672 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPD9W.DLL
2011-09-11 10:11 . 2011-09-11 10:11 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2011-09-11 10:11 . 2009-04-03 14:01 1321984 ----a-w- c:\windows\system32\CNC250C.dll
2011-09-11 10:11 . 2009-04-03 14:00 92672 ----a-w- c:\windows\system32\CNC250I.dll
2011-09-11 10:11 . 2009-04-03 13:57 106496 ----a-w- c:\windows\SysWow64\CNC250U.dll
2011-09-11 10:11 . 2009-03-11 09:36 328192 ----a-w- c:\windows\system32\CNC250L.dll
2011-09-11 10:11 . 2009-03-11 09:34 303104 ----a-w- c:\windows\SysWow64\CNC250L.dll
2011-09-11 10:11 . 2008-08-25 16:02 17920 ----a-w- c:\windows\system32\CNHMCA6.dll
2011-09-11 10:11 . 2008-08-25 16:02 15872 ----a-w- c:\windows\SysWow64\CNHMCA.dll
2011-09-11 10:10 . 2010-02-04 03:00 336896 ----a-w- c:\windows\system32\CNMLM9W.DLL
2011-09-11 10:10 . 2009-02-04 12:18 104960 ----a-w- c:\windows\system32\CNC250O.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-16 04:26 . 2011-09-12 16:42 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"="c:\program files (x86)\Netwaiting\netWaiting.exe" [2008-01-16 25856]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-06-15 15141768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-08-11 487561]
"OfficeScanNT Monitor"="c:\program files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe" [2011-02-26 1708048]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-06 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 TmFilter;Trend Micro Filter;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmXPFlt.sys [2011-03-24 310032]
R2 TmPreFilter;Trend Micro PreFilter;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmPreFlt.sys [2011-03-24 42768]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TmProxy;Trend Micro Client/Server Security Agent Proxy Service;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe [2010-07-21 917840]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Dell Wireless\Ath_CoexAgent.exe [2010-10-01 151552]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2010-12-17 53920]
S2 svcGenericHost;Trend Micro Client/Server Security Agent;c:\program files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe [2011-04-07 50704]
S2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-09-01 2027840]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TmPfw;Trend Micro Client/Server Security Agent Personal Firewall;c:\program files (x86)\Trend Micro\Client Server Security Agent\TmPfw.exe [2010-07-21 596032]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-07-07 11856]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000Core.job
- c:\users\Anh\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-11 11:18]
.
2011-09-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1223619866-825227429-3089696894-1000UA.job
- c:\users\Anh\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-11 11:18]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]
"AtherosBtStack"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" [2010-12-17 613536]
"AthBtTray"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe" [2010-12-17 379040]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-20 525312]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-11-28 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-11-28 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-11-28 417304]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"combofix"="c:\combofix\CF18477.3XE" [2010-11-21 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.dell.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 134.155.50.51 134.155.50.52
FF - ProfilePath - c:\users\Anh\AppData\Roaming\Mozilla\Firefox\Profiles\ft8y4vxm.default\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\HostedAgent.exe
c:\program files (x86)\Trend Micro\Client Server Security Agent\CNTAoSMgr.exe
c:\program files (x86)\DigitalPersona\Bin\DPAgent.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2011-09-16 22:08:19 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-16 20:08
.
Před spuštěním: Volných bajtů: 458 866 188 288
Po spuštění: Volných bajtů: 458 644 447 232
.
- - End Of File - - 25E5AA038FEBB22B1C240C5D355B802D

[Rudy]

CF smazal několik položek, zbytek logu vypadá čistý. Nastala nějaká změna?

[Miri@]

Bohužel ne. Po kliknutí na ikonku, stále nejde soubor otevřít.

[Rudy]

Co jste instalovala těsně před tím, než se problém objevil?

[Miri@]

Problém se objevil dneska odpoledne. Včera jsem nic neinstalovala. Poslední program, který jsem instalovala, pokud si vzpomínám, byl Google Chrome.

[Rudy]

Zkuste opravu systému z instal. média. Nevylučuji ovšem, že má problém i nějaký hardware.

[Miri@]

Bohužel stále žádná změna. Mám ještě zkusit přeinstalování OS?

[Rudy]

Zkuste, někdy nic jiného nepomůže. Pokud by se to nezdařilo, nebo se problém vbrzku opakoval, nezbude, než prověřit hardware.