Odstranění virů

[KebiQ]

Dobrý den.Chtěl bych poprosit,zda-li byste mi poradili, jak zneškodnit základní viry.V antivirových programech se nevyznám a moc v nich neumím.Mám v karanténě 2 nechtěné aplikace,Adwar Babylon.exe a jednoho trojského koně,chtěl bych se zeptat,jak mohou být vyléčeni,či zneškodněni?Antivirový program používám NOD32.
Kdyžtak,kdybyste byli ochotni o kontrolu,tak zítra zde vložím log z HJT.Děkuji za pochopení
KebiQ

[motji]

Dobrý večer
ten druhý vir je v jakém souboru?
A poprosím o log ze rsitu

[KebiQ]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Patrik at 2011-11-19 02:08:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 157 GB (63%) free of 250 GB
Total RAM: 6142 MB (70% free)


======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
taskeng.exe {C0127D93-9D85-4A4F-8CB6-4945D06F39AE}
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\RAVCpl64.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Steam\steam.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"taskhost.exe"
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=3956.00C986E0.551602360 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll" --lang=cs --channel=3956.09929540.1082518897 /prefetch:4
C:\Windows\system32\rundll32.exe "C:\Users\Patrik\AppData\Local\Google\Chrome\APPLIC~1\15.0.874.121\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Patrik\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll" --lang=cs --channel=3956.077CA700.347129982 --flash-broker=3476 /prefetch:4
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=3956.099F1420.274555233 /prefetch:3
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=default_plugin --lang=cs --channel=3956.07ABAE00.27274806 /prefetch:4
"C:\Users\Patrik\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=3956.0A8226E0.142423173 /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\trend micro\Patrik.exe" /silentautolog
"C:\Users\Patrik\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001UA.job
C:\Windows\tasks\SlimDrivers Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-10-15 410288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll [2011-10-15 341048]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-10-15 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [2011-10-15 1007160]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-10-15 410288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-10-15 305328]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RAVCpl64.exe [2008-07-24 6452256]
"Skytel"=C:\Windows\Skytel.exe [2008-07-24 1833504]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-08 4030008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2011-10-15 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Patrik\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-15 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2011-08-01 114992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2011-10-15 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"NoResolveTrack"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-11-19 02:04:15 ----D---- C:\rsit
2011-11-19 02:04:15 ----D---- C:\Program Files\trend micro
2011-11-18 19:21:32 ----D---- C:\Program Files (x86)\Microsoft XNA
2011-11-18 16:09:01 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-11-18 16:09:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-11-18 16:09:01 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-11-18 16:09:01 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-11-18 16:09:00 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-11-18 16:09:00 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-11-18 16:08:59 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-11-18 16:08:59 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-11-18 16:08:58 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-11-18 16:08:58 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-18 16:08:57 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-11-18 16:08:57 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-18 16:08:57 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-18 16:08:55 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-11-18 16:08:55 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-18 16:08:54 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-11-18 16:08:54 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-18 16:08:53 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-11-18 16:08:53 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-18 16:08:52 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-18 16:08:50 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-11-18 16:08:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-11-18 16:08:50 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-18 16:08:50 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-18 16:08:48 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-18 16:08:47 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-11-18 16:08:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-11-18 16:08:47 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-18 16:08:47 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-18 16:08:46 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-11-18 16:08:46 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-18 16:08:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-11-18 16:08:45 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-18 16:08:44 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-11-18 16:08:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-11-18 16:08:44 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-18 16:08:44 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-18 16:08:42 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-11-18 16:08:42 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-18 16:08:40 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-11-18 16:08:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-11-18 16:08:40 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-11-18 16:08:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-11-18 16:08:40 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-18 16:08:40 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-18 16:08:40 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-18 16:08:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-18 16:08:38 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-11-18 16:08:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-11-18 16:08:38 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-11-18 16:08:38 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-18 16:08:38 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-18 16:08:38 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-18 16:08:36 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-11-18 16:08:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-11-18 16:08:36 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-11-18 16:08:36 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-11-18 16:08:34 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-11-18 16:08:34 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-11-18 16:08:33 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-11-18 16:08:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-11-18 16:08:33 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-18 16:08:33 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-18 16:08:32 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-11-18 16:08:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-11-18 16:08:32 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-18 16:08:32 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-18 16:08:30 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-11-18 16:08:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-11-18 16:08:30 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-18 16:08:30 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-18 16:08:28 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-11-18 16:08:28 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-18 16:08:27 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-11-18 16:08:27 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-11-18 16:08:27 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-18 16:08:27 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-18 16:08:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-11-18 16:08:26 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-18 16:08:24 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-11-18 16:08:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-11-18 16:08:24 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-18 16:08:24 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-18 16:08:22 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-11-18 16:08:22 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-11-18 16:08:22 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-18 16:08:22 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-18 16:08:20 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-11-18 16:08:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-11-18 16:08:20 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-18 16:08:20 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-18 16:08:18 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-11-18 16:08:18 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-18 16:08:17 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-11-18 16:08:17 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-18 16:08:15 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-11-18 16:08:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-11-18 16:08:15 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-18 16:08:15 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-18 16:08:14 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-11-18 16:08:14 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-18 16:08:13 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-11-18 16:08:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-11-18 16:08:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-18 16:08:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-18 16:08:11 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-11-18 16:08:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-11-18 16:08:11 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-18 16:08:11 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-18 16:08:10 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-11-18 16:08:10 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-18 16:08:09 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-11-18 16:08:09 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-18 16:08:08 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-11-18 16:08:08 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-18 16:08:07 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-11-18 16:08:07 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-18 16:08:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-11-18 16:08:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-18 16:08:04 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-11-18 16:08:04 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-18 16:08:03 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-11-18 16:08:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-18 16:08:02 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-11-18 16:08:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-18 16:08:01 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-11-18 16:08:01 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-18 16:08:00 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-11-18 16:08:00 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-18 16:07:59 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-11-18 16:07:59 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-11-18 16:07:59 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-18 16:07:59 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-18 16:07:57 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-11-18 16:07:57 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-18 16:07:56 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-11-18 16:07:56 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-11-18 16:07:56 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-18 16:07:56 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-18 16:07:54 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-11-18 16:07:54 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-11-18 16:07:54 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-18 16:07:54 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-18 16:07:52 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-11-18 16:07:52 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-18 16:07:43 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-11-18 16:07:43 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-18 16:07:42 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-11-18 16:07:42 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-11-18 16:07:42 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-18 16:07:42 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-18 16:07:40 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-11-18 16:07:40 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-18 16:07:39 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-11-18 16:07:39 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-18 16:07:37 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-11-18 16:07:37 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-18 16:07:35 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-11-18 16:07:35 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-18 16:07:29 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-11-18 16:07:29 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-18 16:07:27 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-11-18 16:07:27 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-11-18 16:01:52 ----D---- C:\Program Files (x86)\The Elder Scrolls V Skyrim
2011-11-17 17:31:51 ----D---- C:\Downloads
2011-11-17 17:30:55 ----D---- C:\Users\Patrik\AppData\Roaming\FlashGet
2011-11-17 10:12:41 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-11-17 10:12:41 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-11-17 10:12:41 ----A---- C:\Windows\system32\OpenCL.dll
2011-11-17 10:12:40 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-11-17 10:12:40 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-11-17 10:12:40 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-11-17 10:12:40 ----A---- C:\Windows\system32\nvoglv64.dll
2011-11-17 10:12:40 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-11-17 10:12:40 ----A---- C:\Windows\system32\nvcuvid.dll
2011-11-17 10:12:40 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-11-17 10:12:40 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-11-17 10:12:39 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-11-17 10:12:39 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-11-17 10:12:39 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-11-17 10:12:39 ----A---- C:\Windows\system32\nvcuda.dll
2011-11-17 10:12:39 ----A---- C:\Windows\system32\nvcompiler.dll
2011-11-09 16:47:25 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-09 16:47:21 ----A---- C:\Windows\system32\win32k.sys
2011-11-05 21:58:17 ----D---- C:\ProgramData\BabylonUpdater
2011-11-05 21:58:13 ----D---- C:\Users\Patrik\AppData\Roaming\Babylon
2011-11-05 21:58:13 ----D---- C:\ProgramData\Babylon
2011-11-05 15:15:40 ----D---- C:\Program Files (x86)\Mount&Blade Warband
2011-11-04 17:04:44 ----D---- C:\Users\Patrik\AppData\Roaming\Mount&Blade Warband
2011-11-04 16:05:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-11-04 16:05:38 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-11-04 16:05:37 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-11-04 16:00:38 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-11-04 15:59:51 ----D---- C:\Users\Patrik\AppData\Roaming\OpenCandy
2011-11-04 15:58:56 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-11-04 15:58:49 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-11-04 15:58:33 ----D---- C:\Users\Patrik\AppData\Roaming\DAEMON Tools Lite
2011-11-04 15:58:30 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-11-03 16:26:01 ----D---- C:\Users\Patrik\AppData\Roaming\Screaming Bee
2011-11-03 16:25:22 ----D---- C:\ProgramData\Screaming Bee
2011-11-01 17:57:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-10-30 11:39:10 ----D---- C:\Users\Patrik\AppData\Roaming\Hamachi
2011-10-30 11:38:57 ----A---- C:\Windows\system32\drivers\hamachi.sys
2011-10-30 11:38:56 ----D---- C:\Program Files (x86)\Hamachi
2011-10-30 01:02:31 ----D---- C:\PFiles
2011-10-30 00:50:14 ----D---- C:\Windows\Minidump
2011-10-29 16:54:25 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-10-29 16:54:25 ----A---- C:\Windows\system32\shell32.dll
2011-10-29 14:04:40 ----D---- C:\Program Files (x86)\Conduit
2011-10-29 14:03:19 ----D---- C:\Users\Patrik\AppData\Roaming\uTorrent
2011-10-29 13:58:01 ----D---- C:\ProgramData\Electronic Arts
2011-10-28 00:20:28 ----D---- C:\ProgramData\SweetIM
2011-10-28 00:20:28 ----D---- C:\Program Files (x86)\SweetIM
2011-10-27 21:59:42 ----D---- C:\Program Files (x86)\Activision
2011-10-27 21:44:40 ----A---- C:\Windows\SYSWOW64\vp6vfw.dll
2011-10-27 21:44:34 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-10-27 21:32:09 ----D---- C:\Users\Patrik\AppData\Roaming\Mount&Blade With Fire and Sword
2011-10-27 21:25:09 ----D---- C:\Program Files (x86)\Mount&Blade With Fire and Sword
2011-10-27 21:05:42 ----D---- C:\Windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2011-10-27 20:55:28 ----D---- C:\Program Files (x86)\2K Games
2011-10-27 20:55:07 ----D---- C:\BDS
2011-10-27 20:30:23 ----D---- C:\Program Files (x86)\EA Games
2011-10-27 20:28:53 ----D---- C:\Windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2011-10-24 16:50:44 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-10-24 16:28:05 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-10-24 16:28:05 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-10-24 16:28:05 ----A---- C:\Windows\SYSWOW64\java.exe
2011-10-22 12:21:42 ----A---- C:\Windows\system32\frapsv64.dll
2011-10-22 12:21:38 ----A---- C:\Windows\SYSWOW64\frapsvid.dll
2011-10-20 20:59:45 ----D---- C:\Program Files\Mouse
2011-10-20 20:59:40 ----A---- C:\Windows\SYSWOW64\Amhooker.dll
2011-10-20 20:59:40 ----A---- C:\Windows\system32\drivers\Amusbx64.sys
2011-10-20 20:59:40 ----A---- C:\Windows\system32\drivers\Amps2x64.sys
2011-10-20 20:59:40 ----A---- C:\Windows\system32\drivers\Amfltx64.sys
2011-10-20 20:55:32 ----A---- C:\Windows\SYSWOW64\drivers\RtsUStor.sys
2011-10-20 20:55:32 ----A---- C:\Windows\SYSWOW64\drivers\RtsUIr.sys
2011-10-20 20:55:32 ----A---- C:\Windows\SYSWOW64\drivers\RtsUCcid.sys
2011-10-20 20:55:32 ----A---- C:\Windows\system32\RTSUSTORicon.dll
2011-10-20 20:55:32 ----A---- C:\Windows\system32\RtsUStor.dll
2011-10-20 20:55:32 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2011-10-20 20:39:17 ----A---- C:\Windows\system32\RTNUninst64.dll
2011-10-20 20:39:17 ----A---- C:\Windows\system32\RtNicProp64.dll
2011-10-20 20:39:17 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2011-10-20 20:30:55 ----D---- C:\Program Files (x86)\SlimDrivers
2011-10-20 20:30:27 ----D---- C:\Program Files (x86)\Downloaded Installers

======List of files/folders modified in the last 1 month======

2011-11-19 02:08:31 ----D---- C:\Windows\Temp
2011-11-19 02:04:26 ----D---- C:\Windows\Prefetch
2011-11-19 02:04:15 ----RD---- C:\Program Files
2011-11-19 01:28:53 ----D---- C:\Program Files (x86)\Steam
2011-11-19 00:53:03 ----D---- C:\Fraps
2011-11-19 00:33:19 ----D---- C:\Windows\SysWOW64
2011-11-19 00:33:19 ----D---- C:\Windows\System32
2011-11-18 19:32:01 ----D---- C:\Windows\system32\config
2011-11-18 19:22:47 ----RSD---- C:\Windows\assembly
2011-11-18 19:22:06 ----SHD---- C:\System Volume Information
2011-11-18 19:21:59 ----SHD---- C:\Windows\Installer
2011-11-18 19:21:54 ----D---- C:\Windows\winsxs
2011-11-18 19:21:32 ----RD---- C:\Program Files (x86)
2011-11-18 16:07:28 ----D---- C:\Windows
2011-11-18 16:05:59 ----D---- C:\Windows\Logs
2011-11-18 15:39:52 ----D---- C:\Users\Patrik\AppData\Roaming\Skype
2011-11-18 14:07:07 ----D---- C:\Windows\system32\drivers
2011-11-18 14:06:07 ----D---- C:\ProgramData\NVIDIA
2011-11-17 14:03:30 ----D---- C:\Windows\inf
2011-11-17 10:14:45 ----D---- C:\Windows\system32\DriverStore
2011-11-17 10:14:45 ----D---- C:\Windows\system32\catroot
2011-11-17 10:14:19 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-11-17 10:13:03 ----D---- C:\Windows\system32\catroot2
2011-11-14 22:52:20 ----D---- C:\Program Files (x86)\Garena Classic
2011-11-12 18:38:20 ----SD---- C:\Users\Patrik\AppData\Roaming\Microsoft
2011-11-11 15:03:11 ----D---- C:\Windows\debug
2011-11-09 16:59:31 ----D---- C:\Program Files\Common Files\System
2011-11-09 16:48:00 ----A---- C:\Windows\system32\MRT.exe
2011-11-06 22:05:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-06 01:22:09 ----D---- C:\Windows\system32\wdi
2011-11-05 22:49:22 ----D---- C:\Program Files (x86)\Electronic Arts
2011-11-05 22:05:17 ----D---- C:\Windows\system32\Tasks
2011-11-05 21:58:17 ----HD---- C:\ProgramData
2011-11-05 18:15:48 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-04 21:37:26 ----D---- C:\Users\Patrik\AppData\Roaming\Smart PC Solutions
2011-11-04 16:01:21 ----D---- C:\Windows\Tasks
2011-11-04 16:00:55 ----SD---- C:\ProgramData\Microsoft
2011-11-03 16:26:01 ----D---- C:\Program Files (x86)\Common Files
2011-10-29 15:30:49 ----D---- C:\Program Files (x86)\Microsoft
2011-10-28 13:22:06 ----D---- C:\Program Files\NVIDIA Corporation
2011-10-27 21:10:57 ----D---- C:\Users\Patrik\AppData\Roaming\NVIDIA
2011-10-26 15:39:00 ----D---- C:\Program Files\Internet Explorer
2011-10-26 15:39:00 ----D---- C:\Program Files (x86)\Internet Explorer
2011-10-24 16:27:58 ----D---- C:\Program Files (x86)\Java
2011-10-23 15:03:43 ----D---- C:\Windows\LiveKernelReports
2011-10-20 20:55:32 ----D---- C:\Windows\SYSWOW64\drivers
2011-10-20 20:55:32 ----D---- C:\Program Files (x86)\Realtek

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2008-11-04 98144]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R1 Amfilter;Compatible Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfltx64.sys [2000-01-01 12288]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-04 270912]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-11-18 24072]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2011-10-30 33344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-24 1488032]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 222720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 535656]
S3 Amusbprt;USB HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbx64.sys [2000-01-01 17920]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Classic\safedrv.sys []
S3 GPU-Z;GPU-Z; \??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys []
S3 RSUSBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 ScreamBAudioSvc;ScreamBee Audio; C:\Windows\system32\drivers\ScreamingBAudio64.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-08-09 328536]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-08 974944]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-15 381248]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-11-13 419624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 GEST Service;GEST Service for program management.; C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe [2008-12-08 68136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-15 182768]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-15 1255736]

-----------------EOF-----------------

[KebiQ]

Ten trojan je varianta infiltrace Win32/Packed.VMProtect.AAM Trojský kůň

[motji]

Ten trojan je varianta infiltrace Win32/Packed.VMProtect.AAM Trojský kůň

V jakém souboru?

[KebiQ]

Část hry,kterou jsem stahoval z uložta.Takže nejspíš rar nebo iso.

[motji]

Tak to smažte, legální to asi nebude, co

Z podpisu mi stahněte mbam, nainstalujte, aktualizujte a udělejte sken. Vložte zde pak log, nic nemažte.

[KebiQ]

No,ten soubor buď nikde nemůžu najít,anebo tam nikde není.Ale NOD mi hlásí,že v karanténě je,a taky sotva,jak jsem to dostahoval,tak mi to NOD hodil do karantény.Ok,ten MMBAM,minutku.

[KebiQ]

Zde je ten log,trval trochu déle,dal jsem úplnou kontrolu a ještě jsem přitom sledoval filmy a přetahoval soubory z HDD



Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verze databáze: 8191

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

19.11.2011 12:51:01
mbam-log-2011-11-19 (12-51-01).txt

Typ kontroly: Úplný test (C:\|D:\|M:\|)
Testované objekty: 333533
Uplynulý čas: 1 hodin, 5 minut, 18 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[motji]

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[KebiQ]

Zde je log z Combofixu.A ještě mám takový dojem,že mi nějaký neplecha hodně zpomaluje PC,co se týče hraní her a prácí s programy.



ComboFix 11-11-09.01 - Patrik 19.11.2011 15:35:22.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6142.4605 [GMT 1:00]
Spuštěný z: c:\users\Patrik\Downloads\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
- REŽIM S OMEZENOU FUNKČNOSTÍ -
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Downloaded Installers
c:\program files (x86)\Downloaded Installers\{67cdd5a0-c572-4d2c-a354-6492b51f4138}\setup.msi
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-19 do 2011-11-19 )))))))))))))))))))))))))))))))
.
.
2011-11-19 14:37 . 2011-11-19 14:37 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2011-11-19 14:37 . 2011-11-19 14:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-19 12:22 . 2011-11-19 12:22 -------- d-----w- c:\programdata\RELOADED
2011-11-19 12:11 . 2011-11-19 12:11 -------- d-----w- c:\program files (x86)\Firefly Studios
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\users\Patrik\AppData\Roaming\Malwarebytes
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\programdata\Malwarebytes
2011-11-19 01:29 . 2010-11-29 16:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-11-19 01:29 . 2010-11-29 16:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-19 01:04 . 2011-11-19 01:08 -------- d-----w- C:\rsit
2011-11-19 01:04 . 2011-11-19 01:08 -------- d-----w- c:\program files\trend micro
2011-11-18 18:21 . 2011-11-18 18:21 -------- d-----w- c:\program files (x86)\Microsoft XNA
2011-11-18 15:10 . 2011-11-18 15:10 -------- d-----w- c:\users\Patrik\AppData\Local\Skyrim
2011-11-18 15:09 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2011-11-18 15:09 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2011-11-18 15:09 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2011-11-18 15:07 . 2007-03-05 11:42 15128 ----a-w- c:\windows\SysWow64\x3daudio1_1.dll
2011-11-18 15:01 . 2011-11-18 15:26 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2011-11-18 13:08 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{521CA3E4-2E85-4B72-A5E4-26325ED56706}\mpengine.dll
2011-11-17 16:31 . 2011-11-17 16:31 -------- d-----w- C:\Downloads
2011-11-17 16:30 . 2011-11-17 16:30 -------- d-----w- c:\users\Patrik\AppData\Roaming\FlashGet
2011-11-09 15:47 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 15:47 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 15:47 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 15:47 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys
2011-11-06 11:04 . 2011-11-06 11:04 -------- d-----w- c:\users\Patrik\AppData\Local\ESET
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\users\Patrik\AppData\Local\Babylon
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\users\Patrik\AppData\Roaming\Babylon
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\programdata\Babylon
2011-11-05 14:15 . 2011-11-05 21:03 -------- d-----w- c:\program files (x86)\Mount&Blade Warband
2011-11-04 16:04 . 2011-11-05 11:47 -------- d-----w- c:\users\Patrik\AppData\Roaming\Mount&Blade Warband
2011-11-04 15:05 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\SysWow64\D3DCompiler_42.dll
2011-11-04 15:05 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2011-11-04 15:05 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\SysWow64\D3DX9_41.dll
2011-11-04 15:00 . 2011-11-04 15:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2011-11-04 14:59 . 2011-11-04 14:59 -------- d-----w- c:\users\Patrik\AppData\Roaming\OpenCandy
2011-11-04 14:58 . 2011-11-04 14:58 270912 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-11-04 14:58 . 2011-11-04 14:58 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2011-11-04 14:58 . 2011-11-19 12:24 -------- d-----w- c:\users\Patrik\AppData\Roaming\DAEMON Tools Lite
2011-11-04 14:58 . 2011-11-04 14:58 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-11-03 15:26 . 2011-11-03 15:26 -------- d-----w- c:\users\Patrik\AppData\Roaming\Screaming Bee
2011-11-03 15:26 . 2011-11-03 15:26 -------- d-----w- c:\program files (x86)\Common Files\Screaming Bee
2011-11-03 15:25 . 2011-11-03 15:26 -------- d-----w- c:\programdata\Screaming Bee
2011-11-01 16:58 . 2011-11-01 16:58 -------- d-----w- c:\users\Patrik\AppData\Local\Mozilla
2011-10-30 10:39 . 2011-11-04 15:53 -------- d-----w- c:\users\Patrik\AppData\Roaming\Hamachi
2011-10-30 10:38 . 2011-10-30 10:38 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-10-30 10:38 . 2011-10-30 10:39 -------- d-----w- c:\program files (x86)\Hamachi
2011-10-30 00:02 . 2011-10-30 00:02 -------- d-----w- C:\PFiles
2011-10-29 13:04 . 2011-10-29 13:04 -------- d-----w- c:\program files (x86)\Conduit
2011-10-29 13:04 . 2011-11-04 20:35 -------- d-----w- c:\users\Patrik\AppData\Local\Conduit
2011-10-29 13:03 . 2011-11-04 20:37 -------- d-----w- c:\users\Patrik\AppData\Roaming\uTorrent
2011-10-29 12:58 . 2011-10-29 14:04 -------- d-----w- c:\programdata\Electronic Arts
2011-10-27 23:20 . 2011-10-27 23:20 -------- d-----w- c:\program files (x86)\SweetIM
2011-10-27 23:20 . 2011-10-27 23:20 -------- d-----w- c:\programdata\SweetIM
2011-10-27 20:59 . 2011-10-27 20:59 -------- d-----w- c:\program files (x86)\Activision
2011-10-27 20:44 . 2008-09-04 18:17 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll
2011-10-27 20:44 . 2011-10-27 20:44 -------- d-----w- c:\program files (x86)\Microsoft WSE
2011-10-27 20:32 . 2011-11-12 18:39 -------- d-----w- c:\users\Patrik\AppData\Roaming\Mount&Blade With Fire and Sword
2011-10-27 20:25 . 2011-11-12 18:16 -------- d-----w- c:\program files (x86)\Mount&Blade With Fire and Sword
2011-10-27 20:05 . 2011-10-27 20:05 -------- d-----w- c:\windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2011-10-27 19:55 . 2011-10-27 19:55 -------- d-----w- c:\program files (x86)\2K Games
2011-10-27 19:55 . 2011-10-27 20:05 -------- d-----w- C:\BDS
2011-10-27 19:54 . 2011-10-27 19:54 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2011-10-27 19:30 . 2011-10-27 19:30 -------- d-----w- c:\program files (x86)\EA Games
2011-10-27 19:28 . 2011-10-27 19:28 -------- d-----w- c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2011-10-27 19:28 . 2011-10-27 20:05 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2011-10-27 15:31 . 2011-10-27 15:31 -------- d-----w- c:\users\Patrik\AppData\Local\Western Digital
2011-10-26 13:19 . 2011-08-13 05:27 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 13:19 . 2011-08-13 04:18 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2011-10-24 15:50 . 2011-10-15 08:53 13205312 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2011-10-24 15:28 . 2011-10-24 15:28 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-10-22 11:21 . 2011-10-22 11:21 71680 ----a-w- c:\windows\system32\frapsv64.dll
2011-10-22 11:21 . 2011-10-22 11:21 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2011-10-20 19:59 . 2011-11-04 20:35 -------- d-----w- c:\program files\Mouse
2011-10-20 19:59 . 2000-01-01 00:00 32768 ----a-w- c:\windows\SysWow64\Amhooker.dll
2011-10-20 19:59 . 2000-01-01 00:00 21504 ----a-w- c:\windows\system32\drivers\Amps2x64.sys
2011-10-20 19:59 . 2000-01-01 00:00 17920 ----a-w- c:\windows\system32\drivers\Amusbx64.sys
2011-10-20 19:59 . 2000-01-01 00:00 12288 ----a-w- c:\windows\system32\drivers\Amfltx64.sys
2011-10-20 19:55 . 2000-01-01 00:00 7347200 ----a-w- c:\windows\system32\RTSUSTORicon.dll
2011-10-20 19:55 . 2000-01-01 00:00 50176 ----a-w- c:\windows\SysWow64\drivers\RtsUCcid.sys
2011-10-20 19:55 . 2000-01-01 00:00 352256 ----a-w- c:\windows\system32\RtsUStor.dll
2011-10-20 19:55 . 2000-01-01 00:00 222720 ----a-w- c:\windows\SysWow64\drivers\RtsUStor.sys
2011-10-20 19:55 . 2000-01-01 00:00 222720 ----a-w- c:\windows\system32\drivers\RtsUStor.sys
2011-10-20 19:55 . 2000-01-01 00:00 19968 ----a-w- c:\windows\SysWow64\drivers\RtsUIr.sys
2011-10-20 19:39 . 2000-01-01 00:00 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-10-20 19:39 . 2000-01-01 00:00 535656 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-10-20 19:39 . 2000-01-01 00:00 107624 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-10-20 19:31 . 2011-11-19 14:38 15672 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2011-10-20 19:30 . 2011-10-20 19:30 -------- d-----w- c:\users\Patrik\AppData\Local\SlimWare Utilities Inc
2011-10-20 19:30 . 2011-10-20 19:33 -------- d-----w- c:\program files (x86)\SlimDrivers
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-19 14:38 . 2011-10-15 12:49 24072 ----a-w- c:\windows\gdrv.sys
2011-11-12 08:48 . 2011-10-15 12:46 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-15 20:53 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-10-15 20:53 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-10-15 12:54 . 2011-10-15 12:54 525792 ----a-w- c:\windows\DIFxAPI.dll
2011-10-15 12:54 . 2011-10-15 12:54 319488 ----a-w- c:\windows\HideWin.exe
2011-10-15 08:53 . 2011-10-15 13:30 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-10-15 08:53 . 2011-10-15 13:30 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2011-10-15 13:30 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-10-15 08:53 . 2011-10-15 13:30 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2011-10-15 13:30 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2011-10-15 13:30 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-10-15 08:53 . 2011-10-15 13:30 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2011-10-15 13:29 2808128 ----a-w- c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2011-10-15 13:29 1533248 ----a-w- c:\windows\system32\nvdispco64.dll
2011-10-15 08:53 . 2011-10-15 13:29 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2011-10-15 08:53 . 2009-07-13 21:59 8791360 ----a-w- c:\windows\system32\nvwgf2umx.dll
2011-10-14 23:54 . 2011-10-14 23:54 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2011-10-03 03:06 . 2011-10-16 18:17 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-10-01 03:25 . 2011-10-15 15:56 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:42 . 2011-10-15 15:56 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-08-27 05:37 . 2011-10-15 15:54 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 05:37 . 2011-10-15 15:54 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 04:26 . 2011-10-15 15:54 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-08-27 04:26 . 2011-10-15 15:54 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 16:21 1299248 ----a-w- c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-10-15 1242448]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
2;2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 GEST Service;GEST Service for program management.;c:\program files (x86)\GIGABYTE\EnergySaver\GSvr.exe [2008-12-08 68136]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Classic\safedrv.sys [x]
R3 GPU-Z;GPU-Z;c:\users\Patrik\AppData\Local\Temp\GPU-Z.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-08-09 328536]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-08 974944]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2000-01-01 222720]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2436ad4a-00b0-11e1-afbf-00241dcdb3d5}]
\shell\AutoRun\command - "F:\WD SmartWare.exe" autoplay=true
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001Core.job
- c:\users\Patrik\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001UA.job
- c:\users\Patrik\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2011-09-07 09:32]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2008-07-24 6452256]
"Skytel"="Skytel.exe" [2008-07-24 1833504]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-08 4030008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&affID=100842&mntrId=ecfadc7700000000000000241dcdb3d5
mStart Page = hxxp://home.sweetim.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
.
**************************************************************************
.
Celkový čas: 2011-11-19 15:41:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-19 14:41
.
Před spuštěním: Volných bajtů: 167 886 835 712
Po spuštění: Volných bajtů: 167 765 905 408
.
- - End Of File - - 2DC8D3C9A0606B2154E2FC684C5A7A45

[motji]

Prosím z odkazu si stahněte aktuální combofix

[KebiQ]

Tak zde je log,z již aktuální verze ComboFix.



ComboFix 11-11-19.03 - Patrik 19.11.2011 15:51:11.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6142.4447 [GMT 1:00]
Spuštěný z: c:\users\Patrik\Downloads\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-19 do 2011-11-19 )))))))))))))))))))))))))))))))
.
.
2011-11-19 14:54 . 2011-11-19 14:54 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2011-11-19 14:54 . 2011-11-19 14:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-19 12:22 . 2011-11-19 12:22 -------- d-----w- c:\programdata\RELOADED
2011-11-19 12:11 . 2011-11-19 12:11 -------- d-----w- c:\program files (x86)\Firefly Studios
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\users\Patrik\AppData\Roaming\Malwarebytes
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\programdata\Malwarebytes
2011-11-19 01:29 . 2010-11-29 16:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-11-19 01:29 . 2011-11-19 01:29 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-11-19 01:29 . 2010-11-29 16:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-19 01:04 . 2011-11-19 01:08 -------- d-----w- C:\rsit
2011-11-19 01:04 . 2011-11-19 01:08 -------- d-----w- c:\program files\trend micro
2011-11-18 18:21 . 2011-11-18 18:21 -------- d-----w- c:\program files (x86)\Microsoft XNA
2011-11-18 15:10 . 2011-11-18 15:10 -------- d-----w- c:\users\Patrik\AppData\Local\Skyrim
2011-11-18 15:09 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2011-11-18 15:09 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2011-11-18 15:09 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2011-11-18 15:09 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2011-11-18 15:07 . 2007-03-05 11:42 15128 ----a-w- c:\windows\SysWow64\x3daudio1_1.dll
2011-11-18 15:01 . 2011-11-18 15:26 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2011-11-18 13:08 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{521CA3E4-2E85-4B72-A5E4-26325ED56706}\mpengine.dll
2011-11-17 16:31 . 2011-11-17 16:31 -------- d-----w- C:\Downloads
2011-11-17 16:30 . 2011-11-17 16:30 -------- d-----w- c:\users\Patrik\AppData\Roaming\FlashGet
2011-11-09 15:47 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 15:47 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 15:47 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 15:47 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys
2011-11-06 11:04 . 2011-11-06 11:04 -------- d-----w- c:\users\Patrik\AppData\Local\ESET
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\users\Patrik\AppData\Local\Babylon
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\users\Patrik\AppData\Roaming\Babylon
2011-11-05 20:58 . 2011-11-05 20:58 -------- d-----w- c:\programdata\Babylon
2011-11-05 14:15 . 2011-11-05 21:03 -------- d-----w- c:\program files (x86)\Mount&Blade Warband
2011-11-04 16:04 . 2011-11-05 11:47 -------- d-----w- c:\users\Patrik\AppData\Roaming\Mount&Blade Warband
2011-11-04 15:05 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\SysWow64\D3DCompiler_42.dll
2011-11-04 15:05 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2011-11-04 15:05 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\SysWow64\D3DX9_41.dll
2011-11-04 15:00 . 2011-11-04 15:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2011-11-04 14:59 . 2011-11-04 14:59 -------- d-----w- c:\users\Patrik\AppData\Roaming\OpenCandy
2011-11-04 14:58 . 2011-11-04 14:58 270912 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-11-04 14:58 . 2011-11-04 14:58 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2011-11-04 14:58 . 2011-11-19 12:24 -------- d-----w- c:\users\Patrik\AppData\Roaming\DAEMON Tools Lite
2011-11-04 14:58 . 2011-11-04 14:58 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-11-03 15:26 . 2011-11-03 15:26 -------- d-----w- c:\users\Patrik\AppData\Roaming\Screaming Bee
2011-11-03 15:26 . 2011-11-03 15:26 -------- d-----w- c:\program files (x86)\Common Files\Screaming Bee
2011-11-03 15:25 . 2011-11-03 15:26 -------- d-----w- c:\programdata\Screaming Bee
2011-11-01 16:58 . 2011-11-01 16:58 -------- d-----w- c:\users\Patrik\AppData\Local\Mozilla
2011-10-30 10:39 . 2011-11-04 15:53 -------- d-----w- c:\users\Patrik\AppData\Roaming\Hamachi
2011-10-30 10:38 . 2011-10-30 10:38 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-10-30 10:38 . 2011-10-30 10:39 -------- d-----w- c:\program files (x86)\Hamachi
2011-10-30 00:02 . 2011-10-30 00:02 -------- d-----w- C:\PFiles
2011-10-29 13:04 . 2011-10-29 13:04 -------- d-----w- c:\program files (x86)\Conduit
2011-10-29 13:04 . 2011-11-04 20:35 -------- d-----w- c:\users\Patrik\AppData\Local\Conduit
2011-10-29 13:03 . 2011-11-04 20:37 -------- d-----w- c:\users\Patrik\AppData\Roaming\uTorrent
2011-10-29 12:58 . 2011-10-29 14:04 -------- d-----w- c:\programdata\Electronic Arts
2011-10-27 23:20 . 2011-10-27 23:20 -------- d-----w- c:\program files (x86)\SweetIM
2011-10-27 23:20 . 2011-10-27 23:20 -------- d-----w- c:\programdata\SweetIM
2011-10-27 20:59 . 2011-10-27 20:59 -------- d-----w- c:\program files (x86)\Activision
2011-10-27 20:44 . 2008-09-04 18:17 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll
2011-10-27 20:44 . 2011-10-27 20:44 -------- d-----w- c:\program files (x86)\Microsoft WSE
2011-10-27 20:32 . 2011-11-12 18:39 -------- d-----w- c:\users\Patrik\AppData\Roaming\Mount&Blade With Fire and Sword
2011-10-27 20:25 . 2011-11-12 18:16 -------- d-----w- c:\program files (x86)\Mount&Blade With Fire and Sword
2011-10-27 20:05 . 2011-10-27 20:05 -------- d-----w- c:\windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2011-10-27 19:55 . 2011-10-27 19:55 -------- d-----w- c:\program files (x86)\2K Games
2011-10-27 19:55 . 2011-10-27 20:05 -------- d-----w- C:\BDS
2011-10-27 19:54 . 2011-10-27 19:54 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2011-10-27 19:30 . 2011-10-27 19:30 -------- d-----w- c:\program files (x86)\EA Games
2011-10-27 19:28 . 2011-10-27 19:28 -------- d-----w- c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2011-10-27 19:28 . 2011-10-27 20:05 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2011-10-27 15:31 . 2011-10-27 15:31 -------- d-----w- c:\users\Patrik\AppData\Local\Western Digital
2011-10-26 13:19 . 2011-08-13 05:27 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 13:19 . 2011-08-13 04:18 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2011-10-24 15:50 . 2011-10-15 08:53 13205312 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2011-10-24 15:28 . 2011-10-24 15:28 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-10-22 11:21 . 2011-10-22 11:21 71680 ----a-w- c:\windows\system32\frapsv64.dll
2011-10-22 11:21 . 2011-10-22 11:21 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2011-10-20 19:59 . 2011-11-04 20:35 -------- d-----w- c:\program files\Mouse
2011-10-20 19:59 . 2000-01-01 00:00 32768 ----a-w- c:\windows\SysWow64\Amhooker.dll
2011-10-20 19:59 . 2000-01-01 00:00 21504 ----a-w- c:\windows\system32\drivers\Amps2x64.sys
2011-10-20 19:59 . 2000-01-01 00:00 17920 ----a-w- c:\windows\system32\drivers\Amusbx64.sys
2011-10-20 19:59 . 2000-01-01 00:00 12288 ----a-w- c:\windows\system32\drivers\Amfltx64.sys
2011-10-20 19:55 . 2000-01-01 00:00 7347200 ----a-w- c:\windows\system32\RTSUSTORicon.dll
2011-10-20 19:55 . 2000-01-01 00:00 50176 ----a-w- c:\windows\SysWow64\drivers\RtsUCcid.sys
2011-10-20 19:55 . 2000-01-01 00:00 352256 ----a-w- c:\windows\system32\RtsUStor.dll
2011-10-20 19:55 . 2000-01-01 00:00 222720 ----a-w- c:\windows\SysWow64\drivers\RtsUStor.sys
2011-10-20 19:55 . 2000-01-01 00:00 222720 ----a-w- c:\windows\system32\drivers\RtsUStor.sys
2011-10-20 19:55 . 2000-01-01 00:00 19968 ----a-w- c:\windows\SysWow64\drivers\RtsUIr.sys
2011-10-20 19:39 . 2000-01-01 00:00 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-10-20 19:39 . 2000-01-01 00:00 535656 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-10-20 19:39 . 2000-01-01 00:00 107624 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-10-20 19:31 . 2011-11-19 14:56 15672 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2011-10-20 19:30 . 2011-10-20 19:30 -------- d-----w- c:\users\Patrik\AppData\Local\SlimWare Utilities Inc
2011-10-20 19:30 . 2011-10-20 19:33 -------- d-----w- c:\program files (x86)\SlimDrivers
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-19 14:55 . 2011-10-15 12:49 24072 ----a-w- c:\windows\gdrv.sys
2011-11-12 08:48 . 2011-10-15 12:46 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-15 20:53 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-10-15 20:53 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-10-15 12:54 . 2011-10-15 12:54 525792 ----a-w- c:\windows\DIFxAPI.dll
2011-10-15 12:54 . 2011-10-15 12:54 319488 ----a-w- c:\windows\HideWin.exe
2011-10-15 08:53 . 2011-10-15 13:30 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-10-15 08:53 . 2011-10-15 13:30 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2011-10-15 13:30 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-10-15 08:53 . 2011-10-15 13:30 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2011-10-15 13:30 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2011-10-15 13:30 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-10-15 08:53 . 2011-10-15 13:30 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2011-10-15 13:29 2808128 ----a-w- c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2011-10-15 13:29 1533248 ----a-w- c:\windows\system32\nvdispco64.dll
2011-10-15 08:53 . 2011-10-15 13:29 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2011-10-15 08:53 . 2009-07-13 21:59 8791360 ----a-w- c:\windows\system32\nvwgf2umx.dll
2011-10-14 23:54 . 2011-10-14 23:54 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2011-10-03 03:06 . 2011-10-16 18:17 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-10-01 03:25 . 2011-10-15 15:56 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:42 . 2011-10-15 15:56 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-08-27 05:37 . 2011-10-15 15:54 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 05:37 . 2011-10-15 15:54 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 04:26 . 2011-10-15 15:54 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-08-27 04:26 . 2011-10-15 15:54 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-19_14.39.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-10-15 12:57 . 2011-11-19 14:40 28110 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-11-19 14:40 29422 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-11-19 10:37 29422 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2011-10-15 12:36 . 2011-11-19 14:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-10-15 12:36 . 2011-11-19 14:56 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2011-11-19 14:45 91600 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2011-10-15 12:36 . 2011-11-19 14:39 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-10-15 12:36 . 2011-11-19 14:56 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-10-15 12:36 . 2011-11-19 14:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-10-15 12:36 . 2011-11-19 14:56 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-10-15 12:36 . 2011-11-19 14:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-10-15 12:36 . 2011-11-19 14:56 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-10-15 12:36 . 2011-11-19 14:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-10-15 12:36 . 2011-11-19 14:56 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-10-15 12:37 . 2011-11-19 14:40 5708 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3482450746-3439478511-704641058-1001_UserData.bin
- 2011-11-19 14:38 . 2011-11-19 14:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-19 14:55 . 2011-11-19 14:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-19 14:55 . 2011-11-19 14:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-11-19 14:38 . 2011-11-19 14:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 05:01 . 2011-11-19 14:54 276452 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-11-19 14:37 276452 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2011-10-15 16:34 . 2011-11-19 14:37 6366341 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3482450746-3439478511-704641058-1001-8192.dat
+ 2011-10-15 16:34 . 2011-11-19 14:54 6366341 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3482450746-3439478511-704641058-1001-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 16:21 1299248 ----a-w- c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-10-15 1242448]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 GEST Service;GEST Service for program management.;c:\program files (x86)\GIGABYTE\EnergySaver\GSvr.exe [2008-12-08 68136]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Classic\safedrv.sys [x]
R3 GPU-Z;GPU-Z;c:\users\Patrik\AppData\Local\Temp\GPU-Z.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 136176]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-08-09 328536]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-08 974944]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2000-01-01 222720]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001Core.job
- c:\users\Patrik\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3482450746-3439478511-704641058-1001UA.job
- c:\users\Patrik\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-15 12:45]
.
2011-11-19 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2011-09-07 09:32]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2008-07-24 6452256]
"Skytel"="Skytel.exe" [2008-07-24 1833504]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-08 4030008]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&affID=100842&mntrId=ecfadc7700000000000000241dcdb3d5
mStart Page = hxxp://home.sweetim.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
.
**************************************************************************
.
Celkový čas: 2011-11-19 16:00:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-19 15:00
ComboFix2.txt 2011-11-19 14:41
.
Před spuštěním: Volných bajtů: 167 752 851 456
Po spuštění: Volných bajtů: 167 710 863 360
.
- - End Of File - - CED081AC8B6127DFE43626E27DC88692

[motji]

Jak to vypadá s počítačem?

[KebiQ]

Jak to myslíte?
Jako jak počítač pracuje,nebo jaké komponenty mám?
No,s tím výkonem,zdá se mi že se hodně zpomalil,co se týče her,poklesly hodně snímky za sekundu.(Srovnávám s výkonem,který podával v době,kdy jsem ho koupil)