POMOC PROSIIIIM

[nanka295]

...prosim pomoc, neide mi otvorit operu a ani ziadny program, nemozem nic urobit, ani scanovat pc, som zufala z nicoho nic mi vyhodilo nejaky scan a ze su tam nejake virusy ci co a nepusti ma dalej co mam robit? ani rsit mi neotvori na vsetko mi v pravom rohu vybehne okno ze application cannot be executed ...potom to pokracuje a .exe is infected

[Rudy]

Zdravím!
Restartujte PC do nouz. režimu a dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=105895 .

[nanka295]

...podarilo sa mi akosi to trosku opravit ale aj tak pc neide tak ako by mal, mozem poprosit o kontrolu? dakujem



Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivana & Peter at 2012-12-14 10:26:10
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 768 GB (82%) free of 939 GB
Total RAM: 4094 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:26:12, on 14/12/2012
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18639)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\ProgramData\AE16AEA8838DE78A0000AE160098EDF5\AE16AEA8838DE78A0000AE160098EDF5.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\Ivana & Peter\AppData\Local\Apps\2.0\79HY34O2.Z1Z\Y3066VMB.26T\odme..tion_e50b86a32720a37b_0001.0000_4b65a94077fa5ee9\Odmenovac.exe
C:\hp\kbd\kbd.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files\trend micro\Ivana & Peter.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2269050
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ÿþ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: DVDVideoSoftTB - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] "C:\Program Files (x86)\PowerISO\PWRISOVM.EXE" -startup
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\RunOnce: [AE16AEA8838DE78A0000AE160098EDF5] C:\ProgramData\AE16AEA8838DE78A0000AE160098EDF5\AE16AEA8838DE78A0000AE160098EDF5.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Odmenovac.appref-ms
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Ivana & Peter\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Odoslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: This service enables products that use the Nalpeiron Licensing System. (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11085 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
C:\Windows\system32\rundll32.exe C:\Windows\system32\NVSVC64.DLL,nvsvcInitialize
"C:\Windows\system32\Dwm.exe"
taskeng.exe {1D2DB306-AEB5-436A-8540-24CA50F375DB}
taskeng.exe {D467326E-27B0-4043-921E-58E647DFBD2A}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe"
taskeng.exe {6DA8EB38-3A2E-496C-AEF8-C93CE315CF72}
"C:\WINDOWS\System32\rundll32.exe" C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
C:\Windows\SysWOW64\svchost.exe -k netsvcs
c:\hp\HPEZBTN\HPBtnSrv.exe
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
C:\Windows\SysWOW64\nlssrv32.exe
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-519d0d69-6b38-4367-ad0d-8437948993fe -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-bec28665-061f-42dc-8deb-281e7b3f23f5 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-570dc7c1-b1ce-411b-8dfd-2c29b006905f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fc785401-f700-403d-b34f-54ad67319e31
"C:\hp\support\hpsysdrv.exe"
"C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE" -startup
"C:\ProgramData\AE16AEA8838DE78A0000AE160098EDF5\AE16AEA8838DE78A0000AE160098EDF5.exe"
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\System32\mobsync.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Windows Media Player\wmpnscfg.exe"
"C:\Users\Ivana & Peter\AppData\Local\Apps\2.0\79HY34O2.Z1Z\Y3066VMB.26T\odme..tion_e50b86a32720a37b_0001.0000_4b65a94077fa5ee9\Odmenovac.exe"
"C:\hp\kbd\kbd.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
C:\$Recycle.Bin\S-1-5-18\$430015b0e2b936efc7a0fd207c28d661\U
"C:\Windows\system32\wuauclt.exe"
C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Windows\system32\conime.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 636 640 648 65536 644
"C:\Users\Ivana & Peter\AppData\Local\Opera\Opera\temporary_downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll [2008-02-06 349552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll [2008-09-19 116088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-05-10 329504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
DVDVideoSoftTB Toolbar - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-05-10 59168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Show Norton Toolbar - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll [2008-02-06 349552]
{872b5b88-9db5-4310-bdd0-ac189557e5f5} - DVDVideoSoftTB Toolbar - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-04-17 15844896]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-04-17 82464]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-06-11 178712]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"MRT"=C:\Windows\system32\MRT.exe [2012-12-14 67413224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1555968]
"WMPNSCFG"=C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AE16AEA8838DE78A0000AE160098EDF5"=C:\ProgramData\AE16AEA8838DE78A0000AE160098EDF5\AE16AEA8838DE78A0000AE160098EDF5 [2012-12-14 2960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe [2008-02-06 51048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-02 75008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPAdvisor]
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2008-07-03 972080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\isCfgWiz]
c:\Program Files (x86)\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\SYMCUW.exe [2008-02-23 611712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
"KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
"OsdMaestro"=c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe [2007-02-15 119296]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-08-27 59280]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-09-09 421776]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2012-08-24 336992]

C:\Users\Ivana & Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odmenovac.appref-ms

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2012-12-14 07:58:55 ----D---- C:\Windows\system32\MpEngineStore
2012-12-14 07:58:55 ----A---- C:\Windows\system32\MRT.INI
2012-12-14 07:58:55 ----A---- C:\Windows\system32\drivers\odwuweon.sys
2012-12-12 17:39:11 ----D---- C:\99ac2d28a8cd374705e7
2012-12-12 17:23:32 ----D---- C:\ProgramData\AE16AEA8838DE78A0000AE160098EDF5
2012-12-10 19:39:33 ----D---- C:\Users\Ivana & Peter\AppData\Roaming\Chief Architect Inc
2012-12-10 19:38:40 ----D---- C:\Users\Ivana & Peter\AppData\Roaming\Chief Architect Premier X5
2012-12-10 19:38:40 ----D---- C:\ProgramData\Chief Architect Premier X5
2012-12-10 19:37:50 ----D---- C:\Program Files\Chief Architect
2012-12-10 11:08:12 ----D---- C:\Users\Ivana & Peter\AppData\Roaming\YourFileDownloader
2012-12-10 11:08:12 ----D---- C:\Program Files (x86)\YourFileDownloader
2012-12-09 20:01:16 ----D---- C:\Users\Ivana & Peter\AppData\Roaming\eTeks
2012-11-18 22:54:33 ----D---- C:\Program Files\RC Desk Pilot
2012-11-18 22:54:03 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-11-18 22:54:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-11-18 22:54:03 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-11-18 22:54:03 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-11-18 22:54:02 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-11-18 22:54:02 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-11-18 22:54:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-11-18 22:54:01 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-11-18 22:53:56 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-11-18 22:53:56 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-11-18 22:53:55 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-11-18 22:53:55 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-11-18 22:53:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-11-18 22:53:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-11-18 22:53:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-11-18 22:53:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-11-18 22:53:30 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-11-18 22:53:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-11-18 22:53:30 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-11-18 22:53:30 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-11-18 22:53:29 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-11-18 22:53:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-11-18 22:53:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-11-18 22:53:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-11-18 22:53:27 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-11-18 22:53:27 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-11-18 22:53:26 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-11-18 22:53:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-11-18 22:53:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-11-18 22:53:25 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-11-18 22:53:24 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-11-18 22:53:24 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-11-18 22:53:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-11-18 22:53:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-11-18 22:53:22 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-11-18 22:53:22 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-11-18 22:53:21 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-11-18 22:53:21 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-11-18 22:53:08 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-11-18 22:53:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-11-18 22:53:08 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-11-18 22:53:08 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-11-18 22:53:06 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-11-18 22:53:06 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-11-18 22:53:05 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-11-18 22:53:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-11-18 22:53:05 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-11-18 22:53:05 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-11-18 22:53:04 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-11-18 22:53:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-11-18 22:53:04 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-11-18 22:53:04 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-11-18 22:52:53 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-11-18 22:52:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-11-18 22:52:53 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-11-18 22:52:53 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-11-18 22:52:52 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-11-18 22:52:52 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-11-18 22:52:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-11-18 22:52:51 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-11-18 22:52:50 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-11-18 22:52:50 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-11-18 22:52:48 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-11-18 22:52:27 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-11-18 22:52:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-11-18 22:52:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-11-18 22:52:25 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-11-18 22:52:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-11-18 22:52:25 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-11-18 22:52:25 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-11-18 22:52:24 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-11-18 22:52:24 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-11-18 22:52:23 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-11-18 22:52:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-11-18 22:52:23 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-11-18 22:52:23 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-11-18 22:52:22 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-11-18 22:52:22 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-11-18 22:52:20 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-11-18 22:52:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-11-18 22:52:20 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-11-18 22:52:20 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-11-18 22:52:19 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-11-18 22:52:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-11-18 22:52:19 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-11-18 22:52:19 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-11-18 22:52:18 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-11-18 22:52:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-11-18 22:52:18 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-11-18 22:52:18 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-11-18 22:52:17 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-11-18 22:52:17 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-11-18 22:52:16 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-11-18 22:52:16 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-11-18 22:52:15 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-11-18 22:52:15 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-11-18 22:52:14 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-11-18 22:52:14 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-11-18 22:52:13 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-11-18 22:52:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-11-18 22:52:13 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-11-18 22:52:13 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-11-18 22:52:12 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-11-18 22:52:12 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-11-18 22:52:11 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-11-18 22:52:11 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-11-18 22:52:09 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-11-18 22:52:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-11-18 22:52:09 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-11-18 22:52:09 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-11-18 22:52:08 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-11-18 22:52:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-11-18 22:52:07 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-11-18 22:52:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-11-18 22:52:06 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-11-18 22:52:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-11-18 22:52:06 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-11-18 22:52:06 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-11-18 22:52:05 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-11-18 22:52:05 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-11-18 22:52:04 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-11-18 22:52:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-11-18 22:52:04 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-11-18 22:52:04 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-11-18 22:52:03 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-11-18 22:52:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-11-18 22:52:03 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-11-18 22:52:03 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-11-18 22:52:02 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-11-18 22:52:02 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-11-18 22:52:01 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-11-18 22:52:01 ----A---- C:\Windows\system32\xinput1_3.dll
2012-11-18 22:52:00 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-11-18 22:52:00 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-11-18 22:51:59 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-11-18 22:51:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-11-18 22:51:59 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-11-18 22:51:59 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-11-18 22:51:58 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-11-18 22:51:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-11-18 22:51:57 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-11-18 22:51:57 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-11-18 22:51:56 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-11-18 22:51:56 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-11-18 22:51:56 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-11-18 22:51:56 ----A---- C:\Windows\system32\d3dx10.dll
2012-11-18 22:51:55 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-11-18 22:51:55 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-11-18 22:51:54 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-11-18 22:51:54 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-11-18 22:51:54 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-11-18 22:51:54 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-11-18 22:51:53 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-11-18 22:51:53 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-11-18 22:51:52 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-11-18 22:51:52 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-11-18 22:51:49 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-11-18 22:51:49 ----A---- C:\Windows\system32\xinput1_2.dll
2012-11-18 22:51:47 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-11-18 22:51:22 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-11-18 22:51:21 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-11-18 22:51:21 ----A---- C:\Windows\system32\xinput1_1.dll
2012-11-18 22:51:19 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-11-18 22:51:19 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-11-18 22:51:14 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-11-18 22:51:14 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-11-18 22:51:12 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-11-18 22:51:12 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-11-18 22:51:12 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-11-18 22:51:12 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-11-18 22:51:10 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-11-18 22:51:10 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-11-18 22:51:09 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-11-18 22:51:09 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-11-18 22:51:08 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-11-18 22:51:07 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-11-18 22:51:07 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-11-18 22:51:05 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-11-18 22:51:05 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-11-18 22:51:04 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-11-18 22:51:04 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-11-18 22:46:37 ----HD---- C:\Windows\msdownld.tmp
2012-11-18 22:46:31 ----D---- C:\Windows\SYSWOW64\directx

======List of files/folders modified in the last 1 month======

2012-12-14 10:26:12 ----D---- C:\Windows\Prefetch
2012-12-14 10:26:12 ----D---- C:\Program Files\trend micro
2012-12-14 10:26:04 ----D---- C:\Windows\Temp
2012-12-14 07:58:55 ----D---- C:\Windows\system32\drivers
2012-12-14 07:58:55 ----D---- C:\Windows\System32
2012-12-14 07:57:16 ----D---- C:\Windows\inf
2012-12-14 07:57:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-14 07:56:49 ----A---- C:\Windows\system32\mrt.exe
2012-12-14 07:56:39 ----SHD---- C:\Windows\Installer
2012-12-14 07:56:38 ----SHD---- C:\Config.Msi
2012-12-14 07:56:14 ----D---- C:\ProgramData\Microsoft Help
2012-12-14 07:55:23 ----SHD---- C:\System Volume Information
2012-12-12 18:28:53 ----D---- C:\Windows\SysWOW64
2012-12-12 18:28:51 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-12 17:23:32 ----HD---- C:\ProgramData
2012-12-12 17:22:36 ----SHD---- C:\$Recycle.Bin
2012-12-10 19:37:53 ----RSD---- C:\Windows\Fonts
2012-12-10 19:37:50 ----RD---- C:\Program Files
2012-12-10 18:21:03 ----RD---- C:\Program Files (x86)
2012-12-10 11:08:13 ----D---- C:\Windows\system32\Tasks
2012-12-09 09:20:55 ----D---- C:\Windows\system32\catroot2
2012-12-07 16:17:56 ----D---- C:\Users\Ivana & Peter\AppData\Roaming\Adobe
2012-12-07 16:16:29 ----D---- C:\ProgramData\Nik Software
2012-12-07 16:16:26 ----D---- C:\Program Files\Nik Software
2012-11-23 08:15:13 ----D---- C:\Program Files (x86)\Opera
2012-11-20 07:56:31 ----AD---- C:\WINDOWS
2012-11-18 22:51:58 ----SD---- C:\Users\Ivana & Peter\AppData\Roaming\Microsoft
2012-11-18 22:51:19 ----RSD---- C:\Windows\assembly
2012-11-18 22:51:00 ----D---- C:\Windows\Microsoft.NET
2012-11-18 22:46:31 ----D---- C:\Windows\Logs
2012-11-17 14:11:09 ----A---- C:\Windows\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iastor.sys [2008-06-11 395800]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2012-08-24 126944]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX64.SYS [2008-01-31 32304]
R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2008-02-19 28720]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35344]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-03 1477272]
R3 NAVENG;NAVENG; \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20080421.003\ENG64.SYS [2008-04-21 125488]
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20080421.003\EX64.SYS [2008-04-21 1417776]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\Windows\system32\DRIVERS\netr28x.sys [2008-06-09 459776]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-04-17 9544736]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2008-02-14 160768]
R3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP64.SYS [2008-01-31 440880]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 108544]
S1 odwuweon;odwuweon; \??\C:\Windows\system32\drivers\odwuweon.sys [2012-12-14 49872]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 6144]
S3 IDSvia64;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~3\Symantec\DEFINI~1\SymcData\ipsdefs\20071204.002\IDSvia64.sys [2007-11-06 251952]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 11008]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 7936]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL64.SYS [2008-01-31 476720]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]
S3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2008-09-19 172080]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-07-09 52736]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 41984]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 46080]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 438328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 ccEvtMgr;Symantec Event Manager; c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-06 149864]
R2 ccSetMgr;Symantec Settings Manager; c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-06 149864]
R2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-06 149864]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-06-02 94208]
R2 HPBtnSrv;HP Chasis Button Service; c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 198240]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-06-11 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 LiveUpdate Notice;LiveUpdate Notice; c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-06 149864]
R2 nlsX86cc;This service enables products that use the Nalpeiron Licensing System.; C:\Windows\SysWOW64\nlssrv32.exe [2011-09-22 66560]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-04-17 355840]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-05-05 624856]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2009-07-24 189728]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-09-09 936848]
R3 Symantec Core LC;Symantec Core LC; C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe [2008-09-19 1245064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-12 250808]
S3 comHost;COM Host; c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-08-21 267096]
S3 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe [2008-03-29 165416]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 LiveUpdate;LiveUpdate; c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE [2008-02-09 3220856]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S4 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe [2008-02-09 238968]

-----------------EOF-----------------

[Rudy]

Poprosím ještě o log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Spusťte v nouz. režimu.