Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Modra smrt .. prosim o radu a pomoc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Brucoun
Návštěvník
Návštěvník
Příspěvky: 112
Registrován: 04 kvě 2009 09:42

Re: Modra smrt .. prosim o radu a pomoc

#46 Příspěvek od Brucoun »

# AdwCleaner v2.100 - Logfile created 12/17/2012 at 22:18:20
# Updated 09/12/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : admin - DENDA-PC
# Boot Mode : Normal
# Running from : C:\Users\admin\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0.1 (cs)

Profile name : default-1355688350244 [Profil par défaut]
File : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\exh6b6iv.default-1355688350244\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [40132 octets] - [15/12/2012 13:09:49]
AdwCleaner[R2].txt - [952 octets] - [17/12/2012 22:18:20]
AdwCleaner[S1].txt - [14732 octets] - [17/12/2012 22:14:32]

########## EOF - C:\AdwCleaner[R2].txt - [1072 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119522
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Modra smrt .. prosim o radu a pomoc

#47 Příspěvek od Rudy »

Poprosím o nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Brucoun
Návštěvník
Návštěvník
Příspěvky: 112
Registrován: 04 kvě 2009 09:42

Re: Modra smrt .. prosim o radu a pomoc

#48 Příspěvek od Brucoun »

Logfile of random's system information tool 1.09 (written by random/random)
Run by admin at 2012-12-19 23:34:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 309 GB (32%) free of 954 GB
Total RAM: 4095 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:34:19, on 19.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Advanced Wheel Mouse\wh_exec.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Program Files\trend micro\admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O2 - BHO: Vizuální záložky - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O3 - Toolbar: Yandex.Bar - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll
O4 - HKLM\..\Run: [WheelMouse] C:\ADVANC~1\wh_exec.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: tcbhn.lnk = admin\AppData\Roaming\BrowserCompanion\tcbhn.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9839 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
winlogon.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {406FB060-DC4F-4E5F-90C1-ED49308E00EC}
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll", saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll", saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll", saHooker_Initialize_and_Wait
C:\Windows\SysWOW64\PnkBstrA.exe
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2344
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe"
"C:\Program Files\Saitek\SD6\Software\ProfilerU.exe"
"C:\Program Files\Saitek\SD6\Software\SaiMfd.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Advanced Wheel Mouse\wh_exec.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3408.8dbb400.1654003156 "C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3408 "\\.\pipe\gecko-crash-server-pipe.3408" plugin
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe" --proxy-stub-channel=Flash176.6E84B7B8.41 --host-broker-channel=Flash176.6E84B7B8.18467 --host-pid=176 --host-npapi-version=27 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll"
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe" --channel=1084.002FF63C.1438097350 --proxy-stub-channel=Flash176.6E84B7B8.41 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\admin\Downloads\RSITx64(1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\exh6b6iv.default-1355688350244

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37]
"Description"=
"Path"=C:\Windows\SysWOW64\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/SAFFPlugin]
"Description"=
"Path"=C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
McSiteAdvisor.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-25 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2012-10-17 322856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-25 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-09-24 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2012-10-17 262080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
Vizuální záložky - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll [2011-10-13 2697528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-09-24 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2012-10-17 322856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2012-10-17 262080]
{91397D20-1446-11D4-8AF4-0040CA1127B6} - Yandex.Bar - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll [2011-10-20 12336440]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SaiVolume"=C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe [2008-01-18 186880]
"ProfilerU"=C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [2010-07-29 310272]
"SaiMfd"=C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [2010-07-29 158208]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"IntelliType Pro"=C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2000-01-01 1464944]
"IntelliPoint"=C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2000-01-01 2076272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WheelMouse"=C:\ADVANC~1\wh_exec.exe [2008-10-08 147456]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-09-28 642728]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-05-24 2439072]
""= []
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]

C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
tcbhn.lnk - C:\Users\admin\AppData\Roaming\BrowserCompanion\tcbhn.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.js - open -
.txt - open -

======List of files/folders created in the last 1 month======

2012-12-17 22:18:20 ----A---- C:\AdwCleaner[R2].txt
2012-12-17 22:14:32 ----A---- C:\AdwCleaner[S1].txt
2012-12-15 22:19:30 ----D---- C:\ProgramData\Orbit
2012-12-15 22:04:07 ----D---- C:\Program Files (x86)\Far Cry 3
2012-12-15 13:09:49 ----A---- C:\AdwCleaner[R1].txt
2012-12-13 07:14:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-13 07:14:47 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-13 07:14:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-13 07:14:44 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-13 07:14:44 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-13 07:14:44 ----A---- C:\Windows\system32\ieui.dll
2012-12-13 07:14:43 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-13 07:14:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-13 07:14:43 ----A---- C:\Windows\system32\url.dll
2012-12-13 07:14:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-13 07:14:42 ----A---- C:\Windows\system32\urlmon.dll
2012-12-13 07:14:41 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-13 07:14:41 ----A---- C:\Windows\system32\jscript9.dll
2012-12-13 07:14:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-13 07:14:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-13 07:14:38 ----A---- C:\Windows\system32\wininet.dll
2012-12-13 07:14:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-13 07:14:37 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-13 07:14:37 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-13 07:14:36 ----A---- C:\Windows\system32\vbscript.dll
2012-12-13 07:14:36 ----A---- C:\Windows\system32\jscript.dll
2012-12-13 07:14:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-13 07:14:35 ----A---- C:\Windows\system32\iertutil.dll
2012-12-13 07:14:34 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-13 07:14:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-13 07:14:29 ----A---- C:\Windows\system32\mshtml.dll
2012-12-13 07:14:28 ----A---- C:\Windows\system32\ieframe.dll
2012-12-13 07:14:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\winsrv.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\kernel32.dll
2012-12-13 07:13:38 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-13 07:13:38 ----A---- C:\Windows\system32\conhost.exe
2012-12-13 07:13:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-13 07:13:36 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-13 07:13:36 ----A---- C:\Windows\system32\wow64win.dll
2012-12-13 07:13:36 ----A---- C:\Windows\system32\wow64.dll
2012-12-13 07:13:36 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-13 07:13:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-13 07:13:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-13 07:13:35 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-13 07:13:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 07:13:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 07:13:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-13 07:13:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-13 07:13:22 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-13 07:13:01 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-13 07:13:01 ----A---- C:\Windows\system32\tzres.dll
2012-12-13 07:12:53 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-13 07:12:53 ----A---- C:\Windows\system32\dpnet.dll
2012-12-13 07:12:52 ----A---- C:\Windows\system32\win32k.sys
2012-12-13 07:12:51 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-13 07:12:51 ----A---- C:\Windows\system32\atmlib.dll
2012-12-13 07:12:51 ----A---- C:\Windows\system32\atmfd.dll
2012-12-13 07:12:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioVisualization2.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioRecord2.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioFile2.dll
2012-12-12 21:33:22 ----D---- C:\Program Files (x86)\Free MP3 Sound Recorder
2012-12-12 20:42:17 ----D---- C:\rsit
2012-12-12 20:42:17 ----D---- C:\Program Files\trend micro
2012-12-12 06:54:32 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-12-11 21:06:51 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2012-12-02 10:02:23 ----D---- C:\Windows\CheckSur
2012-11-30 20:50:30 ----D---- C:\ProgramData\NortonInstaller
2012-11-30 18:50:54 ----D---- C:\Windows\SYSWOW64\temp
2012-11-30 18:50:54 ----D---- C:\ProgramData\PassMark
2012-11-30 18:50:41 ----D---- C:\Program Files (x86)\BurnInTest
2012-11-29 20:53:09 ----A---- C:\Windows\system32\drivers\AtiPcie.sys
2012-11-29 20:49:48 ----A---- C:\Windows\system32\VIASysFx.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\nQPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\nQAPO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\Dts2APO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\drivers\viahduaa.sys
2012-11-28 20:50:09 ----D---- C:\Program Files (x86)\FinalWire
2012-11-28 20:01:49 ----D---- C:\Users\admin\AppData\Roaming\JAM Software
2012-11-28 20:01:41 ----D---- C:\Program Files (x86)\JAM Software
2012-11-28 19:31:31 ----A---- C:\Windows\system32\drivers\SWDUMon.sys
2012-11-28 18:59:03 ----A---- C:\Windows\SYSWOW64\drivers\DrvAgent64.SYS
2012-11-28 18:28:30 ----D---- C:\Program Files (x86)\Marvell
2012-11-28 18:21:38 ----DC---- C:\Windows\system32\DRVSTORE
2012-11-28 18:21:38 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2012-11-28 18:21:28 ----A---- C:\Windows\system32\drivers\AtiPcie64.sys
2012-11-28 18:04:24 ----N---- C:\Windows\difxapi.dll
2012-11-28 18:04:24 ----D---- C:\Program Files (x86)\VIA
2012-11-28 18:03:29 ----A---- C:\Windows\system32\ViaKaraokePropPageExt.dll
2012-11-28 18:03:29 ----A---- C:\Windows\system32\ViaKaraokeApo.dll
2012-11-28 18:03:20 ----A---- C:\Windows\system32\ViakaraokeSrv.exe
2012-11-28 17:56:41 ----A---- C:\Windows\system32\RTNUninst64.dll
2012-11-28 17:56:41 ----A---- C:\Windows\system32\RtNicProp64.dll
2012-11-28 17:56:41 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2012-11-28 17:56:38 ----D---- C:\Program Files (x86)\Realtek
2012-11-28 17:53:29 ----D---- C:\Program Files\Microsoft Mouse and Keyboard Center
2012-11-28 17:46:09 ----D---- C:\Program Files (x86)\SlimDrivers
2012-11-28 17:45:57 ----D---- C:\Program Files (x86)\Downloaded Installers
2012-11-27 22:55:04 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2012-11-25 13:12:32 ----D---- C:\ProgramData\Symantec
2012-11-25 13:04:04 ----D---- C:\ProgramData\Norton
2012-11-25 13:03:29 ----D---- C:\Users\admin\AppData\Roaming\PCCUStubInstaller
2012-11-25 12:24:52 ----A---- C:\Windows\system32\javaws.exe
2012-11-25 12:24:46 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-11-25 12:24:46 ----A---- C:\Windows\system32\javaw.exe
2012-11-25 12:24:46 ----A---- C:\Windows\system32\java.exe
2012-11-25 12:24:39 ----D---- C:\Program Files\Java
2012-11-24 17:16:18 ----D---- C:\ProgramData\FLEXnet
2012-11-24 16:55:00 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-11-24 16:55:00 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-11-24 16:55:00 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2012-11-24 16:54:59 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-11-24 16:54:59 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\wksprtPS.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\TSWbPrxy.exe
2012-11-24 16:54:58 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\tsgqec.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\rdpudd.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\aaclient.dll
2012-11-24 16:54:57 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-11-24 16:54:57 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-11-24 16:54:57 ----A---- C:\Windows\system32\wksprt.exe
2012-11-24 16:54:57 ----A---- C:\Windows\system32\rdpendp_winip.dll
2012-11-24 16:54:57 ----A---- C:\Windows\system32\rdpcorets.dll
2012-11-24 16:54:57 ----A---- C:\Windows\system32\mstsc.exe
2012-11-24 16:54:56 ----A---- C:\Windows\system32\mstscax.dll
2012-11-24 16:54:10 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-11-24 16:54:10 ----A---- C:\Windows\system32\schannel.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\ncrypt.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\lsasrv.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-11-24 16:54:09 ----A---- C:\Windows\system32\drivers\cng.sys
2012-11-24 16:54:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-11-24 16:54:08 ----A---- C:\Windows\system32\qdvd.dll
2012-11-24 12:13:04 ----D---- C:\Program Files\Adobe
2012-11-24 11:37:30 ----D---- C:\Windows\SYSWOW64\spool
2012-11-24 11:36:51 ----D---- C:\Program Files (x86)\Adobe Media Player
2012-11-24 10:48:00 ----D---- C:\Program Files\Common Files\Adobe
2012-11-22 20:54:11 ----D---- C:\Program Files (x86)\Bethesda Softworks

======List of files/folders modified in the last 1 month======

2012-12-19 23:34:19 ----D---- C:\Windows\Prefetch
2012-12-19 23:34:04 ----D---- C:\Windows\Temp
2012-12-19 23:33:19 ----D---- C:\Windows\System32
2012-12-19 23:33:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-19 21:49:17 ----D---- C:\Windows\system32\config
2012-12-19 21:48:50 ----D---- C:\Users\admin\AppData\Roaming\Skype
2012-12-19 19:16:57 ----D---- C:\Users\admin\AppData\Roaming\.techniclauncher
2012-12-19 19:13:41 ----D---- C:\Users\admin\AppData\Roaming\.minecraft
2012-12-19 16:44:48 ----D---- C:\ProgramData\PMB Files
2012-12-17 22:14:41 ----D---- C:\Windows\SysWOW64
2012-12-17 22:14:38 ----SHD---- C:\Windows\Installer
2012-12-17 22:14:38 ----D---- C:\Program Files (x86)\Common Files
2012-12-17 22:14:37 ----RD---- C:\Program Files (x86)
2012-12-17 22:14:34 ----HD---- C:\ProgramData
2012-12-16 08:49:29 ----SHD---- C:\System Volume Information
2012-12-16 08:40:10 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2012-12-16 08:38:51 ----D---- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2012-12-15 13:43:04 ----D---- C:\Windows\rescache
2012-12-15 09:31:09 ----D---- C:\Windows\system32\catroot2
2012-12-13 19:38:24 ----D---- C:\Windows\winsxs
2012-12-13 07:25:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-13 07:25:57 ----D---- C:\Windows\system32\cs-CZ
2012-12-13 07:25:56 ----D---- C:\Windows\SYSWOW64\migration
2012-12-13 07:25:56 ----D---- C:\Windows\system32\migration
2012-12-13 07:25:56 ----D---- C:\Windows\AppPatch
2012-12-13 07:25:56 ----D---- C:\Program Files\Internet Explorer
2012-12-13 07:25:56 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-13 07:16:55 ----D---- C:\Windows\debug
2012-12-13 07:16:54 ----A---- C:\Windows\system32\MRT.exe
2012-12-13 07:15:16 ----D---- C:\Windows\system32\catroot
2012-12-12 21:30:23 ----D---- C:\Users\admin\AppData\Roaming\vlc
2012-12-12 20:42:17 ----RD---- C:\Program Files
2012-12-12 06:54:41 ----SHD---- C:\Config.Msi
2012-12-11 21:07:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-07 20:11:03 ----D---- C:\Program Files (x86)\SpeedFan
2012-12-06 18:29:45 ----D---- C:\Program Files (x86)\Steam
2012-12-06 15:25:15 ----D---- C:\Windows
2012-12-06 06:50:44 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-12-05 17:50:12 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-12-05 17:49:56 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2012-11-30 21:15:30 ----D---- C:\Windows\system32\drivers
2012-11-30 21:15:29 ----D---- C:\Windows\Tasks
2012-11-30 21:15:29 ----D---- C:\Windows\system32\Tasks
2012-11-29 20:55:50 ----D---- C:\Windows\system32\DriverStore
2012-11-29 20:55:50 ----D---- C:\Windows\inf
2012-11-29 20:54:41 ----A---- C:\Windows\Language_trs.ini
2012-11-29 20:49:40 ----D---- C:\zaloha
2012-11-29 20:45:37 ----D---- C:\Windows\Minidump
2012-11-29 20:16:29 ----A---- C:\Windows\system32\shell32.dll
2012-11-28 20:09:22 ----D---- C:\Program Files\CPUID
2012-11-28 18:59:03 ----D---- C:\Windows\SYSWOW64\drivers
2012-11-28 18:06:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-11-28 17:54:33 ----SD---- C:\Users\admin\AppData\Roaming\Microsoft
2012-11-26 22:59:33 ----RD---- C:\fffff
2012-11-25 12:24:40 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-11-25 12:24:40 ----A---- C:\Windows\system32\deployJava1.dll
2012-11-25 11:29:05 ----D---- C:\Users\admin\AppData\Roaming\Adobe
2012-11-25 11:28:00 ----D---- C:\Program Files\Common Files
2012-11-25 11:27:22 ----D---- C:\Program Files (x86)\Adobe
2012-11-25 11:27:10 ----D---- C:\ProgramData\Adobe
2012-11-25 11:22:31 ----D---- C:\Program Files\CCleaner
2012-11-24 21:19:05 ----RSD---- C:\Windows\Fonts
2012-11-24 17:37:49 ----D---- C:\Program Files (x86)\EA GAMES
2012-11-24 17:35:20 ----A---- C:\Windows\QIII.INI
2012-11-24 16:55:56 ----D---- C:\Windows\SYSWOW64\wbem
2012-11-24 16:55:56 ----D---- C:\Windows\SYSWOW64\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\system32\wbem
2012-11-24 16:55:56 ----D---- C:\Windows\system32\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\system32\drivers\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\PolicyDefinitions
2012-11-23 20:18:48 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2012-11-23 17:55:44 ----D---- C:\Program Files (x86)\Ubisoft
2012-11-23 17:54:17 ----RSD---- C:\Windows\assembly
2012-11-22 20:53:08 ----D---- C:\ProgramData\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2010-10-26 181040]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2007-12-17 14392]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-19 283200]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-04-16 88480]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2011-01-19 21992]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-04-16 46400]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-09-28 10697216]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-09-28 460288]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 553576]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2010-08-10 22792]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2010-08-10 50056]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2000-01-01 56448]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-05-15 1327520]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\Windows\system32\DRIVERS\whfltr2k.sys [2007-01-26 9600]
S1 sensorsview;sensorsview; \??\C:\Program Files (x86)\SensorsViewPro41\drv\sensorsview32_64.sys []
S2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
S2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-11-28 21712]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 SaiK0728;SaiK0728; C:\Windows\system32\DRIVERS\SaiK0728.sys [2008-02-18 129024]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-11-28 15712]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-09-28 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-09-28 361984]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [2012-10-23 103472]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-11-23 76888]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-11 250808]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-05 115168]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-10-26 529744]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-27 1255736]
S4 AODService;AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [2009-04-22 124256]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119522
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Modra smrt .. prosim o radu a pomoc

#49 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
C:\Program Files (x86)\Yandex
C:\Users\admin\AppData\Roaming\BrowserCompanion\tcbhn.exe
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Brucoun
Návštěvník
Návštěvník
Příspěvky: 112
Registrován: 04 kvě 2009 09:42

Re: Modra smrt .. prosim o radu a pomoc

#50 Příspěvek od Brucoun »

Logfile of random's system information tool 1.09 (written by random/random)
Run by admin at 2012-12-20 22:57:20
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 313 GB (33%) free of 954 GB
Total RAM: 4095 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:57:23, on 20.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Advanced Wheel Mouse\wh_exec.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Program Files\trend micro\admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [WheelMouse] C:\ADVANC~1\wh_exec.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Spustit klienta k monitoru &1 - C:\Windows\web\AOpenClient.htm
O8 - Extra context menu item: Spustit klienta k monitoru &2 - C:\Windows\web\AOpenClient.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9191 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe
"taskhost.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll", saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll", saHooker_Initialize_and_Wait
taskeng.exe {75DCA928-3792-43D2-B879-BD47030FC5FE}
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll", saHooker_Initialize_and_Wait
WLIDSvcM.exe 2120
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe"
"C:\Program Files\Saitek\SD6\Software\ProfilerU.exe"
"C:\Program Files\Saitek\SD6\Software\SaiMfd.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Advanced Wheel Mouse\wh_exec.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
HydraDM64.exe -h:198162 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3816.b55f800.615953049 "C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3816 "\\.\pipe\gecko-crash-server-pipe.3816" plugin
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe" --proxy-stub-channel=Flash1008.6FEBB7B8.41 --host-broker-channel=Flash1008.6FEBB7B8.18467 --host-pid=1008 --host-npapi-version=27 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll"
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe" --channel=3760.0043F6B4.1750972549 --proxy-stub-channel=Flash1008.6FEBB7B8.41 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\sppsvc.exe
"C:\Users\admin\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\exh6b6iv.default-1355688350244

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37]
"Description"=
"Path"=C:\Windows\SysWOW64\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/SAFFPlugin]
"Description"=
"Path"=C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
McSiteAdvisor.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-25 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2012-10-17 322856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-25 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-09-24 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-09-24 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2012-10-17 322856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SaiVolume"=C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe [2008-01-18 186880]
"ProfilerU"=C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [2010-07-29 310272]
"SaiMfd"=C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [2010-07-29 158208]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"IntelliType Pro"=C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2000-01-01 1464944]
"IntelliPoint"=C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2000-01-01 2076272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2010-07-06 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WheelMouse"=C:\ADVANC~1\wh_exec.exe [2008-10-08 147456]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-09-28 642728]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-05-24 2439072]
""= []
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.js - open -
.txt - open -

======List of files/folders created in the last 1 month======

2012-12-20 22:52:42 ----D---- C:\_OTM
2012-12-17 22:18:20 ----A---- C:\AdwCleaner[R2].txt
2012-12-17 22:14:32 ----A---- C:\AdwCleaner[S1].txt
2012-12-15 22:19:30 ----D---- C:\ProgramData\Orbit
2012-12-15 22:04:07 ----D---- C:\Program Files (x86)\Far Cry 3
2012-12-15 13:09:49 ----A---- C:\AdwCleaner[R1].txt
2012-12-13 07:14:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-13 07:14:47 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-13 07:14:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-13 07:14:44 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-13 07:14:44 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-13 07:14:44 ----A---- C:\Windows\system32\ieui.dll
2012-12-13 07:14:43 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-13 07:14:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-13 07:14:43 ----A---- C:\Windows\system32\url.dll
2012-12-13 07:14:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-13 07:14:42 ----A---- C:\Windows\system32\urlmon.dll
2012-12-13 07:14:41 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-13 07:14:41 ----A---- C:\Windows\system32\jscript9.dll
2012-12-13 07:14:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-13 07:14:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-13 07:14:38 ----A---- C:\Windows\system32\wininet.dll
2012-12-13 07:14:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-13 07:14:37 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-13 07:14:37 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-13 07:14:36 ----A---- C:\Windows\system32\vbscript.dll
2012-12-13 07:14:36 ----A---- C:\Windows\system32\jscript.dll
2012-12-13 07:14:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-13 07:14:35 ----A---- C:\Windows\system32\iertutil.dll
2012-12-13 07:14:34 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-13 07:14:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-13 07:14:29 ----A---- C:\Windows\system32\mshtml.dll
2012-12-13 07:14:28 ----A---- C:\Windows\system32\ieframe.dll
2012-12-13 07:14:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\winsrv.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-13 07:13:39 ----A---- C:\Windows\system32\kernel32.dll
2012-12-13 07:13:38 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-13 07:13:38 ----A---- C:\Windows\system32\conhost.exe
2012-12-13 07:13:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-13 07:13:36 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-13 07:13:36 ----A---- C:\Windows\system32\wow64win.dll
2012-12-13 07:13:36 ----A---- C:\Windows\system32\wow64.dll
2012-12-13 07:13:36 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-13 07:13:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-13 07:13:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-13 07:13:35 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-13 07:13:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 07:13:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 07:13:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-13 07:13:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 07:13:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 07:13:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 07:13:29 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 07:13:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 07:13:27 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-13 07:13:22 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-13 07:13:01 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-13 07:13:01 ----A---- C:\Windows\system32\tzres.dll
2012-12-13 07:12:53 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-13 07:12:53 ----A---- C:\Windows\system32\dpnet.dll
2012-12-13 07:12:52 ----A---- C:\Windows\system32\win32k.sys
2012-12-13 07:12:51 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-13 07:12:51 ----A---- C:\Windows\system32\atmlib.dll
2012-12-13 07:12:51 ----A---- C:\Windows\system32\atmfd.dll
2012-12-13 07:12:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioVisualization2.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioRecord2.dll
2012-12-12 21:33:23 ----A---- C:\Windows\SYSWOW64\NCTAudioFile2.dll
2012-12-12 21:33:22 ----D---- C:\Program Files (x86)\Free MP3 Sound Recorder
2012-12-12 20:42:17 ----D---- C:\rsit
2012-12-12 20:42:17 ----D---- C:\Program Files\trend micro
2012-12-12 06:54:32 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-12-11 21:06:51 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2012-12-02 10:02:23 ----D---- C:\Windows\CheckSur
2012-11-30 20:50:30 ----D---- C:\ProgramData\NortonInstaller
2012-11-30 18:50:54 ----D---- C:\Windows\SYSWOW64\temp
2012-11-30 18:50:54 ----D---- C:\ProgramData\PassMark
2012-11-30 18:50:41 ----D---- C:\Program Files (x86)\BurnInTest
2012-11-29 20:53:09 ----A---- C:\Windows\system32\drivers\AtiPcie.sys
2012-11-29 20:49:48 ----A---- C:\Windows\system32\VIASysFx.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\nQPropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\nQAPO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\Dts2APO.dll
2012-11-29 20:49:48 ----A---- C:\Windows\system32\drivers\viahduaa.sys
2012-11-28 20:50:09 ----D---- C:\Program Files (x86)\FinalWire
2012-11-28 20:01:49 ----D---- C:\Users\admin\AppData\Roaming\JAM Software
2012-11-28 20:01:41 ----D---- C:\Program Files (x86)\JAM Software
2012-11-28 19:31:31 ----A---- C:\Windows\system32\drivers\SWDUMon.sys
2012-11-28 18:59:03 ----A---- C:\Windows\SYSWOW64\drivers\DrvAgent64.SYS
2012-11-28 18:28:30 ----D---- C:\Program Files (x86)\Marvell
2012-11-28 18:21:38 ----DC---- C:\Windows\system32\DRVSTORE
2012-11-28 18:21:38 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2012-11-28 18:21:28 ----A---- C:\Windows\system32\drivers\AtiPcie64.sys
2012-11-28 18:04:24 ----N---- C:\Windows\difxapi.dll
2012-11-28 18:04:24 ----D---- C:\Program Files (x86)\VIA
2012-11-28 18:03:29 ----A---- C:\Windows\system32\ViaKaraokePropPageExt.dll
2012-11-28 18:03:29 ----A---- C:\Windows\system32\ViaKaraokeApo.dll
2012-11-28 18:03:20 ----A---- C:\Windows\system32\ViakaraokeSrv.exe
2012-11-28 17:56:41 ----A---- C:\Windows\system32\RTNUninst64.dll
2012-11-28 17:56:41 ----A---- C:\Windows\system32\RtNicProp64.dll
2012-11-28 17:56:41 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2012-11-28 17:56:38 ----D---- C:\Program Files (x86)\Realtek
2012-11-28 17:53:29 ----D---- C:\Program Files\Microsoft Mouse and Keyboard Center
2012-11-28 17:46:09 ----D---- C:\Program Files (x86)\SlimDrivers
2012-11-28 17:45:57 ----D---- C:\Program Files (x86)\Downloaded Installers
2012-11-27 22:55:04 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2012-11-25 13:12:32 ----D---- C:\ProgramData\Symantec
2012-11-25 13:04:04 ----D---- C:\ProgramData\Norton
2012-11-25 13:03:29 ----D---- C:\Users\admin\AppData\Roaming\PCCUStubInstaller
2012-11-25 12:24:52 ----A---- C:\Windows\system32\javaws.exe
2012-11-25 12:24:46 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-11-25 12:24:46 ----A---- C:\Windows\system32\javaw.exe
2012-11-25 12:24:46 ----A---- C:\Windows\system32\java.exe
2012-11-25 12:24:39 ----D---- C:\Program Files\Java
2012-11-24 17:16:18 ----D---- C:\ProgramData\FLEXnet
2012-11-24 16:55:00 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-11-24 16:55:00 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-11-24 16:55:00 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2012-11-24 16:54:59 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-11-24 16:54:59 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2012-11-24 16:54:58 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\wksprtPS.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\TSWbPrxy.exe
2012-11-24 16:54:58 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\tsgqec.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\rdpudd.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2012-11-24 16:54:58 ----A---- C:\Windows\system32\aaclient.dll
2012-11-24 16:54:57 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-11-24 16:54:57 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-11-24 16:54:57 ----A---- C:\Windows\system32\wksprt.exe
2012-11-24 16:54:57 ----A---- C:\Windows\system32\rdpendp_winip.dll
2012-11-24 16:54:57 ----A---- C:\Windows\system32\rdpcorets.dll
2012-11-24 16:54:57 ----A---- C:\Windows\system32\mstsc.exe
2012-11-24 16:54:56 ----A---- C:\Windows\system32\mstscax.dll
2012-11-24 16:54:10 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-11-24 16:54:10 ----A---- C:\Windows\system32\schannel.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-11-24 16:54:09 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\ncrypt.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\lsasrv.dll
2012-11-24 16:54:09 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-11-24 16:54:09 ----A---- C:\Windows\system32\drivers\cng.sys
2012-11-24 16:54:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-11-24 16:54:08 ----A---- C:\Windows\system32\qdvd.dll
2012-11-24 12:13:04 ----D---- C:\Program Files\Adobe
2012-11-24 11:37:30 ----D---- C:\Windows\SYSWOW64\spool
2012-11-24 11:36:51 ----D---- C:\Program Files (x86)\Adobe Media Player
2012-11-24 10:48:00 ----D---- C:\Program Files\Common Files\Adobe
2012-11-22 20:54:11 ----D---- C:\Program Files (x86)\Bethesda Softworks

======List of files/folders modified in the last 1 month======

2012-12-20 22:57:17 ----D---- C:\Windows\Prefetch
2012-12-20 22:56:55 ----D---- C:\Windows\Temp
2012-12-20 22:53:30 ----D---- C:\Windows\system32\config
2012-12-20 22:53:03 ----D---- C:\Windows\SysWOW64
2012-12-20 22:53:03 ----D---- C:\Windows
2012-12-20 22:52:42 ----RD---- C:\Program Files (x86)
2012-12-20 21:46:10 ----D---- C:\Users\admin\AppData\Roaming\Skype
2012-12-20 21:25:32 ----D---- C:\Users\admin\AppData\Roaming\.techniclauncher
2012-12-20 19:31:27 ----D---- C:\Users\admin\AppData\Roaming\.minecraft
2012-12-20 18:20:08 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2012-12-20 15:57:15 ----SHD---- C:\System Volume Information
2012-12-20 15:51:05 ----D---- C:\Windows\System32
2012-12-20 15:51:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-19 16:44:48 ----D---- C:\ProgramData\PMB Files
2012-12-17 22:14:38 ----SHD---- C:\Windows\Installer
2012-12-17 22:14:38 ----D---- C:\Program Files (x86)\Common Files
2012-12-17 22:14:34 ----HD---- C:\ProgramData
2012-12-16 08:38:51 ----D---- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2012-12-15 13:43:04 ----D---- C:\Windows\rescache
2012-12-15 09:31:09 ----D---- C:\Windows\system32\catroot2
2012-12-13 19:38:24 ----D---- C:\Windows\winsxs
2012-12-13 07:25:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-13 07:25:57 ----D---- C:\Windows\system32\cs-CZ
2012-12-13 07:25:56 ----D---- C:\Windows\SYSWOW64\migration
2012-12-13 07:25:56 ----D---- C:\Windows\system32\migration
2012-12-13 07:25:56 ----D---- C:\Windows\AppPatch
2012-12-13 07:25:56 ----D---- C:\Program Files\Internet Explorer
2012-12-13 07:25:56 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-13 07:16:55 ----D---- C:\Windows\debug
2012-12-13 07:16:54 ----A---- C:\Windows\system32\MRT.exe
2012-12-13 07:15:16 ----D---- C:\Windows\system32\catroot
2012-12-12 21:30:23 ----D---- C:\Users\admin\AppData\Roaming\vlc
2012-12-12 20:42:17 ----RD---- C:\Program Files
2012-12-12 06:54:41 ----SHD---- C:\Config.Msi
2012-12-11 21:07:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-07 20:11:03 ----D---- C:\Program Files (x86)\SpeedFan
2012-12-06 18:29:45 ----D---- C:\Program Files (x86)\Steam
2012-12-06 06:50:44 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-12-05 17:50:12 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-12-05 17:49:56 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2012-11-30 21:15:30 ----D---- C:\Windows\system32\drivers
2012-11-30 21:15:29 ----D---- C:\Windows\Tasks
2012-11-30 21:15:29 ----D---- C:\Windows\system32\Tasks
2012-11-29 20:55:50 ----D---- C:\Windows\system32\DriverStore
2012-11-29 20:55:50 ----D---- C:\Windows\inf
2012-11-29 20:54:41 ----A---- C:\Windows\Language_trs.ini
2012-11-29 20:49:40 ----D---- C:\zaloha
2012-11-29 20:45:37 ----D---- C:\Windows\Minidump
2012-11-29 20:16:29 ----A---- C:\Windows\system32\shell32.dll
2012-11-28 20:09:22 ----D---- C:\Program Files\CPUID
2012-11-28 18:59:03 ----D---- C:\Windows\SYSWOW64\drivers
2012-11-28 18:06:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-11-28 17:54:33 ----SD---- C:\Users\admin\AppData\Roaming\Microsoft
2012-11-26 22:59:33 ----RD---- C:\fffff
2012-11-25 12:24:40 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-11-25 12:24:40 ----A---- C:\Windows\system32\deployJava1.dll
2012-11-25 11:29:05 ----D---- C:\Users\admin\AppData\Roaming\Adobe
2012-11-25 11:28:00 ----D---- C:\Program Files\Common Files
2012-11-25 11:27:22 ----D---- C:\Program Files (x86)\Adobe
2012-11-25 11:27:10 ----D---- C:\ProgramData\Adobe
2012-11-25 11:22:31 ----D---- C:\Program Files\CCleaner
2012-11-24 21:19:05 ----RSD---- C:\Windows\Fonts
2012-11-24 17:37:49 ----D---- C:\Program Files (x86)\EA GAMES
2012-11-24 17:35:20 ----A---- C:\Windows\QIII.INI
2012-11-24 16:55:56 ----D---- C:\Windows\SYSWOW64\wbem
2012-11-24 16:55:56 ----D---- C:\Windows\SYSWOW64\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\system32\wbem
2012-11-24 16:55:56 ----D---- C:\Windows\system32\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\system32\drivers\en-US
2012-11-24 16:55:56 ----D---- C:\Windows\PolicyDefinitions
2012-11-23 20:18:48 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2012-11-23 17:55:44 ----D---- C:\Program Files (x86)\Ubisoft
2012-11-23 17:54:17 ----RSD---- C:\Windows\assembly
2012-11-22 20:53:08 ----D---- C:\ProgramData\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2010-10-26 181040]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2007-12-17 14392]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-19 283200]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-04-16 88480]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2011-01-19 21992]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-04-16 46400]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-09-28 10697216]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-09-28 460288]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 553576]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2010-08-10 22792]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2010-08-10 50056]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2000-01-01 56448]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-05-15 1327520]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\Windows\system32\DRIVERS\whfltr2k.sys [2007-01-26 9600]
S1 sensorsview;sensorsview; \??\C:\Program Files (x86)\SensorsViewPro41\drv\sensorsview32_64.sys []
S2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
S2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-11-28 21712]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 SaiK0728;SaiK0728; C:\Windows\system32\DRIVERS\SaiK0728.sys [2008-02-18 129024]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-11-28 15712]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-09-28 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-09-28 361984]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [2012-10-23 103472]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-11-23 76888]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-11 250808]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-05 115168]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-10-26 529744]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-27 1255736]
S4 AODService;AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [2009-04-22 124256]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119522
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Modra smrt .. prosim o radu a pomoc

#51 Příspěvek od Rudy »

Log je již OK. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Brucoun
Návštěvník
Návštěvník
Příspěvky: 112
Registrován: 04 kvě 2009 09:42

Re: Modra smrt .. prosim o radu a pomoc

#52 Příspěvek od Brucoun »

Provedeno .. sice nevim co a proc jsme jednotlive kroky delali .. ale diky ... :))))
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119522
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Modra smrt .. prosim o radu a pomoc

#53 Příspěvek od Rudy »

PC jsme otestovali a vyčistili od zbytečností. Vir nemáte. Jěště je nějaký problém?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Brucoun
Návštěvník
Návštěvník
Příspěvky: 112
Registrován: 04 kvě 2009 09:42

Re: Modra smrt .. prosim o radu a pomoc

#54 Příspěvek od Brucoun »

Perfektni .. diky moc...

Hezke svatky :)))
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119522
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Modra smrt .. prosim o radu a pomoc

#55 Příspěvek od Rudy »

Hezké svátky i vám a nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“