Hacker v pc?

[back]

Ahoj, dneska ráno jsem normálně zapnul pc a najela tam jako vždy startovní plocha, kde se zobrazují uživatelé. Začal jsem cvičit a stalo se něco opravdu podezřelého. Pc se sám od sebe přihlásil (viděl jsem to) a to mám uživ. účet chráněný heslem. Dále pc začíná zamrzávat třeba i na 10 sekund i více při načtení nějakého náročnějšího webu. Ale nejvíce mě zajímá ten první problém. Děkuji moc.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Martin at 2013-01-19 08:34:28
Microsoft Windows 7 Ultimate
System drive C: has 206 GB (43%) free of 477 GB
Total RAM: 3327 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:34:32, on 19.1.2013
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\OO Software\Defrag\oodtray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Martin\Downloads\RSIT.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.6\ytdToolbarIE.dll
R3 - URLSearchHook: (no name) - {9e06d377-8c36-46df-9e57-0f6f3f5ee23e} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SMSender.E.ToolbarsHelper - {24BCDA96-8FCB-4D3B-0500-000000000004} - mscoree.dll (file missing)
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.6\ytdToolbarIE.dll
O3 - Toolbar: O2 SMSender - {24BCDA96-8FCB-4D3B-0500-000000000003} - mscoree.dll (file missing)
O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.6\ytdToolbarIE.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O4 - Global Startup: PC Alert 4.lnk = C:\Program Files\MSI\PC Alert 4\StartPCAlert4.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Poslat jako MMS - res://C:\Program Files\O2\SMSender\SMSender.E.186.dll/1003
O8 - Extra context menu item: Poslat jako SMS - res://C:\Program Files\O2\SMSender\SMSender.E.186.dll/1001
O8 - Extra context menu item: Poslat MMS na - res://C:\Program Files\O2\SMSender\SMSender.E.186.dll/1002
O8 - Extra context menu item: Poslat SMS na - res://C:\Program Files\O2\SMSender\SMSender.E.186.dll/1000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: InterCasino USD - {909AAEB6-C2CB-4AB5-A7BB-C33B72AB4BFB} - http://www.intercasino.com/?utm_source=download-ca (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: InterCasino USD - {909AAEB6-C2CB-4AB5-A7BB-C33B72AB4BFB} - http://www.intercasino.com/?utm_source=download-ca (file missing) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\Windows\system32\viakaraokesrv.exe

--
End of file - 8886 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\DriverNavigator Scheduled Scan.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\ParetoLogic Registration.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{24BCDA96-8FCB-4D3B-0500-000000000004}]
SMSender.E.ToolbarsHelper - C:\Windows\system32\mscoree.dll [2009-11-25 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-20 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-20 157672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.6\ytdToolbarIE.dll [2012-11-28 1230216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{24BCDA96-8FCB-4D3B-0500-000000000003} - O2 SMSender - C:\Windows\system32\mscoree.dll [2009-11-25 297808]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.6\ytdToolbarIE.dll [2012-11-28 1230216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 3117344]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-11-28 1123720]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2009-09-22 233472]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2012-10-25 4045432]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2012-09-14 5029232]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{A797B4C6-AEDB-4D46-9F4B-8E98DA192252}\DefragIcon.exe
PC Alert 4.lnk - C:\Program Files\MSI\PC Alert 4\StartPCAlert4.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
shell\AutoRun\command - J:\start.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9be5e9f9-f705-11e0-b2d4-406186874e31}]
shell\AutoRun\command - J:\start.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-01-19 08:28:09 ----D---- C:\rsit
2013-01-19 08:28:09 ----D---- C:\Program Files\trend micro
2013-01-17 22:28:21 ----SHD---- C:\Config.Msi
2013-01-11 18:18:31 ----D---- C:\Program Files\Softsolutionz
2013-01-10 22:20:58 ----D---- C:\Program Files\LizardTech
2013-01-05 18:53:27 ----D---- C:\Program Files\Pdf2Jpg
2013-01-01 00:36:22 ----D---- C:\Users\Martin\AppData\Roaming\com.limitlessprojects.sessionplannerprogotd
2013-01-01 00:36:03 ----D---- C:\Program Files\Common Files\Adobe AIR
2013-01-01 00:34:40 ----D---- C:\Program Files\Session Planner Pro 2012 v1.00 Full
2012-12-31 15:00:08 ----D---- C:\Users\Martin\AppData\Roaming\abgx360
2012-12-31 14:52:29 ----D---- C:\Program Files\abgx360
2012-12-31 13:04:09 ----A---- C:\Windows\system32\TURegOpt.exe
2012-12-31 13:04:09 ----A---- C:\Windows\system32\authuitu.dll
2012-12-31 13:03:53 ----D---- C:\Program Files\TuneUp Utilities 2013
2012-12-31 12:44:47 ----D---- C:\Users\Martin\AppData\Roaming\ImgBurn
2012-12-31 12:44:11 ----D---- C:\Program Files\ImgBurn
2012-12-27 16:08:09 ----D---- C:\ProgramData\OO Software
2012-12-23 21:07:17 ----D---- C:\Program Files\RoulettePro+
2012-12-23 19:23:05 ----D---- C:\Program Files\Microsoft ActiveSync
2012-12-23 19:22:43 ----D---- C:\Program Files\Common Files\DESIGNER
2012-12-23 19:22:31 ----D---- C:\Windows\PCHEALTH
2012-12-23 19:22:30 ----D---- C:\Program Files\Microsoft Office
2012-12-23 19:20:56 ----RHD---- C:\MSOCache
2012-12-23 14:49:38 ----D---- C:\Program Files\Setup Files
2012-12-23 14:46:19 ----D---- C:\Program Files\MSI
2012-12-23 14:44:28 ----D---- C:\Users\Martin\AppData\Roaming\ATI
2012-12-23 14:44:28 ----D---- C:\ProgramData\ATI
2012-12-23 14:33:45 ----D---- C:\DRIVERS
2012-12-23 14:33:02 ----D---- C:\Program Files\AMD APP
2012-12-23 14:32:37 ----DC---- C:\Windows\system32\DRVSTORE
2012-12-23 14:31:38 ----D---- C:\ProgramData\AMD
2012-12-23 14:31:17 ----D---- C:\Program Files\ATI Technologies
2012-12-23 14:31:15 ----D---- C:\Program Files\ATI
2012-12-23 14:29:05 ----D---- C:\Windows\system32\SRSLabs
2012-12-23 14:29:00 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VtSrdAPO.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VMWRP32.DLL
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VMTHX32.DLL
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VMPPLD32.DLL
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VMPPCN32.DLL
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VMAPO32.DLL
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VIASysFx.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\ViakaraokeSrv.exe
2012-12-23 14:29:00 ----A---- C:\Windows\system32\ViaKaraokePropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\ViaKaraokeApo.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\PropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\nQPropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\MaxxAudioVIA.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\MaxxAudioAPOShell.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\EEL32H.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2012-12-23 14:29:00 ----A---- C:\Windows\system32\Dts2APO.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEP32A.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEL32A.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEG32H.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEG32A.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EED32H.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EED32A.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEA32H.dll
2012-12-23 14:28:59 ----A---- C:\Windows\system32\EEA32A.dll
2012-12-23 14:28:57 ----A---- C:\Windows\system32\EEP32H.dll
2012-12-23 14:19:44 ----D---- C:\ProgramData\AmUStor
2012-12-23 14:19:44 ----D---- C:\Program Files\AmIcoSingLun
2012-12-23 13:40:37 ----D---- C:\Users\Martin\AppData\Roaming\Easeware
2012-12-23 13:40:17 ----D---- C:\Program Files\Easeware
2012-12-23 13:39:31 ----D---- C:\Users\Martin\AppData\Roaming\IDM
2012-12-23 13:39:31 ----D---- C:\Users\Martin\AppData\Roaming\DMCache
2012-12-23 13:39:29 ----D---- C:\Program Files\Internet Download Manager
2012-12-23 13:15:54 ----D---- C:\Users\Martin\AppData\Roaming\Reviversoft
2012-12-23 13:15:38 ----D---- C:\Program Files\Reviversoft
2012-12-23 12:04:05 ----A---- C:\Windows\system32\atmlib.dll
2012-12-23 12:04:05 ----A---- C:\Windows\system32\atmfd.dll
2012-12-23 12:01:57 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-23 12:01:56 ----A---- C:\Windows\system32\vbscript.dll
2012-12-23 12:01:56 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-23 12:01:56 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-23 12:01:56 ----A---- C:\Windows\system32\ieui.dll
2012-12-23 12:01:55 ----A---- C:\Windows\system32\wininet.dll
2012-12-23 12:01:55 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-23 12:01:55 ----A---- C:\Windows\system32\jscript.dll
2012-12-23 12:01:54 ----A---- C:\Windows\system32\url.dll
2012-12-23 12:01:54 ----A---- C:\Windows\system32\jscript9.dll
2012-12-23 12:01:54 ----A---- C:\Windows\system32\iertutil.dll
2012-12-23 12:01:53 ----A---- C:\Windows\system32\urlmon.dll
2012-12-23 12:01:52 ----A---- C:\Windows\system32\ieframe.dll
2012-12-23 12:01:48 ----A---- C:\Windows\system32\mshtml.dll
2012-12-23 11:56:50 ----A---- C:\Windows\system32\CNMLMAA.DLL
2012-12-23 11:55:59 ----A---- C:\Windows\system32\Wdfres.dll
2012-12-23 11:55:22 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-12-23 11:55:22 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-12-23 11:55:20 ----A---- C:\Windows\system32\WUDFx.dll
2012-12-23 11:55:20 ----A---- C:\Windows\system32\WUDFHost.exe
2012-12-23 11:55:20 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-12-23 11:52:32 ----A---- C:\Windows\system32\wintrust.dll
2012-12-23 11:51:48 ----A---- C:\Windows\system32\crypt32.dll
2012-12-23 11:51:45 ----A---- C:\Windows\system32\cryptsvc.dll
2012-12-23 11:51:45 ----A---- C:\Windows\system32\cryptnet.dll
2012-12-23 11:51:31 ----A---- C:\Windows\system32\dpnet.dll
2012-12-23 11:51:03 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-23 11:51:03 ----A---- C:\Windows\system32\kernel32.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-23 11:51:02 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-23 11:51:02 ----A---- C:\Windows\system32\winsrv.dll
2012-12-23 11:51:02 ----A---- C:\Windows\system32\conhost.exe
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-23 11:51:01 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-23 11:51:00 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-23 11:51:00 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-23 11:51:00 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-23 11:50:59 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-23 11:50:59 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-23 11:50:36 ----A---- C:\Windows\system32\ntkrnlpa.exe
2012-12-23 11:50:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-12-23 11:50:19 ----A---- C:\Windows\system32\tzres.dll
2012-12-23 11:47:45 ----A---- C:\Windows\system32\d3d10level9.dll
2012-12-23 11:47:33 ----A---- C:\Windows\system32\kerberos.dll
2012-12-23 11:47:32 ----A---- C:\Windows\system32\synceng.dll
2012-12-22 11:45:30 ----D---- C:\Users\Martin\AppData\Roaming\dvdcss

======List of files/folders modified in the last 1 months======

2013-01-19 08:34:31 ----D---- C:\Windows\Temp
2013-01-19 08:34:02 ----D---- C:\Windows\Prefetch
2013-01-19 08:31:50 ----D---- C:\Windows\system32\drivers
2013-01-19 08:30:42 ----D---- C:\Windows\system32\config
2013-01-19 08:28:09 ----RD---- C:\Program Files
2013-01-19 08:14:20 ----D---- C:\ProgramData\NVIDIA
2013-01-18 23:52:21 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2013-01-17 22:28:28 ----SHD---- C:\Windows\Installer
2013-01-16 00:06:44 ----D---- C:\Windows\system32\catroot2
2013-01-16 00:06:34 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2013-01-15 17:06:00 ----D---- C:\Windows\System32
2013-01-15 17:06:00 ----D---- C:\Windows\inf
2013-01-15 17:06:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-15 09:58:26 ----D---- C:\ProgramData\ThinkBuzan
2013-01-15 09:58:26 ----D---- C:\ProgramData\JSoft
2013-01-11 18:18:31 ----SD---- C:\Users\Martin\AppData\Roaming\Microsoft
2013-01-11 18:18:21 ----SHD---- C:\System Volume Information
2013-01-10 22:22:05 ----AD---- C:\Windows
2013-01-09 16:46:11 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-01-08 23:38:21 ----AD---- C:\ProgramData\TEMP
2013-01-05 18:41:31 ----D---- C:\ProgramData\CanonIJPLM
2013-01-01 01:34:25 ----D---- C:\Windows\system32\Tasks
2013-01-01 00:36:12 ----D---- C:\Users\Martin\AppData\Roaming\Adobe
2013-01-01 00:36:12 ----D---- C:\ProgramData\Adobe
2013-01-01 00:36:03 ----D---- C:\Program Files\Common Files
2013-01-01 00:36:03 ----D---- C:\Program Files\Adobe
2012-12-31 16:54:11 ----D---- C:\Windows\debug
2012-12-31 16:54:04 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-12-31 16:54:00 ----D---- C:\Windows\tracing
2012-12-31 16:00:54 ----D---- C:\Temp
2012-12-31 13:10:33 ----SHD---- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2012-12-30 17:36:29 ----D---- C:\Users\Martin\AppData\Roaming\Applian FLV and Media Player
2012-12-30 17:06:24 ----D---- C:\Windows\system32\FxsTmp
2012-12-28 08:58:53 ----D---- C:\Windows\system32\oodag
2012-12-28 08:54:09 ----D---- C:\Program Files\OO Software
2012-12-27 16:08:09 ----HD---- C:\ProgramData
2012-12-25 08:37:24 ----D---- C:\Windows\Tasks
2012-12-25 08:37:24 ----D---- C:\Windows\system32\wfp
2012-12-25 08:37:23 ----D---- C:\Windows\system32\wbem
2012-12-25 08:36:39 ----D---- C:\Windows\system32\DriverStore
2012-12-25 08:36:39 ----D---- C:\Windows\system32\CodeIntegrity
2012-12-25 08:36:39 ----D---- C:\Windows\ShellNew
2012-12-25 08:36:39 ----D---- C:\Windows\rescache
2012-12-25 08:36:38 ----RSD---- C:\Windows\Fonts
2012-12-25 08:36:38 ----D---- C:\Windows\AppCompat
2012-12-25 08:36:36 ----D---- C:\Program Files\Microsoft.NET
2012-12-25 08:36:34 ----D---- C:\Program Files\Common Files\System
2012-12-25 08:36:34 ----D---- C:\Program Files\Common Files\microsoft shared
2012-12-25 08:36:33 ----D---- C:\Windows\registration
2012-12-25 08:36:25 ----RSD---- C:\Windows\assembly
2012-12-23 19:23:43 ----A---- C:\Windows\ODBC.INI
2012-12-23 19:23:28 ----A---- C:\Windows\win.ini
2012-12-23 19:21:00 ----D---- C:\Windows\system
2012-12-23 14:34:07 ----D---- C:\Windows\system32\catroot
2012-12-23 14:29:06 ----D---- C:\Program Files\VIA
2012-12-23 14:19:46 ----HD---- C:\Program Files\InstallShield Installation Information
2012-12-23 13:12:16 ----D---- C:\Windows\Microsoft.NET
2012-12-23 12:56:39 ----D---- C:\Windows\winsxs
2012-12-23 12:54:40 ----D---- C:\Windows\Logs
2012-12-23 12:45:08 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2012-12-23 12:43:59 ----D---- C:\Program Files\SlySoft
2012-12-23 12:05:31 ----D---- C:\Windows\system32\migration
2012-12-23 12:05:31 ----D---- C:\Windows\system32\cs-CZ
2012-12-23 12:05:31 ----D---- C:\Windows\AppPatch
2012-12-23 12:05:31 ----D---- C:\Program Files\Internet Explorer
2012-12-23 11:59:51 ----D---- C:\Program Files\WebSite X5 Evolution
2012-12-23 11:54:06 ----D---- C:\Program Files\TeachMe
2012-12-23 11:53:43 ----D---- C:\Program Files\QuickTime
2012-12-23 11:49:07 ----D---- C:\ProgramData\Microsoft Help
2012-12-23 11:48:10 ----SD---- C:\ProgramData\Microsoft
2012-12-23 11:47:29 ----D---- C:\Program Files\MSBuild
2012-12-23 11:41:21 ----D---- C:\Program Files\AMD
2012-12-23 11:39:55 ----D---- C:\Program Files\The Learning Company
2012-12-23 11:39:55 ----A---- C:\Windows\HGSpeech.ini
2012-12-23 11:37:30 ----D---- C:\Program Files\Mozilla Firefox
2012-12-23 11:37:25 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2012-12-23 11:36:39 ----D---- C:\Windows\system32\install
2012-12-23 11:26:08 ----D---- C:\Users\Martin\AppData\Roaming\Mozilla
2012-12-23 11:21:18 ----D---- C:\ProgramData\DriverGenius
2012-12-22 11:50:50 ----D---- C:\Users\Martin\AppData\Roaming\BSplayer Pro

[Rudy]

Zdravím!
Na první pohled máte v PC celou řadu zbytečností. Podstatná je ale jiná věc: máte legální operační systém?