Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Spomaleny internet

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
S4jmon
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 14 čer 2009 19:38

Spomaleny internet

#1 Příspěvek od S4jmon »

Dobry den, rad by som bol, ak by niekto skontroloval log, blbne internet, raz stranky nacitava, potom nenacitava, po dlhsom chode PC zrazu internet prestane ist, respektive stahovanie funguje ale web stranky nenacita, inokedy 5min internet ide a 5min nejde. U providera by chyba byt nemala. Takisto odpaja aj zariadenia ktore su na napojene u mna na wifi, tzn. nielen ze vypne internet mne, ale prestane ist aj na macbooku, ktory mam cez wifi connecnuty na PC.
Problemy pozorujem posledne 2-3 tyzdne

LOG:

Logfile of random's system information tool 1.09 (written by random/random)
Run by simon at 2013-01-25 21:38:39
Microsoft Windows 7 Professional
System drive C: has 1 GB (2%) free of 50 GB
Total RAM: 4095 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:38:41, on 25.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\ProgramData\Browser Manager\2.3.762.17\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\simon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112570 ... cf30da4d7b
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.0.7\bh\BabylonToolbar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3845811463-2155072832-629959825-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3845811463-2155072832-629959825-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = simon\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Browser Manager - Unknown owner - C:\ProgramData\Browser Manager\2.3.762.17\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11032 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.0.7\bh\BabylonToolbar.dll [2012-09-24 247808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D0F4A166-B8D4-48b8-9D63-80849FE137CB}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AllShareAgent"=C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [2012-03-02 285072]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-11-29 151952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]
"Google Update"=C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\simon\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-25 21:38:39 ----D---- C:\Program Files (x86)\trend micro
2013-01-21 16:48:06 ----D---- C:\Program Files (x86)\GetFLV
2013-01-21 16:30:47 ----D---- C:\Program Files (x86)\Jaksta Technologies
2013-01-21 16:30:43 ----D---- C:\Users\simon\AppData\Roaming\Jaksta Streaming Media Recorder
2013-01-21 16:17:20 ----D---- C:\Program Files (x86)\Applian Technologies
2013-01-21 16:16:52 ----D---- C:\Users\simon\AppData\Roaming\Replay Media Catcher 4
2013-01-21 16:16:52 ----D---- C:\ProgramData\Applian
2013-01-21 15:57:29 ----D---- C:\Users\simon\AppData\Roaming\ProgSense
2013-01-21 15:57:29 ----D---- C:\Downloads
2013-01-21 15:55:20 ----D---- C:\Users\simon\AppData\Roaming\Orbit
2013-01-21 15:16:04 ----D---- C:\My Flash
2013-01-13 22:12:58 ----D---- C:\Program Files (x86)\SMPlayer
2013-01-13 22:03:03 ----D---- C:\Users\simon\AppData\Roaming\vlc
2013-01-13 22:00:04 ----D---- C:\Program Files (x86)\VideoLAN
2013-01-10 11:14:20 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml6.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml3.dll
2013-01-09 23:15:44 ----A---- C:\Windows\SysWOW64\win32spl.dll
2012-12-28 03:39:22 ----A---- C:\Windows\SysWOW64\wcncsvc.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\mscoree.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\dfshim.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wininet.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wextract.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\webcheck.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\vbscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\urlmon.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\url.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\pngfilt.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\occache.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msrating.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msls31.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmler.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtml.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshta.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript9.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\inseng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\imgutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iexpress.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesetup.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iertutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iernonce.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iepeers.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieframe.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dat
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieaksie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakeng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ie4uinit.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\icardie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\admparse.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmlib.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmfd.dll
2012-12-28 03:06:24 ----A---- C:\Windows\SysWOW64\imagehlp.dll
2012-12-28 03:06:23 ----A---- C:\Windows\SysWOW64\wmi.dll
2012-12-27 22:05:59 ----A---- C:\Windows\SysWOW64\xmllite.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbcjt32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccu32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccr32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccp32.dll
2012-12-27 22:05:56 ----A---- C:\Windows\SysWOW64\odbctrac.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d2d1.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\DWrite.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1.dll
2012-12-27 22:05:35 ----A---- C:\Windows\SysWOW64\poqexec.exe
2012-12-27 22:05:32 ----A---- C:\Windows\explorer.exe
2012-12-27 22:05:31 ----A---- C:\Windows\SysWOW64\explorer.exe
2012-12-27 22:05:26 ----A---- C:\Windows\SysWOW64\tzres.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\sbe.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2012-12-27 22:05:11 ----A---- C:\Windows\SysWOW64\t2embed.dll
2012-12-27 22:04:52 ----A---- C:\Windows\SysWOW64\quartz.dll
2012-12-27 22:04:51 ----A---- C:\Windows\SysWOW64\qdvd.dll
2012-12-27 22:04:44 ----A---- C:\Windows\SysWOW64\ntshrui.dll
2012-12-27 22:04:39 ----A---- C:\Windows\SysWOW64\ole32.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskschd.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskeng.exe
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskcomp.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\schtasks.exe
2012-12-27 22:04:33 ----A---- C:\Windows\SysWOW64\mssrch.dll
2012-12-27 22:04:32 ----A---- C:\Windows\SysWOW64\tquery.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchProtocolHost.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchIndexer.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssvp.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssph.dll
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\SearchFilterHost.exe
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\mssphtb.dll
2012-12-27 22:04:29 ----A---- C:\Windows\SysWOW64\msscntrs.dll
2012-12-27 22:04:28 ----A---- C:\Windows\SysWOW64\StructuredQuery.dll
2012-12-27 22:04:24 ----A---- C:\Windows\SysWOW64\webio.dll
2012-12-27 22:03:56 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll
2012-12-27 22:03:07 ----A---- C:\Windows\SysWOW64\comctl32.dll
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2012-12-27 22:02:58 ----A---- C:\Windows\SysWOW64\upnp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\wscapi.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\winhttp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\WebClnt.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\slwga.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\davclnt.dll
2012-12-27 22:02:53 ----A---- C:\Windows\SysWOW64\XpsPrint.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42u.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42.dll
2012-12-27 22:02:43 ----A---- C:\Windows\SysWOW64\shell32.dll
2012-12-27 22:02:39 ----A---- C:\Windows\SysWOW64\d3d10level9.dll
2012-12-27 22:02:37 ----A---- C:\Windows\SysWOW64\schannel.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\sspicli.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\secur32.dll
2012-12-27 22:02:20 ----A---- C:\Windows\SysWOW64\mf.dll
2012-12-27 22:02:19 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\XpsRasterService.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\mfreadwrite.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\ExplorerFrame.dll
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnscacheugc.exe
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnsapi.dll
2012-12-27 22:02:01 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2012-12-27 22:02:00 ----A---- C:\Windows\SysWOW64\kernel32.dll
2012-12-27 22:01:57 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\wow32.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\setup16.exe
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\instnm.exe
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-27 22:01:52 ----A---- C:\Windows\SysWOW64\user.exe
2012-12-27 22:01:27 ----A---- C:\Windows\SysWOW64\dpnet.dll
2012-12-27 22:01:25 ----A---- C:\Windows\SysWOW64\wmpmde.dll
2012-12-27 22:01:24 ----A---- C:\Windows\SysWOW64\wintrust.dll
2012-12-27 22:01:16 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2012-12-27 22:00:57 ----A---- C:\Windows\SysWOW64\kerberos.dll
2012-12-27 22:00:53 ----A---- C:\Windows\SysWOW64\msi.dll
2012-12-27 22:00:40 ----A---- C:\Windows\SysWOW64\synceng.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40u.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\drvinst.exe
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devrtl.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devobj.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\cfgmgr32.dll
2012-12-27 22:00:12 ----A---- C:\Windows\SysWOW64\mstscax.dll
2012-12-27 22:00:11 ----A---- C:\Windows\SysWOW64\mstsc.exe
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\netapi32.dll
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\browcli.dll
2012-12-27 22:00:02 ----A---- C:\Windows\SysWOW64\wmp.dll
2012-12-27 22:00:01 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2012-12-27 21:59:57 ----A---- C:\Windows\SysWOW64\prevhost.exe
2012-12-27 21:59:55 ----A---- C:\Windows\SysWOW64\srclient.dll
2012-12-27 21:59:50 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2012-12-27 21:59:49 ----A---- C:\Windows\SysWOW64\msvcrt.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleacc.dll
2012-12-27 21:59:37 ----A---- C:\Windows\SysWOW64\EncDec.dll
2012-12-27 21:59:16 ----A---- C:\Windows\SysWOW64\odbc32.dll
2012-12-27 21:59:11 ----A---- C:\Windows\SysWOW64\ntdll.dll
2012-12-27 21:59:08 ----A---- C:\Windows\SysWOW64\sscore.dll
2012-12-27 21:59:06 ----A---- C:\Windows\splwow64.exe
2012-12-27 21:58:57 ----A---- C:\Windows\SysWOW64\crypt32.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptsvc.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptnet.dll
2012-12-27 21:57:54 ----A---- C:\Windows\SysWOW64\packager.dll
2012-12-27 21:45:12 ----A---- C:\Windows\SysWOW64\rdpcore.dll
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files\Steam

======List of files/folders modified in the last 1 month======

2013-01-25 21:38:40 ----D---- C:\Windows\Temp
2013-01-25 21:38:39 ----RD---- C:\Program Files (x86)
2013-01-25 21:38:01 ----SHD---- C:\System Volume Information
2013-01-25 21:26:03 ----D---- C:\Users\simon\AppData\Roaming\Dropbox
2013-01-25 21:22:24 ----D---- C:\Windows\System32
2013-01-25 21:22:24 ----D---- C:\Windows\inf
2013-01-25 21:21:56 ----D---- C:\Users\simon\AppData\Roaming\Skype
2013-01-25 21:17:38 ----D---- C:\ProgramData\NVIDIA
2013-01-25 21:17:29 ----HD---- C:\Config.Msi
2013-01-25 21:05:55 ----D---- C:\Windows\winsxs
2013-01-25 21:03:31 ----HD---- C:\ProgramData
2013-01-25 21:03:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-25 20:59:25 ----D---- C:\Windows\SysWOW64
2013-01-25 20:56:31 ----D---- C:\Windows\Prefetch
2013-01-25 20:55:53 ----SHD---- C:\Windows\Installer
2013-01-25 20:53:53 ----RD---- C:\Program Files
2013-01-25 20:53:13 ----D---- C:\Program Files (x86)\Common Files\Apple
2013-01-25 10:51:02 ----D---- C:\Users\simon\AppData\Roaming\uTorrent
2013-01-23 14:01:29 ----D---- C:\Windows
2013-01-23 13:56:31 ----D---- C:\Windows\Minidump
2013-01-20 01:47:01 ----RSD---- C:\Windows\Fonts
2013-01-19 01:44:33 ----D---- C:\Program Files (x86)\Opera
2013-01-16 14:49:29 ----D---- C:\Program Files (x86)\Last.fm
2013-01-11 21:35:37 ----D---- C:\Users\simon\AppData\Roaming\NVIDIA
2013-01-11 03:33:19 ----D---- C:\Windows\Microsoft.NET
2013-01-11 03:32:42 ----RSD---- C:\Windows\assembly
2013-01-09 12:48:31 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-12-29 03:03:28 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-28 04:47:43 ----D---- C:\Windows\rescache
2012-12-28 04:06:47 ----D---- C:\Windows\Panther
2012-12-28 04:03:34 ----D---- C:\Program Files (x86)\Common Files\System
2012-12-28 04:03:33 ----D---- C:\Windows\SysWOW64\en-US
2012-12-28 04:03:32 ----D---- C:\Windows\ehome
2012-12-28 04:03:26 ----D---- C:\Windows\SysWOW64\migration
2012-12-28 04:03:25 ----D---- C:\Windows\PolicyDefinitions
2012-12-28 04:03:23 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-28 04:03:18 ----D---- C:\Windows\AppPatch
2012-12-28 04:03:16 ----D---- C:\Program Files (x86)\Windows Mail
2012-12-28 04:03:13 ----D---- C:\Program Files (x86)\Windows Media Player
2012-12-28 03:13:33 ----D---- C:\Windows\Logs
2012-12-28 03:01:16 ----D---- C:\Windows\SoftwareDistribution
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys []
R1 aswSnx;aswSnx; C:\Windows\SysWOW64\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 jakndisMP;jakndisMP; C:\Windows\system32\DRIVERS\jakndis.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys []
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 jakndis;Jaksta Service; C:\Windows\system32\DRIVERS\jakndis.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 Browser Manager;Browser Manager; C:\ProgramData\Browser Manager\2.3.762.17\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [2012-10-02 2201112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
S2 SamsungAllShareV2.0;Samsung AllShare PC; C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-03 25504]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-09 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-11-29 640912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-22 30963576]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-10 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SimpleSlideShowServer;SimpleSlideShowServer; C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-03 27584]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------
Naposledy upravil(a) Mc_Murphy dne 26 led 2013 07:53, celkem upraveno 1 x.
Důvod: Log odstraněn z [Code].
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Spomaleny internet

#2 Příspěvek od Rudy »

Zdravím!
Máte kritický nedostatek místa na disku. Vyčistíme PC. Nejprve spusťte tuto utilitu:
Stáhněte AdwCleaner http://stahnu.cz/tag/adw-cleaner-free-download
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
S4jmon
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 14 čer 2009 19:38

Re: Spomaleny internet

#3 Příspěvek od S4jmon »

# AdwCleaner v2.108 - Logfile created 01/25/2013 at 23:13:21
# Updated 24/01/2013 by Xplode
# Operating system : Windows 7 Professional (64 bits)
# User : simon - SIMON-PC
# Boot Mode : Normal
# Running from : C:\Users\simon\Desktop\adwcleaner_2.1.0.8.exe
# Option [Search]


***** [Services] *****

Found : Browser Manager

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\user.js
Folder Found : C:\Program Files (x86)\BabylonToolbar
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\Users\simon\AppData\Local\APN
Folder Found : C:\Users\simon\AppData\Local\Conduit
Folder Found : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Folder Found : C:\Users\simon\AppData\LocalLow\Conduit
Folder Found : C:\Users\simon\AppData\LocalLow\uTorrentControl2
Folder Found : C:\Users\simon\AppData\Roaming\Babylon
Folder Found : C:\Users\simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
Folder Found : C:\Users\simon\AppData\Roaming\OpenCandy
Folder Found : C:\Users\simon\AppData\Roaming\yourfiledownloader

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\uTorrentControl2
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\YourFileDownloader
Key Found : HKCU\Software\f6d9dab16aea44
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\Software\Babylon
Key Found : HKLM\Software\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\Software\PIP
Key Found : HKLM\Software\uTorrentControl2
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Wow6432Node\f6d9dab16aea44
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DAF62DBF-5172-47BC-9DD8-DED379B31CE0}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE2D526F-B924-478F-A207-7C4D9BBEE9FD}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Found : HKLM\Software\YourFileDownloader
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKU\S-1-5-21-3845811463-2155072832-629959825-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-3845811463-2155072832-629959825-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D0F4A166-B8D4-48B8-9D63-80849FE137CB}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112570&tt=021012_ccp_4012_5&babsrc=HP_ss&mntrId=d0735f6500000000000020cf30da4d7b
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://search.babylon.com/?affID=112570&tt=021012_ccp_4012_5&babsrc=HP_ss&mntrId=d0735f6500000000000020cf30da4d7b

-\\ Google Chrome v24.0.1312.56

File : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.12.1707.0

File : C:\Users\simon\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [10958 octets] - [25/01/2013 23:13:21]

########## EOF - C:\AdwCleaner[R1].txt - [11019 octets] ##########
Naposledy upravil(a) Mc_Murphy dne 26 led 2013 07:53, celkem upraveno 1 x.
Důvod: Log opět odstraněn z [Code] - nedávej to do toho!
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Spomaleny internet

#4 Příspěvek od Rudy »

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
S4jmon
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 14 čer 2009 19:38

Re: Spomaleny internet

#5 Příspěvek od S4jmon »

# AdwCleaner v2.108 - Logfile created 01/26/2013 at 11:41:56
# Updated 24/01/2013 by Xplode
# Operating system : Windows 7 Professional (64 bits)
# User : simon - SIMON-PC
# Boot Mode : Normal
# Running from : C:\Users\simon\Desktop\adwcleaner_2.1.0.8.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : Browser Manager

***** [Files / Folders] *****

Deleted on reboot : C:\ProgramData\Browser Manager
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\user.js
Folder Deleted : C:\Program Files (x86)\BabylonToolbar
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Users\simon\AppData\Local\APN
Folder Deleted : C:\Users\simon\AppData\Local\Conduit
Folder Deleted : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Deleted : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Folder Deleted : C:\Users\simon\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\simon\AppData\LocalLow\uTorrentControl2
Folder Deleted : C:\Users\simon\AppData\Roaming\Babylon
Folder Deleted : C:\Users\simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
Folder Deleted : C:\Users\simon\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\simon\AppData\Roaming\yourfiledownloader

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentControl2
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YourFileDownloader
Key Deleted : HKCU\Software\f6d9dab16aea44
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\uTorrentControl2
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\f6d9dab16aea44
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DAF62DBF-5172-47BC-9DD8-DED379B31CE0}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE2D526F-B924-478F-A207-7C4D9BBEE9FD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Deleted : HKLM\Software\YourFileDownloader
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKU\S-1-5-21-3845811463-2155072832-629959825-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112570&tt=021012_ccp_4012_5&babsrc=HP_ss&mntrId=d0735f6500000000000020cf30da4d7b --> hxxp://www.google.com

-\\ Google Chrome v24.0.1312.56

File : C:\Users\simon\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.12.1707.0

File : C:\Users\simon\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [11057 octets] - [25/01/2013 23:13:21]
AdwCleaner[S1].txt - [10859 octets] - [26/01/2013 11:41:56]

########## EOF - C:\AdwCleaner[S1].txt - [10920 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Spomaleny internet

#6 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
S4jmon
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 14 čer 2009 19:38

Re: Spomaleny internet

#7 Příspěvek od S4jmon »

Logfile of random's system information tool 1.09 (written by random/random)
Run by simon at 2013-01-26 12:33:27
Microsoft Windows 7 Professional
System drive C: has 1 GB (3%) free of 50 GB
Total RAM: 4095 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:33:30, on 26.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\simon\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\simon\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\simon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [*ForceDelete] C:\Users\simon\Desktop\adwcleaner_2.1.0.8.exe /forcedelete
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3845811463-2155072832-629959825-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3845811463-2155072832-629959825-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = simon\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10760 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AllShareAgent"=C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [2012-03-02 285072]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-11-29 151952]
"*ForceDelete"=C:\Users\simon\Desktop\adwcleaner_2.1.0.8.exe [2013-01-25 578255]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]
"Google Update"=C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\simon\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-26 11:41:56 ----A---- C:\AdwCleaner[S1].txt
2013-01-25 23:13:21 ----A---- C:\AdwCleaner[R1].txt
2013-01-25 21:38:39 ----D---- C:\Program Files (x86)\trend micro
2013-01-21 16:48:06 ----D---- C:\Program Files (x86)\GetFLV
2013-01-21 16:30:47 ----D---- C:\Program Files (x86)\Jaksta Technologies
2013-01-21 16:30:43 ----D---- C:\Users\simon\AppData\Roaming\Jaksta Streaming Media Recorder
2013-01-21 16:17:20 ----D---- C:\Program Files (x86)\Applian Technologies
2013-01-21 16:16:52 ----D---- C:\Users\simon\AppData\Roaming\Replay Media Catcher 4
2013-01-21 16:16:52 ----D---- C:\ProgramData\Applian
2013-01-21 15:57:29 ----D---- C:\Users\simon\AppData\Roaming\ProgSense
2013-01-21 15:57:29 ----D---- C:\Downloads
2013-01-21 15:55:20 ----D---- C:\Users\simon\AppData\Roaming\Orbit
2013-01-21 15:16:04 ----D---- C:\My Flash
2013-01-13 22:12:58 ----D---- C:\Program Files (x86)\SMPlayer
2013-01-13 22:03:03 ----D---- C:\Users\simon\AppData\Roaming\vlc
2013-01-13 22:00:04 ----D---- C:\Program Files (x86)\VideoLAN
2013-01-10 11:14:20 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml6.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml3.dll
2013-01-09 23:15:44 ----A---- C:\Windows\SysWOW64\win32spl.dll
2012-12-28 03:39:22 ----A---- C:\Windows\SysWOW64\wcncsvc.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\mscoree.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\dfshim.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wininet.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wextract.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\webcheck.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\vbscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\urlmon.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\url.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\pngfilt.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\occache.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msrating.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msls31.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmler.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtml.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshta.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript9.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\inseng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\imgutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iexpress.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesetup.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iertutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iernonce.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iepeers.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieframe.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dat
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieaksie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakeng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ie4uinit.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\icardie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\admparse.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmlib.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmfd.dll
2012-12-28 03:06:24 ----A---- C:\Windows\SysWOW64\imagehlp.dll
2012-12-28 03:06:23 ----A---- C:\Windows\SysWOW64\wmi.dll
2012-12-27 22:05:59 ----A---- C:\Windows\SysWOW64\xmllite.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbcjt32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccu32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccr32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccp32.dll
2012-12-27 22:05:56 ----A---- C:\Windows\SysWOW64\odbctrac.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d2d1.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\DWrite.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1.dll
2012-12-27 22:05:35 ----A---- C:\Windows\SysWOW64\poqexec.exe
2012-12-27 22:05:32 ----A---- C:\Windows\explorer.exe
2012-12-27 22:05:31 ----A---- C:\Windows\SysWOW64\explorer.exe
2012-12-27 22:05:26 ----A---- C:\Windows\SysWOW64\tzres.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\sbe.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2012-12-27 22:05:11 ----A---- C:\Windows\SysWOW64\t2embed.dll
2012-12-27 22:04:52 ----A---- C:\Windows\SysWOW64\quartz.dll
2012-12-27 22:04:51 ----A---- C:\Windows\SysWOW64\qdvd.dll
2012-12-27 22:04:44 ----A---- C:\Windows\SysWOW64\ntshrui.dll
2012-12-27 22:04:39 ----A---- C:\Windows\SysWOW64\ole32.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskschd.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskeng.exe
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskcomp.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\schtasks.exe
2012-12-27 22:04:33 ----A---- C:\Windows\SysWOW64\mssrch.dll
2012-12-27 22:04:32 ----A---- C:\Windows\SysWOW64\tquery.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchProtocolHost.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchIndexer.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssvp.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssph.dll
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\SearchFilterHost.exe
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\mssphtb.dll
2012-12-27 22:04:29 ----A---- C:\Windows\SysWOW64\msscntrs.dll
2012-12-27 22:04:28 ----A---- C:\Windows\SysWOW64\StructuredQuery.dll
2012-12-27 22:04:24 ----A---- C:\Windows\SysWOW64\webio.dll
2012-12-27 22:03:56 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll
2012-12-27 22:03:07 ----A---- C:\Windows\SysWOW64\comctl32.dll
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2012-12-27 22:02:58 ----A---- C:\Windows\SysWOW64\upnp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\wscapi.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\winhttp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\WebClnt.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\slwga.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\davclnt.dll
2012-12-27 22:02:53 ----A---- C:\Windows\SysWOW64\XpsPrint.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42u.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42.dll
2012-12-27 22:02:43 ----A---- C:\Windows\SysWOW64\shell32.dll
2012-12-27 22:02:39 ----A---- C:\Windows\SysWOW64\d3d10level9.dll
2012-12-27 22:02:37 ----A---- C:\Windows\SysWOW64\schannel.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\sspicli.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\secur32.dll
2012-12-27 22:02:20 ----A---- C:\Windows\SysWOW64\mf.dll
2012-12-27 22:02:19 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\XpsRasterService.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\mfreadwrite.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\ExplorerFrame.dll
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnscacheugc.exe
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnsapi.dll
2012-12-27 22:02:01 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2012-12-27 22:02:00 ----A---- C:\Windows\SysWOW64\kernel32.dll
2012-12-27 22:01:57 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\wow32.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\setup16.exe
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\instnm.exe
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-27 22:01:52 ----A---- C:\Windows\SysWOW64\user.exe
2012-12-27 22:01:27 ----A---- C:\Windows\SysWOW64\dpnet.dll
2012-12-27 22:01:25 ----A---- C:\Windows\SysWOW64\wmpmde.dll
2012-12-27 22:01:24 ----A---- C:\Windows\SysWOW64\wintrust.dll
2012-12-27 22:01:16 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2012-12-27 22:00:57 ----A---- C:\Windows\SysWOW64\kerberos.dll
2012-12-27 22:00:53 ----A---- C:\Windows\SysWOW64\msi.dll
2012-12-27 22:00:40 ----A---- C:\Windows\SysWOW64\synceng.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40u.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\drvinst.exe
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devrtl.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devobj.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\cfgmgr32.dll
2012-12-27 22:00:12 ----A---- C:\Windows\SysWOW64\mstscax.dll
2012-12-27 22:00:11 ----A---- C:\Windows\SysWOW64\mstsc.exe
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\netapi32.dll
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\browcli.dll
2012-12-27 22:00:02 ----A---- C:\Windows\SysWOW64\wmp.dll
2012-12-27 22:00:01 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2012-12-27 21:59:57 ----A---- C:\Windows\SysWOW64\prevhost.exe
2012-12-27 21:59:55 ----A---- C:\Windows\SysWOW64\srclient.dll
2012-12-27 21:59:50 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2012-12-27 21:59:49 ----A---- C:\Windows\SysWOW64\msvcrt.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleacc.dll
2012-12-27 21:59:37 ----A---- C:\Windows\SysWOW64\EncDec.dll
2012-12-27 21:59:16 ----A---- C:\Windows\SysWOW64\odbc32.dll
2012-12-27 21:59:11 ----A---- C:\Windows\SysWOW64\ntdll.dll
2012-12-27 21:59:08 ----A---- C:\Windows\SysWOW64\sscore.dll
2012-12-27 21:59:06 ----A---- C:\Windows\splwow64.exe
2012-12-27 21:58:57 ----A---- C:\Windows\SysWOW64\crypt32.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptsvc.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptnet.dll
2012-12-27 21:57:54 ----A---- C:\Windows\SysWOW64\packager.dll
2012-12-27 21:45:12 ----A---- C:\Windows\SysWOW64\rdpcore.dll
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files\Steam

======List of files/folders modified in the last 1 month======

2013-01-26 12:33:31 ----D---- C:\Windows\Prefetch
2013-01-26 12:33:29 ----D---- C:\Windows\Temp
2013-01-26 11:57:06 ----SHD---- C:\System Volume Information
2013-01-26 11:47:38 ----D---- C:\Windows\System32
2013-01-26 11:47:38 ----D---- C:\Windows\inf
2013-01-26 11:46:49 ----D---- C:\Users\simon\AppData\Roaming\Dropbox
2013-01-26 11:46:28 ----HD---- C:\ProgramData
2013-01-26 11:46:28 ----D---- C:\Windows
2013-01-26 11:43:10 ----D---- C:\ProgramData\NVIDIA
2013-01-26 11:42:00 ----RD---- C:\Program Files (x86)
2013-01-25 21:21:56 ----D---- C:\Users\simon\AppData\Roaming\Skype
2013-01-25 21:17:29 ----HD---- C:\Config.Msi
2013-01-25 21:05:55 ----D---- C:\Windows\winsxs
2013-01-25 21:03:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-25 20:59:25 ----D---- C:\Windows\SysWOW64
2013-01-25 20:55:53 ----SHD---- C:\Windows\Installer
2013-01-25 20:53:53 ----RD---- C:\Program Files
2013-01-25 20:53:13 ----D---- C:\Program Files (x86)\Common Files\Apple
2013-01-25 10:51:02 ----D---- C:\Users\simon\AppData\Roaming\uTorrent
2013-01-23 13:56:31 ----D---- C:\Windows\Minidump
2013-01-20 01:47:01 ----RSD---- C:\Windows\Fonts
2013-01-19 01:44:33 ----D---- C:\Program Files (x86)\Opera
2013-01-16 14:49:29 ----D---- C:\Program Files (x86)\Last.fm
2013-01-11 21:35:37 ----D---- C:\Users\simon\AppData\Roaming\NVIDIA
2013-01-11 03:33:19 ----D---- C:\Windows\Microsoft.NET
2013-01-11 03:32:42 ----RSD---- C:\Windows\assembly
2013-01-09 12:48:31 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-12-29 03:03:28 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-28 04:47:43 ----D---- C:\Windows\rescache
2012-12-28 04:06:47 ----D---- C:\Windows\Panther
2012-12-28 04:03:34 ----D---- C:\Program Files (x86)\Common Files\System
2012-12-28 04:03:33 ----D---- C:\Windows\SysWOW64\en-US
2012-12-28 04:03:32 ----D---- C:\Windows\ehome
2012-12-28 04:03:26 ----D---- C:\Windows\SysWOW64\migration
2012-12-28 04:03:25 ----D---- C:\Windows\PolicyDefinitions
2012-12-28 04:03:23 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-28 04:03:18 ----D---- C:\Windows\AppPatch
2012-12-28 04:03:16 ----D---- C:\Program Files (x86)\Windows Mail
2012-12-28 04:03:13 ----D---- C:\Program Files (x86)\Windows Media Player
2012-12-28 03:13:33 ----D---- C:\Windows\Logs
2012-12-28 03:01:16 ----D---- C:\Windows\SoftwareDistribution
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys []
R1 aswSnx;aswSnx; C:\Windows\SysWOW64\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 jakndisMP;jakndisMP; C:\Windows\system32\DRIVERS\jakndis.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys []
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 jakndis;Jaksta Service; C:\Windows\system32\DRIVERS\jakndis.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
S2 SamsungAllShareV2.0;Samsung AllShare PC; C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-03 25504]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-09 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-11-29 640912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-22 30963576]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-10 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SimpleSlideShowServer;SimpleSlideShowServer; C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-03 27584]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Spomaleny internet

#8 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3845811463-2155072832-629959825-1000UA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
S4jmon
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 14 čer 2009 19:38

Re: Spomaleny internet

#9 Příspěvek od S4jmon »

Logfile of random's system information tool 1.09 (written by random/random)
Run by simon at 2013-01-26 13:05:53
Microsoft Windows 7 Professional
System drive C: has 3 GB (7%) free of 50 GB
Total RAM: 4095 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:06:07, on 26.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\simon\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqdirec.exe
C:\Users\simon\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\simon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = simon\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9668 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AllShareAgent"=C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [2012-03-02 285072]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-11-29 151952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]
"Google Update"=C:\Users\simon\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\simon\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~3\browse~1\23762~1.17\{16cdf~1\browse~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-22 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-26 13:04:10 ----ASH---- C:\pagefile.sys
2013-01-26 11:41:56 ----A---- C:\AdwCleaner[S1].txt
2013-01-25 23:13:21 ----A---- C:\AdwCleaner[R1].txt
2013-01-25 21:38:39 ----D---- C:\Program Files (x86)\trend micro
2013-01-21 16:48:06 ----D---- C:\Program Files (x86)\GetFLV
2013-01-21 16:30:47 ----D---- C:\Program Files (x86)\Jaksta Technologies
2013-01-21 16:30:43 ----D---- C:\Users\simon\AppData\Roaming\Jaksta Streaming Media Recorder
2013-01-21 16:17:20 ----D---- C:\Program Files (x86)\Applian Technologies
2013-01-21 16:16:52 ----D---- C:\Users\simon\AppData\Roaming\Replay Media Catcher 4
2013-01-21 16:16:52 ----D---- C:\ProgramData\Applian
2013-01-21 15:57:29 ----D---- C:\Users\simon\AppData\Roaming\ProgSense
2013-01-21 15:57:29 ----D---- C:\Downloads
2013-01-21 15:55:20 ----D---- C:\Users\simon\AppData\Roaming\Orbit
2013-01-21 15:16:04 ----D---- C:\My Flash
2013-01-13 22:12:58 ----D---- C:\Program Files (x86)\SMPlayer
2013-01-13 22:03:03 ----D---- C:\Users\simon\AppData\Roaming\vlc
2013-01-13 22:00:04 ----D---- C:\Program Files (x86)\VideoLAN
2013-01-10 11:14:20 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml6.dll
2013-01-09 23:15:47 ----A---- C:\Windows\SysWOW64\msxml3.dll
2013-01-09 23:15:44 ----A---- C:\Windows\SysWOW64\win32spl.dll
2012-12-28 03:39:22 ----A---- C:\Windows\SysWOW64\wcncsvc.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\mscoree.dll
2012-12-28 03:15:09 ----A---- C:\Windows\SysWOW64\dfshim.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wininet.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\wextract.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\webcheck.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\vbscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\urlmon.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\url.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\pngfilt.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\occache.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msrating.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msls31.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmler.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshtml.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\mshta.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript9.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\jscript.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\inseng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\imgutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iexpress.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iesetup.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iertutil.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iernonce.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iepeers.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieframe.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dat
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakui.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieaksie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ieakeng.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\ie4uinit.exe
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\icardie.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2012-12-28 03:13:13 ----A---- C:\Windows\SysWOW64\admparse.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmlib.dll
2012-12-28 03:08:57 ----A---- C:\Windows\SysWOW64\atmfd.dll
2012-12-28 03:06:24 ----A---- C:\Windows\SysWOW64\imagehlp.dll
2012-12-28 03:06:23 ----A---- C:\Windows\SysWOW64\wmi.dll
2012-12-27 22:05:59 ----A---- C:\Windows\SysWOW64\xmllite.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbcjt32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccu32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccr32.dll
2012-12-27 22:05:57 ----A---- C:\Windows\SysWOW64\odbccp32.dll
2012-12-27 22:05:56 ----A---- C:\Windows\SysWOW64\odbctrac.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2012-12-27 22:05:53 ----A---- C:\Windows\SysWOW64\d2d1.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\DWrite.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll
2012-12-27 22:05:52 ----A---- C:\Windows\SysWOW64\d3d10_1.dll
2012-12-27 22:05:35 ----A---- C:\Windows\SysWOW64\poqexec.exe
2012-12-27 22:05:32 ----A---- C:\Windows\explorer.exe
2012-12-27 22:05:31 ----A---- C:\Windows\SysWOW64\explorer.exe
2012-12-27 22:05:26 ----A---- C:\Windows\SysWOW64\tzres.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\sbe.dll
2012-12-27 22:05:17 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2012-12-27 22:05:11 ----A---- C:\Windows\SysWOW64\t2embed.dll
2012-12-27 22:04:52 ----A---- C:\Windows\SysWOW64\quartz.dll
2012-12-27 22:04:51 ----A---- C:\Windows\SysWOW64\qdvd.dll
2012-12-27 22:04:44 ----A---- C:\Windows\SysWOW64\ntshrui.dll
2012-12-27 22:04:39 ----A---- C:\Windows\SysWOW64\ole32.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskschd.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskeng.exe
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\taskcomp.dll
2012-12-27 22:04:36 ----A---- C:\Windows\SysWOW64\schtasks.exe
2012-12-27 22:04:33 ----A---- C:\Windows\SysWOW64\mssrch.dll
2012-12-27 22:04:32 ----A---- C:\Windows\SysWOW64\tquery.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchProtocolHost.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\SearchIndexer.exe
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssvp.dll
2012-12-27 22:04:31 ----A---- C:\Windows\SysWOW64\mssph.dll
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\SearchFilterHost.exe
2012-12-27 22:04:30 ----A---- C:\Windows\SysWOW64\mssphtb.dll
2012-12-27 22:04:29 ----A---- C:\Windows\SysWOW64\msscntrs.dll
2012-12-27 22:04:28 ----A---- C:\Windows\SysWOW64\StructuredQuery.dll
2012-12-27 22:04:24 ----A---- C:\Windows\SysWOW64\webio.dll
2012-12-27 22:03:56 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll
2012-12-27 22:03:07 ----A---- C:\Windows\SysWOW64\comctl32.dll
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2012-12-27 22:03:03 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2012-12-27 22:02:58 ----A---- C:\Windows\SysWOW64\upnp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\wscapi.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\winhttp.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\WebClnt.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\slwga.dll
2012-12-27 22:02:56 ----A---- C:\Windows\SysWOW64\davclnt.dll
2012-12-27 22:02:53 ----A---- C:\Windows\SysWOW64\XpsPrint.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42u.dll
2012-12-27 22:02:49 ----A---- C:\Windows\SysWOW64\mfc42.dll
2012-12-27 22:02:43 ----A---- C:\Windows\SysWOW64\shell32.dll
2012-12-27 22:02:39 ----A---- C:\Windows\SysWOW64\d3d10level9.dll
2012-12-27 22:02:37 ----A---- C:\Windows\SysWOW64\schannel.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\sspicli.dll
2012-12-27 22:02:35 ----A---- C:\Windows\SysWOW64\secur32.dll
2012-12-27 22:02:20 ----A---- C:\Windows\SysWOW64\mf.dll
2012-12-27 22:02:19 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\XpsRasterService.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\mfreadwrite.dll
2012-12-27 22:02:18 ----A---- C:\Windows\SysWOW64\ExplorerFrame.dll
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnscacheugc.exe
2012-12-27 22:02:09 ----A---- C:\Windows\SysWOW64\dnsapi.dll
2012-12-27 22:02:01 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2012-12-27 22:02:00 ----A---- C:\Windows\SysWOW64\kernel32.dll
2012-12-27 22:01:57 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\wow32.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\setup16.exe
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2012-12-27 22:01:57 ----A---- C:\Windows\SysWOW64\instnm.exe
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-27 22:01:54 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-27 22:01:53 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-27 22:01:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-27 22:01:52 ----A---- C:\Windows\SysWOW64\user.exe
2012-12-27 22:01:27 ----A---- C:\Windows\SysWOW64\dpnet.dll
2012-12-27 22:01:25 ----A---- C:\Windows\SysWOW64\wmpmde.dll
2012-12-27 22:01:24 ----A---- C:\Windows\SysWOW64\wintrust.dll
2012-12-27 22:01:16 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2012-12-27 22:00:57 ----A---- C:\Windows\SysWOW64\kerberos.dll
2012-12-27 22:00:53 ----A---- C:\Windows\SysWOW64\msi.dll
2012-12-27 22:00:40 ----A---- C:\Windows\SysWOW64\synceng.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40u.dll
2012-12-27 22:00:34 ----A---- C:\Windows\SysWOW64\mfc40.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\drvinst.exe
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devrtl.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\devobj.dll
2012-12-27 22:00:14 ----A---- C:\Windows\SysWOW64\cfgmgr32.dll
2012-12-27 22:00:12 ----A---- C:\Windows\SysWOW64\mstscax.dll
2012-12-27 22:00:11 ----A---- C:\Windows\SysWOW64\mstsc.exe
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\netapi32.dll
2012-12-27 22:00:08 ----A---- C:\Windows\SysWOW64\browcli.dll
2012-12-27 22:00:02 ----A---- C:\Windows\SysWOW64\wmp.dll
2012-12-27 22:00:01 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2012-12-27 21:59:57 ----A---- C:\Windows\SysWOW64\prevhost.exe
2012-12-27 21:59:55 ----A---- C:\Windows\SysWOW64\srclient.dll
2012-12-27 21:59:50 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2012-12-27 21:59:49 ----A---- C:\Windows\SysWOW64\msvcrt.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2012-12-27 21:59:40 ----A---- C:\Windows\SysWOW64\oleacc.dll
2012-12-27 21:59:37 ----A---- C:\Windows\SysWOW64\EncDec.dll
2012-12-27 21:59:16 ----A---- C:\Windows\SysWOW64\odbc32.dll
2012-12-27 21:59:11 ----A---- C:\Windows\SysWOW64\ntdll.dll
2012-12-27 21:59:08 ----A---- C:\Windows\SysWOW64\sscore.dll
2012-12-27 21:59:06 ----A---- C:\Windows\splwow64.exe
2012-12-27 21:58:57 ----A---- C:\Windows\SysWOW64\crypt32.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptsvc.dll
2012-12-27 21:58:56 ----A---- C:\Windows\SysWOW64\cryptnet.dll
2012-12-27 21:57:54 ----A---- C:\Windows\SysWOW64\packager.dll
2012-12-27 21:45:12 ----A---- C:\Windows\SysWOW64\rdpcore.dll
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files\Steam

======List of files/folders modified in the last 1 month======

2013-01-26 13:05:09 ----D---- C:\Users\simon\AppData\Roaming\Dropbox
2013-01-26 13:05:07 ----D---- C:\Windows\Prefetch
2013-01-26 13:04:40 ----D---- C:\Windows\Temp
2013-01-26 13:04:13 ----D---- C:\ProgramData\NVIDIA
2013-01-26 13:03:09 ----D---- C:\Windows\System32
2013-01-26 13:03:09 ----D---- C:\Windows\inf
2013-01-26 13:02:34 ----D---- C:\Windows\Tasks
2013-01-26 11:57:06 ----SHD---- C:\System Volume Information
2013-01-26 11:46:28 ----HD---- C:\ProgramData
2013-01-26 11:46:28 ----D---- C:\Windows
2013-01-26 11:42:00 ----RD---- C:\Program Files (x86)
2013-01-25 21:21:56 ----D---- C:\Users\simon\AppData\Roaming\Skype
2013-01-25 21:17:29 ----HD---- C:\Config.Msi
2013-01-25 21:05:55 ----D---- C:\Windows\winsxs
2013-01-25 21:03:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-25 20:59:25 ----D---- C:\Windows\SysWOW64
2013-01-25 20:55:53 ----SHD---- C:\Windows\Installer
2013-01-25 20:53:53 ----RD---- C:\Program Files
2013-01-25 20:53:13 ----D---- C:\Program Files (x86)\Common Files\Apple
2013-01-25 10:51:02 ----D---- C:\Users\simon\AppData\Roaming\uTorrent
2013-01-23 13:56:31 ----D---- C:\Windows\Minidump
2013-01-20 01:47:01 ----RSD---- C:\Windows\Fonts
2013-01-19 01:44:33 ----D---- C:\Program Files (x86)\Opera
2013-01-16 14:49:29 ----D---- C:\Program Files (x86)\Last.fm
2013-01-11 21:35:37 ----D---- C:\Users\simon\AppData\Roaming\NVIDIA
2013-01-11 03:33:19 ----D---- C:\Windows\Microsoft.NET
2013-01-11 03:32:42 ----RSD---- C:\Windows\assembly
2013-01-09 12:48:31 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-12-29 03:03:28 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-28 04:47:43 ----D---- C:\Windows\rescache
2012-12-28 04:06:47 ----D---- C:\Windows\Panther
2012-12-28 04:03:34 ----D---- C:\Program Files (x86)\Common Files\System
2012-12-28 04:03:33 ----D---- C:\Windows\SysWOW64\en-US
2012-12-28 04:03:32 ----D---- C:\Windows\ehome
2012-12-28 04:03:26 ----D---- C:\Windows\SysWOW64\migration
2012-12-28 04:03:25 ----D---- C:\Windows\PolicyDefinitions
2012-12-28 04:03:23 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-28 04:03:18 ----D---- C:\Windows\AppPatch
2012-12-28 04:03:16 ----D---- C:\Program Files (x86)\Windows Mail
2012-12-28 04:03:13 ----D---- C:\Program Files (x86)\Windows Media Player
2012-12-28 03:13:33 ----D---- C:\Windows\Logs
2012-12-28 03:01:16 ----D---- C:\Windows\SoftwareDistribution
2012-12-27 21:27:56 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys []
R1 aswSnx;aswSnx; C:\Windows\SysWOW64\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 jakndisMP;jakndisMP; C:\Windows\system32\DRIVERS\jakndis.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys []
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 jakndis;Jaksta Service; C:\Windows\system32\DRIVERS\jakndis.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856]
S2 SamsungAllShareV2.0;Samsung AllShare PC; C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-03 25504]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-09 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-11-29 640912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-22 30963576]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-10 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SimpleSlideShowServer;SimpleSlideShowServer; C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-03 27584]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Spomaleny internet

#10 Příspěvek od Rudy »

Dvouklikem na soubor spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“