Čistě preventivka, prosím

[cross182]

Logfile of random's system information tool 1.09 (written by random/random)
Run by cross at 2013-01-27 18:21:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 58 GB (48%) free of 119 GB
Total RAM: 2937 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:22:36, on 27.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\TrueSuite\TrueSuite.ClientAppLogonExe.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wuauclt.exe
C:\crossíček\Programy\The KMPlayer\KMPlayer.exe
E:\Programy\landi 11\Landi11.exe
c:\program files\common files\installshield\updateservice\isuspm.exe
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\TrueSuite\TrueSuite.TouchControl.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\DllHost.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cross\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\ctfmon.exe
E:\Downloads\RSIT.exe
C:\Program Files\trend micro\cross.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - E:\Programy\NetXfer\NXIEHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - E:\Programy\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ClientAppLogon] C:\Program Files\TrueSuite\TrueSuite.ClientAppLogonExe.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\cross\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: Landi 11.lnk = E:\Programy\landi 11\Landi11.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout pomocí NetXferu - E:\Programy\NetXfer\NXAddLink.html
O8 - Extra context menu item: Stáhnout vše pomocí Net&Xferu - E:\Programy\NetXfer\NXAddList.html
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{144A0E98-1C86-4525-8C25-331007E86CC8}: Domain = vsb.cz
O17 - HKLM\System\CCS\Services\Tcpip\..\{144A0E98-1C86-4525-8C25-331007E86CC8}: NameServer = 158.196.149.9,158.196.162.8
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\atservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ShrewSoft DNS Proxy Daemon (dtpd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\dtpd.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: TrueSuiteService (FPLService) - AuthenTec, Inc - C:\Program Files\TrueSuite\TrueSuite.Service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ShrewSoft IKE Daemon (iked) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\iked.exe
O23 - Service: ShrewSoft IPSEC Daemon (ipsecd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oraclexe\app\oracle\product\11.2.0\server\BIN\omtsreco.exe
O23 - Service: OracleServiceXE - Oracle Corporation - c:\oraclexe\app\oracle\product\11.2.0\server\bin\ORACLE.EXE
O23 - Service: OracleXEClrAgent - Oracle Corporation - C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClrAgnt.exe
O23 - Service: OracleXETNSListener - Oracle Corporation - C:\oraclexe\app\oracle\product\11.2.0\server\BIN\tnslsnr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 8800 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2712944772-641038960-2487343970-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2712944772-641038960-2487343970-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\cross\AppData\Roaming\Mozilla\Firefox\Profiles\g8eeymm8.default

prefs.js - "browser.startup.homepage" - "http://www.facebook.com/"

"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox 4.0 Beta 4\extensions\
testpilot@labs.mozilla.com
websitelogon_toolbar@truesuite.com
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox 4.0 Beta 4\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox 4.0 Beta 4\plugins\
np-mswmp.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox 4.0 Beta 4\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\cross\AppData\Roaming\Mozilla\Firefox\Profiles\g8eeymm8.default\extensions\
{e3f6c2cc-d8db-498c-af6c-499fb211db97}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-07-03 329480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83B80A9C-D91A-4F22-8DCF-EA7204039F79}]
NXIECatcher Class - E:\Programy\NetXfer\NXIEHelper.dll [2010-02-20 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-07-03 59144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]
{C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - NetXfer - E:\Programy\NetXfer\NXToolBar.dll [2010-02-20 57344]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-10-30 4297136]
"ClientAppLogon"=C:\Program Files\TrueSuite\TrueSuite.ClientAppLogonExe.exe [2009-12-22 307008]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2009-03-29 184320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]
"AdobeBridge"= []
"Google Update"=C:\Users\cross\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-27 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\cross\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-27 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
C:\crossíček\QIP 2010\QIP 2010\qip.exe [2011-02-22 5856640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MurGee.com Auto Clicker]
C:\crossíček\Programy\Auto Clicker\AutoClicker.exe :silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2011-12-13 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
E:\Programy\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wondershare Helper Compact.exe]
C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2012-02-28 1679360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^20Dollars2Surf.lnk]
C:\PROGRA~1\20DOLL~1\20DOLL~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-09-25 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
E:\_Hry\GamePark\GAMEPA~1\gpcl.exe [2011-07-29 409088]

C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Landi 11.lnk - E:\Programy\landi 11\Landi11.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2010-11-20 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-01-25 17:43:25 ----A---- C:\Windows\ulandi.exe
2013-01-25 17:38:35 ----D---- C:\ProgramData\Landi11-original
2013-01-25 17:38:20 ----N---- C:\Windows\Setup1.exe
2013-01-25 17:38:17 ----A---- C:\Windows\ST6UNST.EXE
2013-01-20 11:13:54 ----A---- C:\Windows\system32\Wdfres.dll
2013-01-20 11:13:54 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-01-20 11:13:54 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-01-20 11:12:54 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-01-20 11:12:54 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-01-20 11:12:51 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-01-20 11:12:50 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-01-20 11:12:46 ----A---- C:\Windows\system32\WUDFHost.exe
2013-01-20 11:12:46 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-01-20 11:12:45 ----A---- C:\Windows\system32\WUDFx.dll
2013-01-20 10:52:26 ----RD---- C:\Program Files\Skype
2013-01-20 10:52:26 ----D---- C:\Program Files\Common Files\Skype
2013-01-19 11:33:43 ----A---- C:\Windows\system32\spoolsv.exe
2013-01-19 11:33:42 ----A---- C:\Windows\system32\usp10.dll
2013-01-19 11:33:41 ----A---- C:\Windows\system32\prevhost.exe
2013-01-19 11:33:40 ----A---- C:\Windows\system32\xmllite.dll
2013-01-19 11:33:39 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-01-19 11:33:38 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-01-19 11:33:36 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-01-19 11:33:36 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-01-19 11:33:36 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-01-19 11:33:35 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-01-19 11:33:35 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-01-19 11:33:35 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-01-19 11:33:35 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-01-19 11:33:23 ----A---- C:\Windows\system32\esent.dll
2013-01-19 11:33:22 ----A---- C:\Windows\system32\drivers\storport.sys
2013-01-19 11:33:22 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-01-19 11:33:22 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-01-19 11:33:22 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-01-19 11:33:21 ----A---- C:\Windows\system32\fsutil.exe
2013-01-19 11:33:21 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-01-19 11:33:21 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-01-19 11:33:20 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-01-19 11:33:14 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-01-19 11:33:05 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-01-19 11:33:01 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-01-19 11:32:57 ----A---- C:\Windows\system32\ncsi.dll
2013-01-19 11:32:56 ----A---- C:\Windows\system32\nlasvc.dll
2013-01-19 11:32:56 ----A---- C:\Windows\system32\netcorehc.dll
2013-01-19 11:32:56 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-01-19 11:32:56 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-01-19 11:32:56 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-01-19 11:32:55 ----A---- C:\Windows\system32\nlaapi.dll
2013-01-19 11:32:55 ----A---- C:\Windows\system32\netevent.dll
2013-01-19 11:32:36 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-19 11:32:36 ----A---- C:\Windows\system32\conhost.exe
2013-01-19 11:32:35 ----A---- C:\Windows\system32\kernel32.dll
2013-01-19 11:32:34 ----A---- C:\Windows\system32\winsrv.dll
2013-01-19 11:32:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-19 11:32:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-19 11:32:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-19 11:32:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-19 11:32:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-19 11:32:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-19 11:32:30 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-19 11:32:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-19 11:32:10 ----A---- C:\Windows\system32\tquery.dll
2013-01-19 11:32:10 ----A---- C:\Windows\system32\mssrch.dll
2013-01-19 11:32:09 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-01-19 11:32:09 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-01-19 11:32:09 ----A---- C:\Windows\system32\mssph.dll
2013-01-19 11:32:08 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-01-19 11:32:08 ----A---- C:\Windows\system32\mssvp.dll
2013-01-19 11:32:07 ----A---- C:\Windows\system32\mssphtb.dll
2013-01-19 11:32:07 ----A---- C:\Windows\system32\msscntrs.dll
2013-01-19 11:32:04 ----A---- C:\Windows\system32\srcore.dll
2013-01-19 11:32:00 ----A---- C:\Windows\system32\XpsPrint.dll
2013-01-19 11:31:59 ----A---- C:\Windows\system32\jscript.dll
2013-01-19 11:31:57 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-01-19 11:31:55 ----A---- C:\Windows\explorer.exe
2013-01-19 11:31:53 ----A---- C:\Windows\system32\msi.dll
2013-01-19 11:31:51 ----A---- C:\Windows\system32\d3d10level9.dll
2013-01-19 11:31:40 ----A---- C:\Windows\system32\Wpc.dll
2013-01-19 11:31:40 ----A---- C:\Windows\system32\gameux.dll
2013-01-19 11:31:17 ----A---- C:\Windows\system32\d3d10_1.dll
2013-01-19 11:31:16 ----A---- C:\Windows\system32\profsvc.dll
2013-01-19 11:31:09 ----A---- C:\Windows\system32\ntshrui.dll
2013-01-19 11:31:05 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-01-19 11:31:05 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-01-19 11:31:03 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-01-19 11:29:41 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-01-19 11:12:16 ----D---- C:\Windows\cs
2013-01-19 11:10:34 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-01-19 11:08:58 ----D---- C:\Program Files\Windows Live
2013-01-19 11:08:07 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-01-19 11:08:07 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-01-19 11:08:07 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-01-19 11:08:06 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-01-19 11:07:30 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-01-19 10:57:08 ----D---- C:\5b32ba949789eb27953dcaae
2013-01-19 10:55:26 ----D---- C:\Program Files\Common Files\Windows Live
2013-01-15 08:09:58 ----A---- C:\Windows\system32\mshtml.dll
2013-01-09 07:56:54 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 07:56:52 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 07:56:37 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 07:56:01 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 07:56:00 ----A---- C:\Windows\system32\taskhost.exe
2013-01-06 18:52:23 ----D---- C:\ProgramData\Mozilla
2013-01-06 18:52:22 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of files/folders modified in the last 1 month======

2013-01-27 18:22:07 ----D---- C:\Windows\Prefetch
2013-01-27 18:22:01 ----D---- C:\Windows\temp
2013-01-27 18:22:01 ----D---- C:\Program Files\trend micro
2013-01-27 10:37:17 ----D---- C:\Windows\system32\config
2013-01-26 19:54:22 ----SHD---- C:\System Volume Information
2013-01-25 22:12:38 ----D---- C:\Windows\System32
2013-01-25 22:12:38 ----D---- C:\Windows\inf
2013-01-25 22:12:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-25 17:43:25 ----D---- C:\Windows
2013-01-25 17:39:05 ----RSD---- C:\Windows\Fonts
2013-01-25 17:38:35 ----D---- C:\ProgramData
2013-01-22 10:07:16 ----SHD---- C:\Windows\Installer
2013-01-22 10:05:40 ----D---- C:\ProgramData\Microsoft Help
2013-01-21 07:11:11 ----D---- C:\Windows\winsxs
2013-01-20 16:40:08 ----D---- C:\Windows\rescache
2013-01-20 13:07:41 ----RSD---- C:\Windows\assembly
2013-01-20 13:07:41 ----D---- C:\Windows\Microsoft.NET
2013-01-20 12:48:11 ----D---- C:\Windows\system32\drivers
2013-01-20 12:48:11 ----D---- C:\Windows\system32\cs-CZ
2013-01-20 12:48:11 ----D---- C:\Windows\AppPatch
2013-01-20 12:48:11 ----D---- C:\Program Files\Internet Explorer
2013-01-20 12:48:10 ----D---- C:\Windows\system32\migration
2013-01-20 12:48:09 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-01-20 12:48:08 ----D---- C:\Windows\system32\wbem
2013-01-20 12:48:05 ----D---- C:\Windows\system32\DriverStore
2013-01-20 11:14:10 ----D---- C:\Windows\system32\catroot
2013-01-20 11:13:18 ----D---- C:\Windows\system32\catroot2
2013-01-20 11:02:25 ----A---- C:\Windows\vbaddin.ini
2013-01-20 11:00:49 ----D---- C:\Program Files\Microsoft Works
2013-01-20 10:57:21 ----D---- C:\Program Files\Common Files\microsoft shared
2013-01-20 10:55:08 ----D---- C:\Users\cross\AppData\Roaming\Skype
2013-01-20 10:52:39 ----D---- C:\ProgramData\Skype
2013-01-20 10:52:26 ----RD---- C:\Program Files
2013-01-20 10:52:26 ----D---- C:\Program Files\Common Files
2013-01-19 11:09:52 ----SD---- C:\ProgramData\Microsoft
2013-01-19 11:05:44 ----D---- C:\Windows\Logs
2013-01-19 10:59:45 ----D---- C:\Windows\system32\en-US
2013-01-19 10:59:42 ----D---- C:\Program Files\Microsoft.NET
2013-01-19 10:58:44 ----D---- C:\Windows\SoftwareDistribution
2013-01-11 08:27:02 ----A---- C:\Windows\system32\MRT.exe
2013-01-08 23:16:19 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-01-06 18:52:17 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 4
2012-12-28 10:57:50 ----D---- C:\ProgramData\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-09-14 691696]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 44784]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 vflt;Shrew Soft Lightweight Filter; C:\Windows\system32\DRIVERS\vfilter.sys [2010-09-02 17920]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 58680]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-09-07 48128]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-06-25 44544]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2009-06-25 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-02-07 166448]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-21 1218048]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-09-24 659328]
R3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R); C:\Windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-25 9024512]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 tosrfec;Bluetooth ACPI from TOSHIBA; C:\Windows\system32\DRIVERS\tosrfec.sys [2003-02-04 8605]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 WsAudioDevice_383;WsAudioDevice_383; C:\Windows\system32\drivers\WsAudioDevice_383.sys [2011-11-17 16640]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ASNDIS4;ASNDIS4 Protocol Driver; \??\C:\Windows\system32\ASNDIS4.SYS []
S3 aw2pvo7h;aw2pvo7h; C:\Windows\system32\drivers\aw2pvo7h.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 catchme;catchme; \??\C:\Users\cross\AppData\Local\Temp\catchme.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-09-20 25280]
S3 netr73;RT73 USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vnet;Shrew Soft Virtual Adapter; C:\Windows\system32\DRIVERS\virtualnet.sys [2010-09-02 13824]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\atservice.exe [2009-12-22 1819968]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
R2 dtpd;ShrewSoft DNS Proxy Daemon; C:\Program Files\ShrewSoft\VPN Client\dtpd.exe [2010-10-08 54544]
R2 FPLService;TrueSuiteService; C:\Program Files\TrueSuite\TrueSuite.Service.exe [2009-12-22 108352]
R2 iked;ShrewSoft IKE Daemon; C:\Program Files\ShrewSoft\VPN Client\iked.exe [2010-10-08 726288]
R2 ipsecd;ShrewSoft IPSEC Daemon; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [2010-10-08 541968]
R2 OracleServiceXE;OracleServiceXE; c:\oraclexe\app\oracle\product\11.2.0\server\bin\ORACLE.EXE [2011-08-27 115773440]
R2 OracleXETNSListener;OracleXETNSListener; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\tnslsnr.exe [2011-08-27 512000]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-06-05 75064]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-16 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-06-26 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-16 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-06 114656]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 OracleMTSRecoveryService;OracleMTSRecoveryService; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\omtsreco.exe [2011-08-27 69632]
S3 OracleXEClrAgent;OracleXEClrAgent; C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClrAgnt.exe [2011-08-27 12800]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-03-21 632832]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-01 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 OracleJobSchedulerXE;OracleJobSchedulerXE; c:\oraclexe\app\oracle\product\11.2.0\server\Bin\extjob.exe [2011-08-27 49152]

-----------------EOF-----------------

[Roli]

Zdravím, tyhle zbytečnosti fixni v HJT :

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - E:\Programy\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\cross\AppData\Local\Google\Update\GoogleUpdate.exe" /c

HJT najdeš zde :

C:\Program Files\trend micro\cross.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Použij T-Cleaner.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Jinak v pořádku.

[cross182]

Super, díky moc

[Roli]

Není zač a