Veeelmi, veeelmi pomalý NB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Veeelmi, veeelmi pomalý NB

#1 Příspěvek od Ivošisko »

Prosím o kontrolu logu:

Logfile of random's system information tool 1.09 (written by random/random)
Run by uzivatel at 2013-01-29 23:35:20
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 197 GB (65%) free of 305 GB
Total RAM: 4095 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:36:12, on 29.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\uzivatel\AppData\Local\Temp\dnsbwpxpl.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=117023 ... 2243c6c20d
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com/?aff=7&uid=572a6a91 ... 2243c6c20d
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.157.56.28 www.google-analytics.com.
O1 - Hosts: 192.157.56.28 ad-emea.doubleclick.net.
O1 - Hosts: 192.157.56.28 www.statcounter.com.
O1 - Hosts: 192.157.56.28 connect.facebook.net.
O1 - Hosts: 192.157.56.28 platform.twitter.com.
O1 - Hosts: 93.115.241.27 www.google-analytics.com.
O1 - Hosts: 93.115.241.27 ad-emea.doubleclick.net.
O1 - Hosts: 93.115.241.27 www.statcounter.com.
O1 - Hosts: 93.115.241.27 connect.facebook.net.
O1 - Hosts: 93.115.241.27 platform.twitter.com.
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: uTorrentControl_v2 - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PrivitizeVPN] C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe /autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\uzivatel\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\WebcamMax.exe" -a
O4 - HKCU\..\Run: [pdoubrhgfjkxeiqndts] C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
O4 - HKCU\..\Run: [Windows Update Server] C:\Users\uzivatel\31d89599-5930.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-179058154-1376331171-3639500384-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-179058154-1376331171-3639500384-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IB Updater - Unknown owner - C:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12161 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\IB Updater\ExtensionUpdaterService.exe"
C:\Windows\system32\dmwu.exe
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2292
"C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe" PanProcess
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
-g yes -o http://169TpR47JVcLaQXdGYE6Lv4Ps9DbVqHh ... c.com:8332
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
\??\C:\Windows\system32\conhost.exe "-1443481058-12219259751657045923-769751758-155881939228892218596047357-791491001
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Windows\Explorer.EXE"
taskmgr.exe /3
"C:\Users\uzivatel\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-179058154-1376331171-3639500384-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-179058154-1376331171-3639500384-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default

prefs.js - "browser.startup.homepage" - "http://www.facebook.com/"
prefs.js - "keyword.URL" - "http://mystart.incredibar.com/mb201/?lo ... 26&search="

"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\IB Updater\Firefox


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default\extensions\
50d203dced9c6@50d203dced9ee.com
50d204e3a24fd@50d204e3a2536.com
ffxtlbr@incredibar.com
ffxtlbr@searchya.com
plugin@yontoo.com
{7473b6bd-4691-4744-a82b-7854eb3d70b6}
{99079a25-328f-4bd4-be04-00955acaa0a7}

C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default\searchplugins\
MyStart Search.xml
Search.xml
Searchab.xml
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension64.dll [2012-11-26 215896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension32.dll [2012-11-26 170840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]
Incredibar.com Helper Object - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll [2012-01-21 261632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-25 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-25 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]
{F9639E4A-801B-4843-AEE3-03D9DA199E77} - Incredibar Toolbar - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll [2012-01-21 270336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-10-16 8158240]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\uzivatel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-24 138096]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\WebcamMax.exe [2010-08-03 6043888]
"pdoubrhgfjkxeiqndts"=C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe [2013-01-29 680448]
"Windows Update Server"=C:\Users\uzivatel\31d89599-5930.exe [2013-01-28 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-19 170624]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-10-09 6937216]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"PrivitizeVPN"=C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe [2012-09-10 196784]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-29 23:35:20 ----D---- C:\Program Files\trend micro
2013-01-29 23:35:17 ----D---- C:\rsit
2013-01-29 17:50:58 ----D---- C:\Program Files\CCleaner
2013-01-29 17:48:55 ----D---- C:\Program Files (x86)\Google
2013-01-28 08:28:56 ----A---- C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
2013-01-26 23:04:06 ----D---- C:\FFOutput
2013-01-26 23:03:34 ----D---- C:\Program Files (x86)\FreeTime
2013-01-26 22:47:17 ----A---- C:\Users\uzivatel\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe
2013-01-26 22:47:07 ----A---- C:\Users\uzivatel\AppData\Roaming\nMNtffsdf5ev.exe
2013-01-26 22:46:49 ----AH---- C:\Users\uzivatel\AppData\Roaming\winsvcns.sys
2013-01-26 16:06:25 ----D---- C:\Program Files (x86)\EA Games
2013-01-26 14:16:31 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-01-26 14:16:31 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-01-26 14:16:31 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-01-26 14:16:29 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-01-26 14:16:29 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\wksprtPS.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\wksprt.exe
2013-01-26 14:16:27 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-01-26 14:16:27 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\tsgqec.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\rdpudd.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\aaclient.dll
2013-01-26 14:16:26 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-01-26 14:16:26 ----A---- C:\Windows\system32\rdpcorets.dll
2013-01-26 14:16:26 ----A---- C:\Windows\system32\mstsc.exe
2013-01-26 14:16:25 ----A---- C:\Windows\system32\mstscax.dll
2013-01-26 14:16:10 ----A---- C:\Windows\system32\ZSHP1020.EXE
2013-01-26 14:16:10 ----A---- C:\Windows\system32\ZLhp1020.DLL
2013-01-26 14:15:29 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\schannel.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\lsasrv.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-01-26 14:15:29 ----A---- C:\Windows\system32\drivers\cng.sys
2013-01-26 14:15:28 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-01-26 14:15:28 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-01-26 13:12:41 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2
2013-01-26 09:49:03 ----D---- C:\Users\uzivatel\AppData\Roaming\Babylon
2013-01-26 09:49:03 ----D---- C:\ProgramData\Babylon
2013-01-26 09:48:42 ----A---- C:\Windows\system32\drivers\sptd.sys
2013-01-25 18:26:06 ----D---- C:\Program Files (x86)\Ubisoft
2013-01-23 16:46:36 ----D---- C:\Program Files (x86)\Incredibar.com
2013-01-23 16:46:36 ----A---- C:\user.js
2013-01-23 16:46:24 ----D---- C:\Windows\system32\ARFC
2013-01-23 16:46:24 ----A---- C:\Windows\system32\msvcr100.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\msvcp100.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\ImHttpComm.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\dmwu.exe
2013-01-23 16:46:23 ----D---- C:\Windows\SYSWOW64\WNLT
2013-01-23 16:46:20 ----D---- C:\Program Files\IB Updater
2013-01-23 16:44:37 ----D---- C:\Users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2013-01-23 16:43:45 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-01-23 14:36:50 ----D---- C:\Program Files (x86)\Conduit
2013-01-23 14:36:47 ----D---- C:\Program Files (x86)\uTorrentControl_v2
2013-01-22 18:42:22 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-01-22 18:42:22 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-01-22 18:42:21 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-01-22 18:42:21 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-01-22 18:42:20 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-01-22 18:42:20 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-01-22 18:42:19 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-01-22 18:42:19 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-01-22 18:41:43 ----HD---- C:\Windows\msdownld.tmp
2013-01-22 18:41:42 ----D---- C:\Windows\SYSWOW64\directx
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-01-22 18:25:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-01-22 18:25:03 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-01-22 18:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-01-22 18:25:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-01-22 18:25:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-01-22 18:24:59 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-01-22 18:24:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-01-22 18:24:58 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-01-22 18:24:58 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-01-22 18:24:57 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-01-22 18:24:57 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-01-22 18:24:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-01-22 18:24:55 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-01-22 18:24:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-01-22 18:24:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-01-22 18:24:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-01-22 18:24:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-01-22 18:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-01-22 18:24:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-01-22 18:24:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-01-22 18:24:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-01-22 18:24:49 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-01-22 18:24:49 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-01-22 18:24:49 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-01-22 18:24:49 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-01-22 18:24:48 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-01-22 18:24:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-01-22 18:24:48 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-01-22 18:24:48 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-01-22 18:24:45 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-01-22 18:24:44 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-01-22 18:24:44 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-01-22 18:24:44 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-01-22 18:24:44 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-01-22 18:24:43 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-01-22 18:24:42 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-01-22 18:24:42 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-01-22 18:24:40 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-01-22 18:24:40 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-01-22 18:24:38 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-01-22 18:24:38 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-01-22 18:24:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-01-22 18:24:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-01-22 18:24:37 ----A---- C:\Windows\system32\xinput1_3.dll
2013-01-22 18:24:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-01-22 18:24:35 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-01-22 18:24:35 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-01-22 18:24:34 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-01-22 18:24:34 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-01-22 18:24:33 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-01-22 18:24:33 ----A---- C:\Windows\system32\d3dx10.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-01-22 18:24:30 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-01-22 18:24:30 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-01-22 18:24:30 ----A---- C:\Windows\system32\xinput1_2.dll
2013-01-22 18:24:30 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-01-22 18:24:29 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-01-22 18:24:29 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-01-22 18:24:28 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-01-22 18:24:28 ----A---- C:\Windows\system32\xinput1_1.dll
2013-01-22 18:24:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-01-22 18:24:27 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-01-22 18:24:21 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-01-22 18:24:21 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-01-22 18:24:20 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-01-22 18:24:19 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-01-22 18:24:19 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-01-22 18:24:18 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-01-22 18:24:18 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-01-22 18:24:17 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-01-22 18:24:17 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-01-22 18:24:16 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-01-22 18:24:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-01-22 18:24:16 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-01-22 18:24:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-01-22 18:24:15 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-01-22 18:24:15 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-01-22 18:03:25 ----D---- C:\Program Files (x86)\Atari
2013-01-19 10:05:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-01-09 17:17:42 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-09 17:17:41 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-01-09 17:17:41 ----A---- C:\Windows\system32\kernel32.dll
2013-01-09 17:17:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64win.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64cpu.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\winsrv.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\conhost.exe
2013-01-09 17:17:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-09 17:17:39 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-01-09 17:17:39 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-01-09 17:17:39 ----A---- C:\Windows\system32\ntvdm64.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 17:17:36 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-01-09 17:17:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 17:17:35 ----A---- C:\Windows\SYSWOW64\user.exe
2013-01-09 17:17:35 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-01-09 17:17:25 ----A---- C:\Windows\system32\Wpc.dll
2013-01-09 17:17:24 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-01-09 17:17:24 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-01-09 17:17:24 ----A---- C:\Windows\system32\gameux.dll
2013-01-09 17:15:49 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 17:15:48 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-01-09 17:15:48 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 17:15:38 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 17:15:37 ----A---- C:\Windows\system32\msxml3.dll
2013-01-09 17:15:36 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-01-09 17:15:36 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-01-09 17:15:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-01-09 17:15:35 ----A---- C:\Windows\system32\usp10.dll
2013-01-09 17:15:35 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 17:15:34 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-01-09 17:08:16 ----A---- C:\Windows\system32\taskhost.exe
2013-01-08 20:50:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2013-01-03 17:38:20 ----D---- C:\Program Files (x86)\GeoGebra

======List of files/folders modified in the last 1 month======

2013-01-29 23:35:20 ----RD---- C:\Program Files
2013-01-29 23:16:21 ----D---- C:\Windows\Temp
2013-01-29 23:16:21 ----D---- C:\Windows\system32\config
2013-01-29 23:07:15 ----D---- C:\Windows\System32
2013-01-29 23:07:15 ----D---- C:\Windows\inf
2013-01-29 23:07:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-29 23:02:54 ----D---- C:\ProgramData\NVIDIA
2013-01-29 22:53:11 ----D---- C:\Windows\rescache
2013-01-29 22:49:09 ----D---- C:\Windows\Prefetch
2013-01-29 18:55:49 ----D---- C:\Windows\system32\Tasks
2013-01-29 18:55:48 ----D---- C:\Windows\Tasks
2013-01-29 18:55:32 ----SHD---- C:\Windows\Installer
2013-01-29 18:43:44 ----RD---- C:\Program Files (x86)
2013-01-29 18:29:36 ----D---- C:\Windows
2013-01-29 18:01:41 ----D---- C:\Windows\Panther
2013-01-29 18:01:41 ----D---- C:\Windows\Logs
2013-01-29 18:01:41 ----D---- C:\Windows\debug
2013-01-29 17:28:13 ----D---- C:\Windows\system32\drivers
2013-01-29 17:24:17 ----SHD---- C:\Users\uzivatel\AppData\Roaming\A199FD
2013-01-29 17:24:13 ----D---- C:\Windows\system32\wdi
2013-01-29 17:19:37 ----D---- C:\Program Files (x86)\ASUS
2013-01-29 17:19:29 ----SHD---- C:\System Volume Information
2013-01-29 17:19:17 ----HD---- C:\ProgramData
2013-01-29 17:17:35 ----D---- C:\Program Files (x86)\SweetIM
2013-01-29 17:03:48 ----D---- C:\Windows\system32\drivers\etc
2013-01-28 08:28:57 ----D---- C:\Users\uzivatel\AppData\Roaming\NVIDIA
2013-01-26 16:40:30 ----D---- C:\Windows\winsxs
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\wbem
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-01-26 16:39:14 ----D---- C:\Windows\SysWOW64
2013-01-26 16:39:14 ----D---- C:\Windows\system32\wbem
2013-01-26 16:39:14 ----D---- C:\Windows\system32\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\system32\drivers\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\system32\cs-CZ
2013-01-26 16:39:14 ----D---- C:\Windows\PolicyDefinitions
2013-01-26 16:39:13 ----D---- C:\Windows\system32\DriverStore
2013-01-26 16:07:02 ----D---- C:\Program Files (x86)\Common Files
2013-01-26 16:06:48 ----D---- C:\Windows\system32\catroot2
2013-01-26 14:23:12 ----D---- C:\Windows\Resources
2013-01-26 14:16:44 ----D---- C:\Windows\system32\catroot
2013-01-26 11:17:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-26 10:15:23 ----RSD---- C:\Windows\assembly
2013-01-22 18:24:23 ----D---- C:\Windows\Microsoft.NET
2013-01-20 15:47:48 ----D---- C:\Windows\system32\NDF
2013-01-20 08:36:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-01-10 07:20:59 ----D---- C:\Windows\AppPatch
2013-01-09 23:50:08 ----D---- C:\ProgramData\Microsoft Help
2013-01-09 23:44:20 ----A---- C:\Windows\system32\MRT.exe
2013-01-08 20:50:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-01-05 23:06:48 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2013-01-01 19:40:49 ----D---- C:\Program Files\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-01-26 564824]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2009-06-25 67584]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2009-06-25 55296]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2009-06-25 57856]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-10-16 1542656]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-10-16 98344]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-10-16 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-10-16 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-10-16 21160]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-10-16 2007968]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2012-10-16 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2012-10-16 15928]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-10-16 236544]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2012-10-16 1806400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-01 864032]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IB Updater;IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [2012-11-26 188760]
R2 IBUpdaterService;IBUpdaterService; C:\Windows\system32\dmwu.exe [2012-10-02 1261936]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-10-19 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-19 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-16 1255736]

-----------------EOF-----------------
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#2 Příspěvek od JaRon »

Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

File::
C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
C:\Users\uzivatel\31d89599-5930.exe
C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
C:\Users\uzivatel\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe
C:\Users\uzivatel\AppData\Roaming\nMNtffsdf5ev.exe
C:\Users\uzivatel\AppData\Roaming\winsvcns.sys
uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

Obrázek

po aplikacii by mal vzniknut dalsi log, ten vloz sem :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#3 Příspěvek od Ivošisko »

Dobrý den.....děkuji za reakci.......script nad CFjsem aplikoval, ale mám podezření, že neproběhl celý - log se nevytvořil a ani v Průzkumníku jsem jej nenašel.

NB se zrychlil a zklidnil (předtím CPU běžel na 100%), ale ještě tonení OK....

Mám ještě jednou realizovat CF?
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#4 Příspěvek od JaRon »

ano skus zopakovat CF - bez scriptu - prip. v nudzovom rezime - nejaky log by sa zisiel :)
ak sa nepodari vloz log RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#5 Příspěvek od Ivošisko »

Tak bohužel,nevede se mi - CF po mě chce, abych vypnul některé štíty (Microsoft Essencial), ale já to nějak "neumím" najít, takže se CF ukončí a zmizí z plochy (ještě předtím zahlásí, že není aktuální). Na oficiálních stránkách jim však v současné době download nefunguje.

Takže jsem se zatím uchýlil k RSIT

Jo, a pořád tu obtěžuje okno PC Speed Test


Logfile of random's system information tool 1.09 (written by random/random)
Run by uzivatel at 2013-01-30 11:02:23
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 197 GB (65%) free of 305 GB
Total RAM: 4095 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:03:04, on 30.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=117023 ... 2243c6c20d
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com/?aff=7&uid=572a6a91 ... 2243c6c20d
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.157.56.28 www.google-analytics.com.
O1 - Hosts: 192.157.56.28 ad-emea.doubleclick.net.
O1 - Hosts: 192.157.56.28 www.statcounter.com.
O1 - Hosts: 192.157.56.28 connect.facebook.net.
O1 - Hosts: 192.157.56.28 platform.twitter.com.
O1 - Hosts: 93.115.241.27 www.google-analytics.com.
O1 - Hosts: 93.115.241.27 ad-emea.doubleclick.net.
O1 - Hosts: 93.115.241.27 www.statcounter.com.
O1 - Hosts: 93.115.241.27 connect.facebook.net.
O1 - Hosts: 93.115.241.27 platform.twitter.com.
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: uTorrentControl_v2 - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PrivitizeVPN] C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe /autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\uzivatel\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\WebcamMax.exe" -a
O4 - HKCU\..\Run: [pdoubrhgfjkxeiqndts] C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
O4 - HKCU\..\Run: [Windows Update Server] C:\Users\uzivatel\31d89599-5930.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-179058154-1376331171-3639500384-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-179058154-1376331171-3639500384-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IB Updater - Unknown owner - C:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12148 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\IB Updater\ExtensionUpdaterService.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\dmwu.exe
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2480
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe" PanProcess
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k bthsvcs
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Users\uzivatel\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-179058154-1376331171-3639500384-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-179058154-1376331171-3639500384-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default

prefs.js - "browser.startup.homepage" - "http://www.facebook.com/"
prefs.js - "keyword.URL" - "http://mystart.incredibar.com/mb201/?lo ... 26&search="

"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\IB Updater\Firefox


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default\extensions\
50d203dced9c6@50d203dced9ee.com
50d204e3a24fd@50d204e3a2536.com
ffxtlbr@incredibar.com
ffxtlbr@searchya.com
plugin@yontoo.com
{7473b6bd-4691-4744-a82b-7854eb3d70b6}
{99079a25-328f-4bd4-be04-00955acaa0a7}

C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7wjrkinv.default\searchplugins\
MyStart Search.xml
Search.xml
Searchab.xml
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension64.dll [2012-11-26 215896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension32.dll [2012-11-26 170840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]
Incredibar.com Helper Object - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll [2012-01-21 261632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-25 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-25 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04 1310040]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]
{F9639E4A-801B-4843-AEE3-03D9DA199E77} - Incredibar Toolbar - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll [2012-01-21 270336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-10-16 8158240]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\uzivatel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-24 138096]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\WebcamMax.exe [2010-08-03 6043888]
"pdoubrhgfjkxeiqndts"=C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe [2013-01-29 680448]
"Windows Update Server"=C:\Users\uzivatel\31d89599-5930.exe [2013-01-28 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-19 170624]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-10-09 6937216]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"PrivitizeVPN"=C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe [2012-09-10 196784]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-30 10:05:29 ----D---- C:\Windows\ERDNT
2013-01-30 10:04:18 ----D---- C:\Qoobox
2013-01-29 23:35:20 ----D---- C:\Program Files\trend micro
2013-01-29 23:35:17 ----D---- C:\rsit
2013-01-29 17:50:58 ----D---- C:\Program Files\CCleaner
2013-01-29 17:48:55 ----D---- C:\Program Files (x86)\Google
2013-01-28 08:28:56 ----A---- C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe
2013-01-26 23:04:06 ----D---- C:\FFOutput
2013-01-26 23:03:34 ----D---- C:\Program Files (x86)\FreeTime
2013-01-26 22:47:17 ----A---- C:\Users\uzivatel\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe
2013-01-26 22:47:07 ----A---- C:\Users\uzivatel\AppData\Roaming\nMNtffsdf5ev.exe
2013-01-26 22:46:49 ----AH---- C:\Users\uzivatel\AppData\Roaming\winsvcns.sys
2013-01-26 16:06:25 ----D---- C:\Program Files (x86)\EA Games
2013-01-26 14:16:31 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-01-26 14:16:31 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-01-26 14:16:31 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-01-26 14:16:29 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-01-26 14:16:29 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-01-26 14:16:27 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\wksprtPS.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\wksprt.exe
2013-01-26 14:16:27 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-01-26 14:16:27 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\tsgqec.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\rdpudd.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-01-26 14:16:27 ----A---- C:\Windows\system32\aaclient.dll
2013-01-26 14:16:26 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-01-26 14:16:26 ----A---- C:\Windows\system32\rdpcorets.dll
2013-01-26 14:16:26 ----A---- C:\Windows\system32\mstsc.exe
2013-01-26 14:16:25 ----A---- C:\Windows\system32\mstscax.dll
2013-01-26 14:16:10 ----A---- C:\Windows\system32\ZSHP1020.EXE
2013-01-26 14:16:10 ----A---- C:\Windows\system32\ZLhp1020.DLL
2013-01-26 14:15:29 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\schannel.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\lsasrv.dll
2013-01-26 14:15:29 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-01-26 14:15:29 ----A---- C:\Windows\system32\drivers\cng.sys
2013-01-26 14:15:28 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-01-26 14:15:28 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-01-26 13:12:41 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2
2013-01-26 09:49:03 ----D---- C:\Users\uzivatel\AppData\Roaming\Babylon
2013-01-26 09:49:03 ----D---- C:\ProgramData\Babylon
2013-01-26 09:48:42 ----A---- C:\Windows\system32\drivers\sptd.sys
2013-01-25 18:26:06 ----D---- C:\Program Files (x86)\Ubisoft
2013-01-23 16:46:36 ----D---- C:\Program Files (x86)\Incredibar.com
2013-01-23 16:46:36 ----A---- C:\user.js
2013-01-23 16:46:24 ----D---- C:\Windows\system32\ARFC
2013-01-23 16:46:24 ----A---- C:\Windows\system32\msvcr100.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\msvcp100.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\ImHttpComm.dll
2013-01-23 16:46:24 ----A---- C:\Windows\system32\dmwu.exe
2013-01-23 16:46:23 ----D---- C:\Windows\SYSWOW64\WNLT
2013-01-23 16:46:20 ----D---- C:\Program Files\IB Updater
2013-01-23 16:44:37 ----D---- C:\Users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2013-01-23 16:43:45 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-01-23 14:36:50 ----D---- C:\Program Files (x86)\Conduit
2013-01-23 14:36:47 ----D---- C:\Program Files (x86)\uTorrentControl_v2
2013-01-22 18:42:22 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-01-22 18:42:22 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-01-22 18:42:21 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-01-22 18:42:21 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-01-22 18:42:20 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-01-22 18:42:20 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-01-22 18:42:19 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-01-22 18:42:19 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-01-22 18:41:43 ----HD---- C:\Windows\msdownld.tmp
2013-01-22 18:41:42 ----D---- C:\Windows\SYSWOW64\directx
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-01-22 18:25:04 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-01-22 18:25:04 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-01-22 18:25:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-01-22 18:25:03 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-01-22 18:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-01-22 18:25:02 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-01-22 18:25:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-01-22 18:25:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-01-22 18:25:00 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-01-22 18:24:59 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-01-22 18:24:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-01-22 18:24:58 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-01-22 18:24:58 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-01-22 18:24:57 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-01-22 18:24:57 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-01-22 18:24:56 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-01-22 18:24:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-01-22 18:24:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-01-22 18:24:55 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-01-22 18:24:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-01-22 18:24:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-01-22 18:24:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-01-22 18:24:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-01-22 18:24:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-01-22 18:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-01-22 18:24:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-01-22 18:24:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-01-22 18:24:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-01-22 18:24:51 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-01-22 18:24:51 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-01-22 18:24:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-01-22 18:24:49 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-01-22 18:24:49 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-01-22 18:24:49 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-01-22 18:24:49 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-01-22 18:24:48 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-01-22 18:24:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-01-22 18:24:48 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-01-22 18:24:48 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-01-22 18:24:47 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-01-22 18:24:46 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-01-22 18:24:45 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-01-22 18:24:45 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-01-22 18:24:44 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-01-22 18:24:44 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-01-22 18:24:44 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-01-22 18:24:44 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-01-22 18:24:43 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-01-22 18:24:43 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-01-22 18:24:42 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-01-22 18:24:42 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-01-22 18:24:41 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-01-22 18:24:40 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-01-22 18:24:40 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-01-22 18:24:39 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-01-22 18:24:38 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-01-22 18:24:38 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-01-22 18:24:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-01-22 18:24:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-01-22 18:24:37 ----A---- C:\Windows\system32\xinput1_3.dll
2013-01-22 18:24:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-01-22 18:24:36 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-01-22 18:24:35 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-01-22 18:24:35 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-01-22 18:24:34 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-01-22 18:24:34 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-01-22 18:24:33 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-01-22 18:24:33 ----A---- C:\Windows\system32\d3dx10.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-01-22 18:24:31 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-01-22 18:24:31 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-01-22 18:24:30 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-01-22 18:24:30 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-01-22 18:24:30 ----A---- C:\Windows\system32\xinput1_2.dll
2013-01-22 18:24:30 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-01-22 18:24:29 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-01-22 18:24:29 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-01-22 18:24:28 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-01-22 18:24:28 ----A---- C:\Windows\system32\xinput1_1.dll
2013-01-22 18:24:27 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-01-22 18:24:27 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-01-22 18:24:21 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-01-22 18:24:21 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-01-22 18:24:20 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-01-22 18:24:20 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-01-22 18:24:19 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-01-22 18:24:19 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-01-22 18:24:18 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-01-22 18:24:18 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-01-22 18:24:17 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-01-22 18:24:17 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-01-22 18:24:16 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-01-22 18:24:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-01-22 18:24:16 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-01-22 18:24:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-01-22 18:24:15 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-01-22 18:24:15 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-01-22 18:03:25 ----D---- C:\Program Files (x86)\Atari
2013-01-19 10:05:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-01-09 17:17:42 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-09 17:17:41 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-01-09 17:17:41 ----A---- C:\Windows\system32\kernel32.dll
2013-01-09 17:17:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64win.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64cpu.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\wow64.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\winsrv.dll
2013-01-09 17:17:40 ----A---- C:\Windows\system32\conhost.exe
2013-01-09 17:17:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-09 17:17:39 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-01-09 17:17:39 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-01-09 17:17:39 ----A---- C:\Windows\system32\ntvdm64.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-09 17:17:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 17:17:37 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 17:17:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 17:17:36 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-01-09 17:17:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 17:17:35 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 17:17:35 ----A---- C:\Windows\SYSWOW64\user.exe
2013-01-09 17:17:35 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-01-09 17:17:25 ----A---- C:\Windows\system32\Wpc.dll
2013-01-09 17:17:24 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-01-09 17:17:24 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-01-09 17:17:24 ----A---- C:\Windows\system32\gameux.dll
2013-01-09 17:15:49 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 17:15:48 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-01-09 17:15:48 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 17:15:38 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 17:15:37 ----A---- C:\Windows\system32\msxml3.dll
2013-01-09 17:15:36 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-01-09 17:15:36 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-01-09 17:15:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-01-09 17:15:35 ----A---- C:\Windows\system32\usp10.dll
2013-01-09 17:15:35 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 17:15:34 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-01-09 17:08:16 ----A---- C:\Windows\system32\taskhost.exe
2013-01-08 20:50:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2013-01-03 17:38:20 ----D---- C:\Program Files (x86)\GeoGebra

======List of files/folders modified in the last 1 month======

2013-01-30 10:57:27 ----D---- C:\Windows
2013-01-30 10:55:13 ----D---- C:\Windows\Temp
2013-01-30 10:04:19 ----D---- C:\Windows\system32\drivers
2013-01-30 01:05:52 ----D---- C:\Windows\System32
2013-01-30 01:05:52 ----D---- C:\Windows\inf
2013-01-30 01:05:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-30 01:01:26 ----D---- C:\ProgramData\NVIDIA
2013-01-29 23:55:33 ----D---- C:\Windows\system32\config
2013-01-29 23:35:20 ----RD---- C:\Program Files
2013-01-29 22:53:11 ----D---- C:\Windows\rescache
2013-01-29 22:49:09 ----D---- C:\Windows\Prefetch
2013-01-29 18:55:49 ----D---- C:\Windows\system32\Tasks
2013-01-29 18:55:48 ----D---- C:\Windows\Tasks
2013-01-29 18:55:32 ----SHD---- C:\Windows\Installer
2013-01-29 18:43:44 ----RD---- C:\Program Files (x86)
2013-01-29 18:01:41 ----D---- C:\Windows\Panther
2013-01-29 18:01:41 ----D---- C:\Windows\Logs
2013-01-29 18:01:41 ----D---- C:\Windows\debug
2013-01-29 17:24:17 ----SHD---- C:\Users\uzivatel\AppData\Roaming\A199FD
2013-01-29 17:24:13 ----D---- C:\Windows\system32\wdi
2013-01-29 17:19:37 ----D---- C:\Program Files (x86)\ASUS
2013-01-29 17:19:29 ----SHD---- C:\System Volume Information
2013-01-29 17:19:17 ----HD---- C:\ProgramData
2013-01-29 17:17:35 ----D---- C:\Program Files (x86)\SweetIM
2013-01-29 17:03:48 ----D---- C:\Windows\system32\drivers\etc
2013-01-28 08:28:57 ----D---- C:\Users\uzivatel\AppData\Roaming\NVIDIA
2013-01-26 16:40:30 ----D---- C:\Windows\winsxs
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\wbem
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-01-26 16:39:14 ----D---- C:\Windows\SysWOW64
2013-01-26 16:39:14 ----D---- C:\Windows\system32\wbem
2013-01-26 16:39:14 ----D---- C:\Windows\system32\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\system32\drivers\en-US
2013-01-26 16:39:14 ----D---- C:\Windows\system32\cs-CZ
2013-01-26 16:39:14 ----D---- C:\Windows\PolicyDefinitions
2013-01-26 16:39:13 ----D---- C:\Windows\system32\DriverStore
2013-01-26 16:07:02 ----D---- C:\Program Files (x86)\Common Files
2013-01-26 16:06:48 ----D---- C:\Windows\system32\catroot2
2013-01-26 14:23:12 ----D---- C:\Windows\Resources
2013-01-26 14:16:44 ----D---- C:\Windows\system32\catroot
2013-01-26 11:17:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-26 10:15:23 ----RSD---- C:\Windows\assembly
2013-01-22 18:24:23 ----D---- C:\Windows\Microsoft.NET
2013-01-20 15:47:48 ----D---- C:\Windows\system32\NDF
2013-01-20 08:36:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-01-10 07:20:59 ----D---- C:\Windows\AppPatch
2013-01-09 23:50:08 ----D---- C:\ProgramData\Microsoft Help
2013-01-09 23:44:20 ----A---- C:\Windows\system32\MRT.exe
2013-01-08 20:50:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-01-05 23:06:48 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2013-01-01 19:40:49 ----D---- C:\Program Files\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-01-26 564824]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2009-06-25 67584]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2009-06-25 55296]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2009-06-25 57856]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-10-16 1542656]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-10-16 98344]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-10-16 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-10-16 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-10-16 21160]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-10-16 2007968]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2012-10-16 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2012-10-16 15928]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-10-16 236544]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2012-10-16 1806400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-01 864032]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IB Updater;IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [2012-11-26 188760]
R2 IBUpdaterService;IBUpdaterService; C:\Windows\system32\dmwu.exe [2012-10-02 1261936]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-10-19 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-19 115608]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-16 1255736]

-----------------EOF-----------------
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#6 Příspěvek od JaRon »

najprv to vycisti s ADWCleanerom - volba delete
+
tie radky v hosts tam mas umyselne ?
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#7 Příspěvek od Ivošisko »

A jsme tam, kde jsme byli - CPU 100%, vše je cca 10x pomalejší, v dolní liště se mi občas objeví panel/záložka (s ikonou štítu) "Uživatel juchec.exe"

Řádky Hosts záměrně nemám - co s nimi udělat (a kde je najdu?)
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#8 Příspěvek od JaRon »

tak postupne :)
v adresari C:\WINDOWS\system32\drivers\etc otvoris v notepade subor hosts
vsetko ZMAZES okrem riadku:
127.0.0.1 localhost
+ restart - ked bude hotovo napis
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#9 Příspěvek od Ivošisko »

Vše by bylo fajn, ale systém mi nedovolí opravený hosts uložit - ani normálně a ani když jsem původní přejmenoval (nemám oprávnění měnit obsah složky - zvláštní, že mi dovolil (sice s protesty) přejmenovat původní hosts). Snažil jsem se přihlásit jako správce, ale s Win7 to moc neumím :?:
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#10 Příspěvek od JaRon »

hej na cosi take si spominam tak matne :)
1. skus povodny premenovat na hosts.old a novy uloz ako hosts.txt
2. restart a novy premenuj na hosts
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#11 Příspěvek od Ivošisko »

Tak jsem to právě dělal a neměl jsem oprávnění obsah složky měnit
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#12 Příspěvek od JaRon »

nechaj povodny hosts premenovany a pokracujeme - rychly scan s MBAM
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#13 Příspěvek od Ivošisko »

Scan pomocí MBAM proběhl,našlo to několik trojanů a dalších potvůrek, samo to zafajfklo ty nebezpečné, takže jsemsmazal jen ty,které MBAM označil.....

NB se opět zklidnil,ale stále obtěžuje okýnko,které jakoby provádělo nějaký scan - nadpis okýnka je "PC Performer Test" a pod ním je uvedeno "Full Scan in Progress" - nelíbí se mi....

Dále pak je zde snaha o otevření jakéhosi okna, které mám strach otevřít. Název to má "Uživatel jucheck.exe žádá o oprávnění" - také se mi nelíbí....

A pak mám ještě jeden dotaz: při každém startu (ale to je od doby pořízení tohoto NB (dcera je druhý majitel) a s dnešním problémem to nzřejmě nesouvisí) se nás systém ptá, zda chceme dovolit aplikaci "PrivitizeVPN Client" od vydavatele "OOO "Industry"" provést změny. Nevíme o co se jedná, tak dáváme "Ne" - co s tím udělat?


Zde je log z MBAM:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.30.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
uzivatel :: NB-KAT [administrátor]

Ochrana: Povolena

30.1.2013 17:50:24
MBAM-log-2013-01-30 (18-19-48).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 347929
Uplynulý čas: 26 minut, 52 sekund

Nalezené procesy v paměti: 1
C:\Users\uzivatel\AppData\Local\Temp\whdrhuexo.exe (PUP.BitMiner) -> 2448 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|pdoubrhgfjkxeiqndts (Backdoor.Bot) -> Data: C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Windows Update Server (Backdoor.IRCBot) -> Data: C:\Users\uzivatel\31d89599-5930.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 21
C:\Users\uzivatel\AppData\Local\Temp\whdrhuexo.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Roaming\pdoubrhgfjkxeiqndts.exe (Backdoor.Bot) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\1212434407.exe (Trojan.Agent.ZB) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\2056224207.exe (Trojan.Agent.ZB) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\6577092801.exe (Trojan.Agent.ZB) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\dnsbwpxpl.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\epsjadfoc.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\eywvoiijk.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\ikjnpuwms.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\jgycnoshg.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\lownwdpuv.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\mcjbkoclw.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\mueiljqpb.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\niwmpmkwm.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\tyqppbbdf.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Local\Temp\vbxhveojm.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe (Backdoor.Bot) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\AppData\Roaming\nMNtffsdf5ev.exe (Backdoor.Bot) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\Documents\FLVPlayer_v3.exe (PUP.Adware.Installcore) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\Documents\Škola\photoshop-CS4-keygen.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Users\uzivatel\31d89599-5930.exe (Backdoor.IRCBot) -> Nebyla provedena žádná instrukce.

(konec)
Dík, Ivo.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Veeelmi, veeelmi pomalý NB

#14 Příspěvek od JaRon »

- dufam, ze vsetko najdene v MBAM si nechal zmazat
- neboj vsetko postupne pozrieme :)
- http://forum.viry.cz/viewtopic.php?f=24&t=120452 daj prohledat - log vloz - rano skontrolujem
+ na hosts pouzi navod http://support.microsoft.com/kb/972034/sk
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Avatar uživatele
Ivošisko
Návštěvník
Návštěvník
Příspěvky: 424
Registrován: 04 Říj 2006 11:26
Místo/Bydliště: Ostrava/Jeseníky
Kontaktovat uživatele:
Kontaktovat uživatele Ivošisko

Re: Veeelmi, veeelmi pomalý NB

#15 Příspěvek od Ivošisko »

Problem-report: s RK jsem byl neúspěšný - stáhl jsem jej, spustil a koukal, jak to fachá.....Prescan proběhl a pak začal RK hledat aktualizace a zhruba po 75ti procentech vytuhl celý NB a to tak, že jsem musel vyndat baterku. Zkusil jsem to ještě jednou a totéž. Tak jsem ho přestal pro dnešek trápit....

Čili nynější stav je stejný, jak jsem psal ve 20:03....

Zatím tedy děkuji a budu se těšit na zítra....
Dík, Ivo.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“