TrojanDownloader:Win32/Adload.DA

Zpráva

adelos · #1 Příspěvek od **adelos** » 02 dub 2013 20:17

Dobrý den, potřebovala bych poradit s odvirováním. Počítač hlásí (taková ta bílá vlaječka vpravo dole

), že je přítomný virus s názvem TrojanDownloader:Win32/Adload.DA. Antivir (Avast) nic nezachytil, tak nevím, odkud se tu vzal. Když jsem provedla úplný test systému, Avast nic nenašel. Pak jsem zkoušela analýzu pomocí programu Microsoft safety scanner, na který mě odkázal windows po vyhledání řešení. Taky nic. Kamarád mi doporučil SpyHunter, ten sice našel hodně infekcí, ale neodstraní je, pokud si nekoupím plnou verzi (což se mi nechce

). Tak jsem zkusila Spybot, ten nějaký malware našel a opravil, ale soubor opencp01.exe, o kterém se tady píše http://www.anti-spyware-101.com/cz/odst ... 2adload-da jsem nikde neviděla. Není mi tedy jasné, jestli je virus pryč nebo ne... mám radši přeinstalovat celý systém?
Díky za odpověď

#2 Příspěvek od **Rudy** » 02 dub 2013 20:21

Zdravím!
Proč dáváte vyloženě virový problé do hardwarové sekce? Dejte log RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 . Přesouvám vlákno do správné sekce.

adelos · #3 Příspěvek od **adelos** » 02 dub 2013 21:12

po vytvoření logu se v tom souboru objevilo jen tohle:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Adelajda at 2013-04-02 21:50:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 24 GB (5%) free of 432 GB
Total RAM: 3959 MB (39% free)

druhý log se neobjevil vůbec. Nevím, jestli něco nedělám špatně...

#4 Příspěvek od **Rudy** » 02 dub 2013 21:24

Zkuste to v nouz. režimu.

adelos · #5 Příspěvek od **adelos** » 02 dub 2013 21:32

hotovo

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 2476880
\??\C:\windows\system32\conhost.exe "18376300057914451476105564313231033651703181615-1658966768-602266374-1488559216
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2328
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\USB Camera2\VM332_STI.EXE"
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe"
"C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
ArcCon.ac 66202 0
"C:\Program Files (x86)\Winamp\winampa.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{EF02159B-3BBA-4A62-9791-07DAEBB3836D}
{80B20C21-7ACB-4A40-BC1C-4A940A49BFF4}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"taskhost.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
taskeng.exe {166C44C8-25E9-4E21-8EC6-3C87F4E46145}
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" /autoupdate /silent /autoclose
"C:\Program Files (x86)\Vertex Wireless\VW100 Connection Manager\Connection Manager.exe"
"C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe" --tray
C:\windows\system32\wbem\wmiprvse.exe
"C:\Users\Adelajda\Downloads\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Adelajda\AppData\Roaming\Mozilla\Firefox\Profiles\1zaplyfz.default

prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/#utm_source=icq&u ... um=centrum"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.3.6&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
Scriptff.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
npwachk.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Adelajda\AppData\Roaming\Mozilla\Firefox\Profiles\1zaplyfz.default\extensions\
{7473b6bd-4691-4744-a82b-7854eb3d70b6}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Users\Adelajda\AppData\Roaming\Mozilla\Firefox\Profiles\1zaplyfz.default\searchplugins\
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13 3214392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-06 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-06 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2011-08-17 1055808]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2010-05-07 16416360]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2010-03-22 521272]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-06-24 2598280]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2009-12-19 776608]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2010-04-12 4462496]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2010-03-18 7056800]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-03 2114376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
""= []
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2013-02-18 774168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-03 284696]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [2010-01-19 536576]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe []
"UCam_Menu"=C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2008-12-04 218408]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"Nikon Transfer Monitor"=C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2009-09-15 479232]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2011-12-09 74752]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2012-11-13 3825176]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

C:\Users\Adelajda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-02 21:50:39 ----D---- C:\Program Files\trend micro
2013-04-02 21:50:38 ----D---- C:\rsit
2013-04-02 19:38:18 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-04-02 19:38:08 ----A---- C:\windows\system32\sdnclean64.exe
2013-04-02 19:38:01 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-04-02 19:06:00 ----D---- C:\sh4ldr
2013-04-02 19:06:00 ----D---- C:\Program Files (x86)\Enigma Software Group
2013-04-02 19:05:39 ----D---- C:\windows\46B04D534E344388B6EE80FAB66AEF9B.TMP
2013-04-02 18:42:24 ----D---- C:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2013-04-02 18:41:15 ----SHD---- C:\Config.Msi
2013-04-02 17:27:20 ----A---- C:\autoexec.bat
2013-04-02 17:27:01 ----D---- C:\Program Files\Enigma Software Group
2013-04-02 17:26:25 ----D---- C:\windows\22B3AE667A374118BADB3680C15CA366.TMP
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\PdfDll32.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\Lvkrn14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LtTtf14n.Dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LTSGM14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltserial.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltkrn14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltimg14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltfil14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LTEml14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltefx14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltdoc14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LTDIS14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LTDic14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LTCLR14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltann14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LtAct14n.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\ltact.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LPWSE05n.exe
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LPUNI05N.dll
2013-03-26 17:37:49 ----A---- C:\windows\SYSWOW64\LPUMD05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPUIT05N.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPUIR05r.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPUID05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpTxt05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpRTF05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPRPC05u.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPRNT05N.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPRES05N.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPPMN05u.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpPdf05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPKRN05N.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPINS05N.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpHTM05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPEML05N.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpEmf05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\Lpdrv05n.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LpDoc05n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPDLG05N.DLL
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LPCPN05N.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\Lfwmf14n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\lfpdf14n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\lfjb214n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\lffax14n.dll
2013-03-26 17:37:48 ----A---- C:\windows\SYSWOW64\LFCMP14n.dll
2013-03-26 17:36:30 ----D---- C:\Program Files (x86)\OriginLab
2013-03-26 17:35:35 ----D---- C:\Users\Adelajda\AppData\Roaming\InstallShield
2013-03-26 10:26:55 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-03-23 10:03:59 ----RD---- C:\Program Files (x86)\Skype
2013-03-22 16:03:45 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2013-03-14 11:07:16 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-03-14 11:07:16 ----A---- C:\windows\system32\mshtmled.dll
2013-03-14 11:07:15 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-03-14 11:07:15 ----A---- C:\windows\SYSWOW64\url.dll
2013-03-14 11:07:15 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-03-14 11:07:15 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-03-14 11:07:15 ----A---- C:\windows\system32\ieUnatt.exe
2013-03-14 11:07:15 ----A---- C:\windows\system32\ieui.dll
2013-03-14 11:07:14 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-03-14 11:07:14 ----A---- C:\windows\system32\urlmon.dll
2013-03-14 11:07:14 ----A---- C:\windows\system32\url.dll
2013-03-14 11:07:13 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-03-14 11:07:13 ----A---- C:\windows\system32\msfeeds.dll
2013-03-14 11:07:13 ----A---- C:\windows\system32\jscript9.dll
2013-03-14 11:07:12 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-03-14 11:07:12 ----A---- C:\windows\system32\wininet.dll
2013-03-14 11:07:12 ----A---- C:\windows\system32\jsproxy.dll
2013-03-14 11:07:11 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-03-14 11:07:11 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-03-14 11:07:11 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-03-14 11:07:11 ----A---- C:\windows\system32\vbscript.dll
2013-03-14 11:07:11 ----A---- C:\windows\system32\jscript.dll
2013-03-14 11:07:11 ----A---- C:\windows\system32\iertutil.dll
2013-03-14 11:07:10 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-03-14 11:07:09 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-03-14 11:07:07 ----A---- C:\windows\system32\mshtml.dll
2013-03-14 11:07:06 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-03-14 11:07:06 ----A---- C:\windows\system32\ieframe.dll
2013-03-06 14:50:23 ----A---- C:\windows\SYSWOW64\javaws.exe
2013-03-06 14:50:17 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-03-06 14:50:17 ----A---- C:\windows\SYSWOW64\javaw.exe
2013-03-06 14:50:17 ----A---- C:\windows\SYSWOW64\java.exe
2013-03-06 14:50:10 ----D---- C:\Program Files (x86)\Java
2013-03-03 21:07:09 ----D---- C:\Users\Adelajda\AppData\Roaming\Zoner
2013-03-03 21:07:03 ----D---- C:\ProgramData\Zoner
2013-03-03 21:06:38 ----D---- C:\Program Files\Zoner
2013-03-03 16:55:24 ----A---- C:\windows\system32\drivers\aswVmm.sys
2013-03-03 16:55:24 ----A---- C:\windows\system32\drivers\aswRvrt.sys

======List of files/folders modified in the last 1 month======

2013-04-02 22:27:15 ----D---- C:\windows\Temp
2013-04-02 21:50:39 ----RD---- C:\Program Files
2013-04-02 21:29:53 ----D---- C:\windows\System32
2013-04-02 21:29:53 ----D---- C:\windows\inf
2013-04-02 21:29:53 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-04-02 20:15:17 ----D---- C:\windows\Prefetch
2013-04-02 20:15:09 ----D---- C:\Windows
2013-04-02 19:38:19 ----D---- C:\windows\system32\Tasks
2013-04-02 19:38:18 ----HD---- C:\ProgramData
2013-04-02 19:38:15 ----SD---- C:\ProgramData\Microsoft
2013-04-02 19:38:01 ----RD---- C:\Program Files (x86)
2013-04-02 19:06:07 ----SHD---- C:\windows\Installer
2013-04-02 19:06:02 ----D---- C:\windows\SysWOW64
2013-04-02 19:05:47 ----SHD---- C:\System Volume Information
2013-04-02 18:40:44 ----D---- C:\windows\system32\drivers
2013-04-02 17:54:43 ----D---- C:\Users\Adelajda\AppData\Roaming\Skype
2013-04-02 17:26:24 ----D---- C:\Program Files (x86)\Common Files
2013-04-02 16:49:43 ----D---- C:\windows\system32\config
2013-04-02 16:39:23 ----A---- C:\windows\SYSWOW64\log.txt
2013-04-02 16:38:09 ----D---- C:\Users\Adelajda\AppData\Roaming\SoftGrid Client
2013-04-02 14:52:50 ----D---- C:\windows\debug
2013-04-01 11:37:30 ----D---- C:\windows\system32\catroot2
2013-03-26 23:42:34 ----D---- C:\windows\winsxs
2013-03-26 23:41:07 ----D---- C:\windows\system32\DriverStore
2013-03-26 17:37:13 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-23 10:04:04 ----D---- C:\ProgramData\Skype
2013-03-22 22:53:44 ----D---- C:\windows\system32\catroot
2013-03-22 16:04:44 ----D---- C:\ProgramData\Nokia
2013-03-22 16:04:44 ----D---- C:\Program Files (x86)\Nokia
2013-03-22 16:03:50 ----DC---- C:\windows\system32\DRVSTORE
2013-03-21 22:57:11 ----D---- C:\Users\Adelajda\AppData\Roaming\dvdcss
2013-03-20 01:16:55 ----D---- C:\Users\Adelajda\AppData\Roaming\uTorrent
2013-03-17 10:01:36 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-15 17:39:57 ----D---- C:\windows\rescache
2013-03-14 11:14:03 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-14 11:14:03 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-14 11:13:20 ----D---- C:\windows\SYSWOW64\migration
2013-03-14 11:13:20 ----D---- C:\windows\system32\migration
2013-03-14 11:13:20 ----D---- C:\windows\AppPatch
2013-03-14 11:13:20 ----D---- C:\Program Files\Internet Explorer
2013-03-14 11:13:20 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-14 11:08:10 ----A---- C:\windows\system32\MRT.exe
2013-03-12 21:27:39 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-03-07 23:32:56 ----D---- C:\Program Files (x86)\Last.fm
2013-03-07 01:32:22 ----A---- C:\windows\system32\aswBoot.exe
2013-03-06 14:50:11 ----A---- C:\windows\SYSWOW64\npdeployJava1.dll
2013-03-06 14:50:11 ----A---- C:\windows\SYSWOW64\deployJava1.dll
2013-03-05 10:34:41 ----D---- C:\Program Files (x86)\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\windows\system32\drivers\aswRvrt.sys [2013-03-07 65336]
R0 aswVmm;aswVmm; C:\windows\system32\drivers\aswVmm.sys [2013-03-07 178624]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-03-03 540696]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2010-01-15 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [2013-03-07 70992]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2013-03-07 1025808]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2013-03-07 377920]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2013-03-07 68920]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2013-03-07 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2013-03-07 80816]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-06-18 4170304]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2010-01-18 717368]
R3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-06-24 167816]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2010-01-28 86120]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-03-22 347680]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 vm332avs;Lenovo Camera2; C:\windows\System32\Drivers\vm332avs.sys [2010-08-06 229456]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\windows\system32\DRIVERS\vwmfbus.sys [2009-11-11 127488]
R3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\windows\system32\DRIVERS\vwmfdiag.sys [2009-11-11 128512]
R3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\windows\system32\DRIVERS\vwmfmdfl.sys [2009-11-11 18944]
R3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\windows\system32\DRIVERS\vwmfmdm.sys [2009-11-11 161280]
R3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\windows\system32\DRIVERS\vwmfserd.sys [2009-11-11 128512]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11280]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-16 79376]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\windows\system32\drivers\btusbflt.sys [2009-07-01 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-12 242720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 151656]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2009-08-11 864032]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2011-08-17 247872]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2010-05-07 392296]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-30 136176]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12 253656]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-30 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IGRS;IGRS; C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-10 129976]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-10-01 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

adelos · #6 Příspěvek od **adelos** » 03 dub 2013 10:12

Dobrý den, v předchozím příspěvku je log.
P.S. Centrum akcí už nic nehlásí, zpráva o tom, že mám v počítači vir byla archivována...

#7 Příspěvek od **Rudy** » 03 dub 2013 16:56

OK. PC jinak funguje normálně?

adelos · #8 Příspěvek od **adelos** » 03 dub 2013 17:24

Ano, úplně normálně. nic neobvyklého se neděje.

#9 Příspěvek od **Rudy** » 03 dub 2013 18:01

Pak je vše v pořádku.

adelos · #10 Příspěvek od **adelos** » 03 dub 2013 21:12

Skvěle!

Děkuji za pomoc

#11 Příspěvek od **Rudy** » 03 dub 2013 21:52

Nemáte zač!

VIRY.CZ

TrojanDownloader:Win32/Adload.DA

TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA

Re: TrojanDownloader:Win32/Adload.DA