Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zpomalení PC - mint.bitminter.com

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Zpomalení PC - mint.bitminter.com

#1 Příspěvek od Gahe »

Zdravím. Vidím, že nejsem jediný, komu se něco takového děje. Ten proces, co mi způsobuje zahlcení počítače jsem našel a ukončil, problém je, že se objevuje pokaždé, když zapnu PC (msihwbt.exe). Když spustím počítač hodí mi to hlášku - Windows script host.
Stáhl jsem si ProcessExplorer a když na ten proces ukážu objeví se mi tato "adresa" - tcp:\\mint.bitminter.com:3333
Zde je RSIT log (oskenoval jsem však PC až poté, co jsem onen proces ukončil)
Logfile of random's system information tool 1.09 (written by random/random)
Run by ae at 2013-08-01 20:01:59
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 190 GB (40%) free of 477 GB
Total RAM: 2047 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:02:07, on 1.8.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\totalcmd\TOTALCMD.EXE
C:\Instalace\RSIT.exe
C:\Program Files\trend micro\ae.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=117023 ... 4f4e61c672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NtVdmSrv] C:\WINDOWS\inf\ntvdm.vbe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://c:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - Winlogon Notify: RailNotification - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware Horizon View USB (vmware-view-usbd) - VMware, Inc. - C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe
O23 - Service: VMware View Client (wsnm) - VMware, Inc. - C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe

--
End of file - 7427 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-HOME-603C9D2035-ae.job
C:\WINDOWS\tasks\EPUpdater.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003UA.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.startup.homepage" - "https://www.google.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml

C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\extensions\
{5384767E-00D9-40E9-B72F-9CC39D655D6F}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\searchplugins\
askcom.xml
babylon.xml
BrowserProtect.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-06-06 64928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-10 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"NtVdmSrv"=C:\WINDOWS\inf\ntvdm.vbe [2013-06-20 1219]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2013-06-21 15677728]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-06-21 2586912]
"AVG_UI"=C:\Program Files\AVG\AVG2013\avgui.exe [2013-07-01 4411440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-10-13 1088424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-09 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\ae\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Documents and Settings\ae\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWPersistentQueuedReporting]
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [2011-07-27 434080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe [2012-11-25 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
C:\WINDOWS\TBPanel.exe [2008-01-29 2177576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\ae\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-06-28 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2]
C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [2010-05-25 619008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-10-13 1088424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2013-06-21 15677728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit -login []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2013-06-03 19603048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yontoo Desktop]
C:\Documents and Settings\ae\Data aplikací\Yontoo\YontooDesktop.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ae^Nabídka Start^Programy^Po spuštění^RollerCoaster Tycoon 3 Registration.lnk]
C:\Documents and Settings\ae\Local Settings\Temp\{B472433F-1AA3-4602-B80D-D3F6485B04D0}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\Calibration\Adobe Gamma Loader.exe [2002-09-25 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\Windows Desktop Search\WindowsSearch.exe [2011-01-25 123904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RailNotification]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2011-01-25 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2011-01-25 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2011-01-25 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Robot Entertainment\Orcs Must Die!\Build\release\OrcsMustDie.exe"="C:\Program Files\Robot Entertainment\Orcs Must Die!\Build\release\OrcsMustDie.exe:*:Enabled:Orcs Must Die!"
"C:\Program Files\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe"="C:\Program Files\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe:*:Enabled:EE-AOC"
"C:\Program Files\Sierra\Empire Earth\Empire Earth.exe"="C:\Program Files\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe"="C:\Program Files\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe:*:Enabled:Call of Juarez®: The Cartel"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\UO\client.exe"="C:\Program Files\UO\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\Torrent\uTorrent.exe"="C:\Program Files\Torrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe"="C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe:*:Enabled:VMware Remote MKS"
"C:\Program Files\VMware\VMware View\Client\bin\wswc.exe"="C:\Program Files\VMware\VMware View\Client\bin\wswc.exe:*:Enabled:VMware View Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\KelevarClient.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\KelevarClient.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\client.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\6040.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\6040.exe:*:Enabled:Ultima Online Client"
"C:\Instalace\UOML\UOML\client.exe"="C:\Instalace\UOML\UOML\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\AVG\AVG2013\avgnsx.exe"="C:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG2013\avgdiagex.exe"="C:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostika 2013"
"C:\Program Files\AVG\AVG2013\avgmfapx.exe"="C:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalátor AVG"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe"="C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe:*:Enabled:VMware Remote MKS"
"C:\Program Files\VMware\VMware View\Client\bin\wswc.exe"="C:\Program Files\VMware\VMware View\Client\bin\wswc.exe:*:Enabled:VMware View Client"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-08-01 20:01:59 ----D---- C:\rsit
2013-08-01 20:01:59 ----D---- C:\Program Files\trend micro
2013-08-01 19:59:15 ----A---- C:\AdwCleaner[R1].txt
2013-08-01 18:42:18 ----D---- C:\Documents and Settings\ae\Data aplikací\AVG2013
2013-08-01 18:41:18 ----D---- C:\Documents and Settings\ae\Data aplikací\TuneUp Software
2013-08-01 18:40:39 ----HD---- C:\$AVG
2013-08-01 18:40:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG2013
2013-08-01 18:39:56 ----D---- C:\Program Files\AVG
2013-08-01 18:34:57 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2013-08-01 18:34:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2013-08-01 14:42:04 ----HD---- C:\WINDOWS\PIF
2013-08-01 12:37:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\nView_Profiles
2013-08-01 12:21:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-08-01 12:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904_WM11$
2013-08-01 12:18:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-08-01 12:17:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-08-01 12:17:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-08-01 12:17:02 ----D---- C:\WINDOWS\system32\URTTemp
2013-08-01 12:16:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-08-01 12:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-08-01 12:13:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-08-01 12:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2013-08-01 12:13:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-08-01 12:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2850851$
2013-08-01 12:13:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-08-01 12:13:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-08-01 12:13:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-08-01 12:08:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-08-01 12:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-08-01 11:59:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-08-01 11:59:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-08-01 11:59:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-08-01 11:59:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-08-01 11:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-08-01 11:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-08-01 11:56:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-08-01 11:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2845187$
2013-08-01 11:54:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-08-01 11:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-08-01 11:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-08-01 11:51:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-08-01 11:51:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-08-01 11:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-08-01 11:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-08-01 11:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2839229$
2013-08-01 11:46:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2813347-v2$
2013-08-01 11:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-08-01 11:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-08-01 11:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-08-01 11:41:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-08-01 11:41:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-08-01 11:41:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-08-01 11:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-08-01 11:40:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-08-01 11:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-08-01 11:40:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-08-01 11:33:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-08-01 11:33:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-08-01 11:33:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-08-01 11:33:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-08-01 11:32:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-08-01 11:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-08-01 11:31:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-08-01 11:23:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-08-01 11:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-08-01 11:23:03 ----D---- C:\WINDOWS\ie8updates
2013-08-01 11:18:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-08-01 11:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-08-01 11:18:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-08-01 11:17:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-08-01 11:17:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-08-01 11:17:28 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-01 10:44:25 ----D---- C:\WINDOWS\WBEM
2013-08-01 10:44:25 ----D---- C:\WINDOWS\system32\cs
2013-08-01 10:44:25 ----D---- C:\WINDOWS\Network Diagnostic
2013-08-01 10:44:25 ----D---- C:\WINDOWS\L2Schemas
2013-08-01 09:53:09 ----D---- C:\Documents and Settings\ae\Data aplikací\NVIDIA
2013-08-01 09:47:41 ----D---- C:\Program Files\AGEIA Technologies
2013-08-01 09:47:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2013-08-01 09:47:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2013-08-01 09:46:31 ----A---- C:\WINDOWS\system32\OpenCL.dll
2013-08-01 09:45:45 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvdispgenco3232049.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvdispco3232049.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-08-01 09:45:43 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-08-01 09:40:49 ----D---- C:\Documents and Settings\ae\Data aplikací\Windows Desktop Search
2013-08-01 09:40:01 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-08-01 09:34:00 ----D---- C:\WINDOWS\Prefetch
2013-08-01 09:24:57 ----D---- C:\Program Files\Windows Media Connect 2
2013-08-01 09:23:54 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-08-01 09:23:53 ----D---- C:\WINDOWS\system32\bits
2013-08-01 09:20:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2013-08-01 09:10:33 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2013-08-01 09:08:56 ----A---- C:\WINDOWS\system32\msvcr80.dll
2013-08-01 09:08:56 ----A---- C:\WINDOWS\system32\msvcp80.dll
2013-08-01 09:08:55 ----A---- C:\WINDOWS\system32\msvcm80.dll
2013-08-01 09:07:38 ----A---- C:\WINDOWS\system32\COM9E0.tmp
2013-08-01 09:07:37 ----A---- C:\WINDOWS\system32\COM9DE.tmp
2013-08-01 09:07:36 ----A---- C:\WINDOWS\system32\COM9DC.tmp
2013-08-01 09:07:22 ----D---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2013-08-01 09:07:21 ----D---- C:\WINDOWS\system32\DRM
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\SecProc_ssp.dll
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate_ssp.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate_isv.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate.exe
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\SecProc_isv.dll
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\SecProc.dll
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\msdrm.dll
2013-08-01 09:07:18 ----A---- C:\WINDOWS\system32\WgaTray.exe
2013-08-01 09:07:18 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2013-08-01 09:07:17 ----A---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2013-08-01 09:07:17 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2013-08-01 09:07:16 ----A---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncRes.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncPH.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncNE.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncDMS.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncCplExt.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\oephRes.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\oeph.dll
2013-08-01 09:07:08 ----D---- C:\Program Files\Windows Desktop Search
2013-08-01 09:07:05 ----A---- C:\WINDOWS\system32\propsys.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\xmlfilter.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\srchadmin.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\rtffilt.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\msshsq.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\msshooks.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\idxcntrs.ini
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\gthrctr.ini
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\tquery.dll
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\msscb.dll
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\gsrvctr.ini
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\propdefs.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\msstrc.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssrch.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssprxy.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssphtb.dll
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchprotocolhost.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchindexer.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchfilterhost.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\mssph.dll
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\mssitlb.dll
2013-08-01 09:06:59 ----A---- C:\WINDOWS\system32\msscntrs.dll
2013-08-01 09:06:57 ----D---- C:\Program Files\MSXML 4.0
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\muweb.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\mucltui.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\browserchoice.exe
2013-08-01 09:05:44 ----D---- C:\WINDOWS\system32\PreInstall
2013-08-01 09:05:41 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\winrm
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\GroupPolicy
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmplpxy.dll
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmanhttpconfig.exe
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\winrmprov.dll
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wevtfwd.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\WsmRes.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrssrv.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrsmgr.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrshost.exe
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrscmd.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrs.exe
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\winrm.vbs
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\winrm.cmd
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\wksprtps.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\winlogonnotification.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\tspubwmi.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\rdpshell.exe
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\rdpinit.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\wksprt.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\tswbprxy.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\MsRdpWebAccess.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-08-01 08:58:23 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2013-08-01 08:51:35 ----A---- C:\WINDOWS\system32\irclass.dll
2013-08-01 08:51:34 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-07-31 17:28:47 ----D---- C:\Program Files\Rockstar Games
2013-07-31 15:21:18 ----D---- C:\Program Files\Ahead
2013-07-31 15:20:02 ----D---- C:\Program Files\Nero Burning Rom 6.3.1.20
2013-07-31 14:22:37 ----A---- C:\WINDOWS\UPGRADE.TXT
2013-07-31 14:22:34 ----D---- C:\WINDOWS\setup.pss
2013-07-30 21:26:32 ----D---- C:\NVIDIA
2013-07-26 14:24:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
2013-07-26 14:24:39 ----D---- C:\Documents and Settings\ae\Data aplikací\Guitar Pro 6
2013-07-26 14:18:02 ----D---- C:\Program Files\Guitar Pro 6
2013-07-20 01:51:00 ----A---- C:\WINDOWS\system32\drivers\avglogx.sys
2013-07-20 01:50:56 ----A---- C:\WINDOWS\system32\drivers\avgidshx.sys
2013-07-20 01:50:56 ----A---- C:\WINDOWS\system32\drivers\avgidsdriverx.sys
2013-07-20 01:50:50 ----A---- C:\WINDOWS\system32\drivers\avgldx86.sys
2013-07-10 01:32:40 ----A---- C:\WINDOWS\system32\drivers\avgrkx86.sys
2013-07-03 19:50:55 ----D---- C:\Program Files\Mozilla Firefox
2013-07-02 00:31:19 ----D---- C:\Documents and Settings\ae\Data aplikací\Atari
2013-07-02 00:29:41 ----D---- C:\Documents and Settings\ae\Data aplikací\Leadertech
2013-07-02 00:27:11 ----D---- C:\Program Files\Atari

======List of files/folders modified in the last 1 month======

2013-08-01 20:01:59 ----RD---- C:\Program Files
2013-08-01 20:01:34 ----D---- C:\Instalace
2013-08-01 19:46:37 ----D---- C:\WINDOWS
2013-08-01 19:46:33 ----D---- C:\WINDOWS\Temp
2013-08-01 19:46:20 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-01 19:44:16 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-01 18:42:07 ----SHD---- C:\WINDOWS\Installer
2013-08-01 18:41:13 ----HD---- C:\WINDOWS\inf
2013-08-01 18:41:13 ----D---- C:\WINDOWS\system32\drivers
2013-08-01 18:39:46 ----D---- C:\WINDOWS\system32
2013-08-01 17:53:05 ----D---- C:\WINDOWS\pss
2013-08-01 17:52:18 ----SH---- C:\boot.ini
2013-08-01 17:52:18 ----A---- C:\WINDOWS\win.ini
2013-08-01 17:52:18 ----A---- C:\WINDOWS\system.ini
2013-08-01 17:51:34 ----A---- C:\WINDOWS\DFC.INI
2013-08-01 15:30:02 ----D---- C:\WINDOWS\Microsoft.NET
2013-08-01 15:00:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-01 15:00:15 ----RSD---- C:\WINDOWS\assembly
2013-08-01 15:00:09 ----D---- C:\WINDOWS\WinSxS
2013-08-01 14:37:08 ----D---- C:\Documents and Settings\ae\Data aplikací\DAEMON Tools Lite
2013-08-01 14:37:06 ----D---- C:\Documents and Settings\ae\Data aplikací\uTorrent
2013-08-01 14:37:06 ----D---- C:\Documents and Settings\ae\Data aplikací\TS3Client
2013-08-01 14:36:41 ----D---- C:\WINDOWS\Logs
2013-08-01 14:36:41 ----D---- C:\WINDOWS\Debug
2013-08-01 14:35:00 ----D---- C:\Documents and Settings\ae\Data aplikací\.minecraft
2013-08-01 14:31:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2013-08-01 14:27:30 ----D---- C:\Program Files\NVIDIA Corporation
2013-08-01 14:27:29 ----D---- C:\Documents and Settings
2013-08-01 14:05:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2013-08-01 12:36:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-01 11:56:51 ----D---- C:\WINDOWS\system32\CatRoot
2013-08-01 11:50:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-08-01 11:37:41 ----RSD---- C:\WINDOWS\Fonts
2013-08-01 11:37:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-08-01 11:37:25 ----D---- C:\Program Files\Microsoft Works
2013-08-01 11:35:16 ----D---- C:\Program Files\Common Files\System
2013-08-01 11:33:39 ----D---- C:\Program Files\Internet Explorer
2013-08-01 11:23:17 ----D---- C:\WINDOWS\system32\XPSViewer
2013-08-01 10:48:23 ----SD---- C:\WINDOWS\Offline Web Pages
2013-08-01 10:48:22 ----D---- C:\WINDOWS\system32\usmt
2013-08-01 10:48:21 ----D---- C:\WINDOWS\AppPatch
2013-08-01 10:48:19 ----D---- C:\WINDOWS\Media
2013-08-01 10:48:18 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-01 10:47:41 ----D---- C:\WINDOWS\PeerNet
2013-08-01 10:47:41 ----D---- C:\WINDOWS\ime
2013-08-01 10:47:20 ----D---- C:\WINDOWS\system32\npp
2013-08-01 10:47:11 ----D---- C:\WINDOWS\msagent
2013-08-01 10:46:40 ----D---- C:\WINDOWS\ehome
2013-08-01 10:46:04 ----D---- C:\WINDOWS\twain_32
2013-08-01 10:45:50 ----D---- C:\WINDOWS\system32\icsxml
2013-08-01 10:45:16 ----D---- C:\WINDOWS\system32\ias
2013-08-01 10:45:07 ----D---- C:\WINDOWS\system32\1033
2013-08-01 10:45:07 ----D---- C:\WINDOWS\system32\1029
2013-08-01 10:44:25 ----D---- C:\WINDOWS\system32\mui
2013-08-01 10:44:25 ----D---- C:\WINDOWS\Driver Cache
2013-08-01 09:47:38 ----RD---- C:\Program Files\Common Files
2013-08-01 09:47:03 ----D---- C:\WINDOWS\Help
2013-08-01 09:45:59 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-01 09:40:15 ----D---- C:\WINDOWS\Registration
2013-08-01 09:34:24 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-08-01 09:34:22 ----D---- C:\WINDOWS\SoftwareDistribution
2013-08-01 09:34:13 ----D---- C:\WINDOWS\system32\Restore
2013-08-01 09:34:12 ----SHD---- C:\System Volume Information
2013-08-01 09:33:32 ----D---- C:\WINDOWS\system32\config
2013-08-01 09:28:59 ----D---- C:\WINDOWS\security
2013-08-01 09:28:48 ----D---- C:\WINDOWS\system32\cs-CZ
2013-08-01 09:28:01 ----D---- C:\Program Files\Java
2013-08-01 09:26:25 ----A---- C:\WINDOWS\ODBCINST.INI
2013-08-01 09:26:06 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2013-08-01 09:25:39 ----RD---- C:\WINDOWS\Web
2013-08-01 09:25:34 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2013-08-01 09:24:54 ----D---- C:\Program Files\Windows Media Player
2013-08-01 09:24:49 ----D---- C:\WINDOWS\srchasst
2013-08-01 09:24:17 ----D---- C:\Program Files\NetMeeting
2013-08-01 09:24:15 ----D---- C:\Program Files\Common Files\Services
2013-08-01 09:24:11 ----SD---- C:\WINDOWS\Tasks
2013-08-01 09:24:11 ----D---- C:\Program Files\Outlook Express
2013-08-01 09:23:51 ----D---- C:\Program Files\Movie Maker
2013-08-01 09:23:31 ----D---- C:\WINDOWS\system32\oobe
2013-08-01 09:20:28 ----D---- C:\WINDOWS\system32\Setup
2013-08-01 09:12:56 ----D---- C:\WINDOWS\system32\Com
2013-08-01 09:11:53 ----D---- C:\WINDOWS\system32\en-us
2013-08-01 09:07:16 ----D---- C:\WINDOWS\system32\drivers\UMDF
2013-08-01 09:07:07 ----D---- C:\WINDOWS\system32\wbem
2013-08-01 09:05:47 ----D---- C:\Program Files\Microsoft Silverlight
2013-08-01 09:05:17 ----D---- C:\Program Files\Messenger
2013-08-01 09:05:07 ----D---- C:\WINDOWS\Cursors
2013-08-01 09:04:59 ----D---- C:\Program Files\Windows NT
2013-08-01 08:51:34 ----D---- C:\WINDOWS\system
2013-08-01 08:51:20 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-07-31 17:33:40 ----HD---- C:\Program Files\InstallShield Installation Information
2013-07-31 17:28:38 ----D---- C:\WINDOWS\system32\DirectX
2013-07-31 02:29:29 ----D---- C:\Documents and Settings\ae\Data aplikací\vlc
2013-07-30 16:15:22 ----D---- C:\Documents and Settings\ae\Data aplikací\Audacity
2013-07-30 03:44:19 ----D---- C:\Program Files\Google
2013-07-28 20:44:16 ----D---- C:\Documents and Settings\ae\Data aplikací\Skype
2013-07-11 10:17:02 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-07-07 00:10:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-07-07 00:10:30 ----RD---- C:\Program Files\Skype
2013-07-04 19:08:10 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\WINDOWS\system32\DRIVERS\avgidshx.sys [2013-07-20 60216]
R0 Avglogx;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avglogx.sys [2013-07-20 246072]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2013-07-01 96568]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2013-07-10 39224]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2013-07-20 208184]
R1 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2013-03-01 22328]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2013-07-20 171320]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2013-03-21 182072]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-06-28 242240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2013-05-19 271360]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2013-05-19 18048]
R2 rspndr;Odpovídající zařízení zjišťování topologie linkové vrstvy; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2011-01-25 62848]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2003-09-19 496800]
R3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2003-08-28 823456]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2011-01-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-06-21 10973504]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2003-08-28 113840]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 TotRec8;Total Recorder WDM audio filter driver; \??\C:\WINDOWS\system32\drivers\TotRec8.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2011-01-25 32384]
S1 DumpDrv;Crash Dump Driver; C:\WINDOWS\system32\drivers\DumpDrv.sys [2011-01-25 9472]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2011-01-25 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2011-01-25 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-06 34064]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-27 19072]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2009-05-12 122240]
S3 vmusb;VMware USB Client Driver; C:\WINDOWS\System32\Drivers\vmusb.sys [2012-11-20 31280]
S3 vmwvusb;VMware View Generic USB Driver; C:\WINDOWS\System32\Drivers\vmwvusb.sys []
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2011-01-25 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2013-06-21 156960]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [2012-11-20 721048]
R2 vmware-view-usbd;VMware Horizon View USB; C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe [2012-12-03 2436096]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2011-01-25 439808]
R2 wsnm;VMware View Client; C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe [2013-03-05 472656]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-10-03 725400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-05 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-03 162408]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-03 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2011-01-25 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Děkuji mockrát předem.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#2 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\inf\ntvdm.vbe
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003UA.job
C:\WINDOWS\tasks\EPUpdater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003UA.job
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\searchplugins\askcom.xml
C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\searchplugins\babylon.xml
C:\WINDOWS\system32\COM*.tmp

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NtVdmSrv"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Re: Zpomalení PC - mint.bitminter.com

#3 Příspěvek od Gahe »

Omlouvám se za zpoždění - AVG mělo problém s OTM :/

Logfile of random's system information tool 1.09 (written by random/random)
Run by ae at 2013-08-01 21:05:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 190 GB (40%) free of 477 GB
Total RAM: 2047 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:06:05, on 1.8.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe
C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
c:\Instalace\RSIT.exe
C:\Program Files\trend micro\ae.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=117023 ... 4f4e61c672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://c:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - Winlogon Notify: RailNotification - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware Horizon View USB (vmware-view-usbd) - VMware, Inc. - C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe
O23 - Service: VMware View Client (wsnm) - VMware, Inc. - C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe

--
End of file - 7533 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-HOME-603C9D2035-ae.job
C:\WINDOWS\tasks\GlaryInitialize.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.startup.homepage" - "https://www.google.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\extensions\
{5384767E-00D9-40E9-B72F-9CC39D655D6F}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\ae\Data aplikací\Mozilla\Firefox\Profiles\cbmkpnib.default\searchplugins\
BrowserProtect.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-06-06 64928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-10 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2013-06-21 15677728]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-06-21 2586912]
"AVG_UI"=C:\Program Files\AVG\AVG2013\avgui.exe [2013-07-01 4411440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-10-13 1088424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-09 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\ae\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Documents and Settings\ae\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWPersistentQueuedReporting]
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [2011-07-27 434080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe [2012-11-25 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
C:\WINDOWS\TBPanel.exe [2008-01-29 2177576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\ae\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-06-28 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2]
C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [2010-05-25 619008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-10-13 1088424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2013-06-21 15677728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit -login []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2013-06-03 19603048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yontoo Desktop]
C:\Documents and Settings\ae\Data aplikací\Yontoo\YontooDesktop.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ae^Nabídka Start^Programy^Po spuštění^RollerCoaster Tycoon 3 Registration.lnk]
C:\Documents and Settings\ae\Local Settings\Temp\{B472433F-1AA3-4602-B80D-D3F6485B04D0}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\Calibration\Adobe Gamma Loader.exe [2002-09-25 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\Windows Desktop Search\WindowsSearch.exe [2011-01-25 123904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RailNotification]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2011-01-25 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2011-01-25 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2011-01-25 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Robot Entertainment\Orcs Must Die!\Build\release\OrcsMustDie.exe"="C:\Program Files\Robot Entertainment\Orcs Must Die!\Build\release\OrcsMustDie.exe:*:Enabled:Orcs Must Die!"
"C:\Program Files\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe"="C:\Program Files\Sierra\Empire Earth - The Art of Conquest\EE-AOC.exe:*:Enabled:EE-AOC"
"C:\Program Files\Sierra\Empire Earth\Empire Earth.exe"="C:\Program Files\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe"="C:\Program Files\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe:*:Enabled:Call of Juarez®: The Cartel"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\ae\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\UO\client.exe"="C:\Program Files\UO\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\Torrent\uTorrent.exe"="C:\Program Files\Torrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe"="C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe:*:Enabled:VMware Remote MKS"
"C:\Program Files\VMware\VMware View\Client\bin\wswc.exe"="C:\Program Files\VMware\VMware View\Client\bin\wswc.exe:*:Enabled:VMware View Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\KelevarClient.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\KelevarClient.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\client.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\EA GAMES\Ultima Online 2D Client\6040.exe"="C:\Program Files\EA GAMES\Ultima Online 2D Client\6040.exe:*:Enabled:Ultima Online Client"
"C:\Instalace\UOML\UOML\client.exe"="C:\Instalace\UOML\UOML\client.exe:*:Enabled:Ultima Online Client"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\AVG\AVG2013\avgnsx.exe"="C:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG2013\avgdiagex.exe"="C:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostika 2013"
"C:\Program Files\AVG\AVG2013\avgmfapx.exe"="C:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalátor AVG"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe"="C:\Program Files\VMware\VMware View\Client\bin\vmware-remotemks.exe:*:Enabled:VMware Remote MKS"
"C:\Program Files\VMware\VMware View\Client\bin\wswc.exe"="C:\Program Files\VMware\VMware View\Client\bin\wswc.exe:*:Enabled:VMware View Client"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-08-01 20:53:48 ----D---- C:\_OTM
2013-08-01 20:01:59 ----D---- C:\rsit
2013-08-01 20:01:59 ----D---- C:\Program Files\trend micro
2013-08-01 19:59:15 ----A---- C:\AdwCleaner[R1].txt
2013-08-01 18:42:18 ----D---- C:\Documents and Settings\ae\Data aplikací\AVG2013
2013-08-01 18:41:18 ----D---- C:\Documents and Settings\ae\Data aplikací\TuneUp Software
2013-08-01 18:40:39 ----HD---- C:\$AVG
2013-08-01 18:40:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG2013
2013-08-01 18:39:56 ----D---- C:\Program Files\AVG
2013-08-01 18:34:57 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2013-08-01 18:34:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2013-08-01 14:42:04 ----HD---- C:\WINDOWS\PIF
2013-08-01 12:37:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\nView_Profiles
2013-08-01 12:21:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-08-01 12:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904_WM11$
2013-08-01 12:18:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-08-01 12:17:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-08-01 12:17:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-08-01 12:17:02 ----D---- C:\WINDOWS\system32\URTTemp
2013-08-01 12:16:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-08-01 12:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-08-01 12:13:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-08-01 12:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2013-08-01 12:13:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-08-01 12:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2850851$
2013-08-01 12:13:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-08-01 12:13:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-08-01 12:13:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-08-01 12:08:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-08-01 12:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-08-01 11:59:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-08-01 11:59:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-08-01 11:59:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-08-01 11:59:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-08-01 11:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-08-01 11:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-08-01 11:56:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-08-01 11:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2845187$
2013-08-01 11:54:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-08-01 11:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-08-01 11:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-08-01 11:51:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-08-01 11:51:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-08-01 11:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-08-01 11:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-08-01 11:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2839229$
2013-08-01 11:46:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2813347-v2$
2013-08-01 11:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-08-01 11:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-08-01 11:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-08-01 11:41:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-08-01 11:41:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-08-01 11:41:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-08-01 11:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-08-01 11:40:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-08-01 11:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-08-01 11:40:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-08-01 11:33:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-08-01 11:33:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-08-01 11:33:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-08-01 11:33:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-08-01 11:32:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-08-01 11:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-08-01 11:31:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-08-01 11:23:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-08-01 11:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-08-01 11:23:03 ----D---- C:\WINDOWS\ie8updates
2013-08-01 11:18:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-08-01 11:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-08-01 11:18:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-08-01 11:17:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-08-01 11:17:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-08-01 11:17:28 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-01 10:44:25 ----D---- C:\WINDOWS\WBEM
2013-08-01 10:44:25 ----D---- C:\WINDOWS\system32\cs
2013-08-01 10:44:25 ----D---- C:\WINDOWS\Network Diagnostic
2013-08-01 10:44:25 ----D---- C:\WINDOWS\L2Schemas
2013-08-01 09:53:09 ----D---- C:\Documents and Settings\ae\Data aplikací\NVIDIA
2013-08-01 09:47:41 ----D---- C:\Program Files\AGEIA Technologies
2013-08-01 09:47:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2013-08-01 09:47:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2013-08-01 09:46:31 ----A---- C:\WINDOWS\system32\OpenCL.dll
2013-08-01 09:45:45 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvdispgenco3232049.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvdispco3232049.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-08-01 09:45:44 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-08-01 09:45:43 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-08-01 09:40:49 ----D---- C:\Documents and Settings\ae\Data aplikací\Windows Desktop Search
2013-08-01 09:40:01 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-08-01 09:34:00 ----D---- C:\WINDOWS\Prefetch
2013-08-01 09:24:57 ----D---- C:\Program Files\Windows Media Connect 2
2013-08-01 09:23:54 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-08-01 09:23:53 ----D---- C:\WINDOWS\system32\bits
2013-08-01 09:20:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2013-08-01 09:10:33 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2013-08-01 09:08:56 ----A---- C:\WINDOWS\system32\msvcr80.dll
2013-08-01 09:08:56 ----A---- C:\WINDOWS\system32\msvcp80.dll
2013-08-01 09:08:55 ----A---- C:\WINDOWS\system32\msvcm80.dll
2013-08-01 09:07:22 ----D---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2013-08-01 09:07:21 ----D---- C:\WINDOWS\system32\DRM
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\SecProc_ssp.dll
2013-08-01 09:07:21 ----A---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate_ssp.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate_isv.exe
2013-08-01 09:07:20 ----A---- C:\WINDOWS\system32\RmActivate.exe
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\SecProc_isv.dll
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\SecProc.dll
2013-08-01 09:07:19 ----A---- C:\WINDOWS\system32\msdrm.dll
2013-08-01 09:07:18 ----A---- C:\WINDOWS\system32\WgaTray.exe
2013-08-01 09:07:18 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2013-08-01 09:07:17 ----A---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2013-08-01 09:07:17 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2013-08-01 09:07:16 ----A---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncRes.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncPH.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncNE.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncDMS.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\UncCplExt.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\oephRes.dll
2013-08-01 09:07:14 ----A---- C:\WINDOWS\system32\oeph.dll
2013-08-01 09:07:08 ----D---- C:\Program Files\Windows Desktop Search
2013-08-01 09:07:05 ----A---- C:\WINDOWS\system32\propsys.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\xmlfilter.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\srchadmin.dll
2013-08-01 09:07:04 ----A---- C:\WINDOWS\system32\rtffilt.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\msshsq.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\msshooks.dll
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\idxcntrs.ini
2013-08-01 09:07:03 ----A---- C:\WINDOWS\system32\gthrctr.ini
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\tquery.dll
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\msscb.dll
2013-08-01 09:07:02 ----A---- C:\WINDOWS\system32\gsrvctr.ini
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\propdefs.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\msstrc.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssrch.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssprxy.dll
2013-08-01 09:07:01 ----A---- C:\WINDOWS\system32\mssphtb.dll
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchprotocolhost.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchindexer.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\searchfilterhost.exe
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\mssph.dll
2013-08-01 09:07:00 ----A---- C:\WINDOWS\system32\mssitlb.dll
2013-08-01 09:06:59 ----A---- C:\WINDOWS\system32\msscntrs.dll
2013-08-01 09:06:57 ----D---- C:\Program Files\MSXML 4.0
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\muweb.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\mucltui.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2013-08-01 09:05:46 ----A---- C:\WINDOWS\system32\browserchoice.exe
2013-08-01 09:05:44 ----D---- C:\WINDOWS\system32\PreInstall
2013-08-01 09:05:41 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\winrm
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2013-08-01 09:05:21 ----D---- C:\WINDOWS\system32\GroupPolicy
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmplpxy.dll
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wsmanhttpconfig.exe
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\winrmprov.dll
2013-08-01 09:05:20 ----A---- C:\WINDOWS\system32\wevtfwd.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\WsmRes.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrssrv.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrsmgr.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrshost.exe
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrscmd.dll
2013-08-01 09:05:19 ----A---- C:\WINDOWS\system32\winrs.exe
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\winrm.vbs
2013-08-01 09:05:18 ----A---- C:\WINDOWS\system32\winrm.cmd
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\wksprtps.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\winlogonnotification.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\tspubwmi.dll
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\rdpshell.exe
2013-08-01 09:04:45 ----A---- C:\WINDOWS\system32\rdpinit.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\wksprt.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\tswbprxy.exe
2013-08-01 09:04:44 ----A---- C:\WINDOWS\system32\MsRdpWebAccess.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-08-01 09:04:26 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-08-01 08:58:23 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2013-08-01 08:51:35 ----A---- C:\WINDOWS\system32\irclass.dll
2013-08-01 08:51:34 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-07-31 17:28:47 ----D---- C:\Program Files\Rockstar Games
2013-07-31 15:21:18 ----D---- C:\Program Files\Ahead
2013-07-31 15:20:02 ----D---- C:\Program Files\Nero Burning Rom 6.3.1.20
2013-07-31 14:22:37 ----A---- C:\WINDOWS\UPGRADE.TXT
2013-07-31 14:22:34 ----D---- C:\WINDOWS\setup.pss
2013-07-30 21:26:32 ----D---- C:\NVIDIA
2013-07-26 14:24:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
2013-07-26 14:24:39 ----D---- C:\Documents and Settings\ae\Data aplikací\Guitar Pro 6
2013-07-26 14:18:02 ----D---- C:\Program Files\Guitar Pro 6
2013-07-20 01:51:00 ----A---- C:\WINDOWS\system32\drivers\avglogx.sys
2013-07-20 01:50:56 ----A---- C:\WINDOWS\system32\drivers\avgidshx.sys
2013-07-20 01:50:56 ----A---- C:\WINDOWS\system32\drivers\avgidsdriverx.sys
2013-07-20 01:50:50 ----A---- C:\WINDOWS\system32\drivers\avgldx86.sys
2013-07-10 01:32:40 ----A---- C:\WINDOWS\system32\drivers\avgrkx86.sys
2013-07-03 19:50:55 ----D---- C:\Program Files\Mozilla Firefox
2013-07-02 00:31:19 ----D---- C:\Documents and Settings\ae\Data aplikací\Atari
2013-07-02 00:29:41 ----D---- C:\Documents and Settings\ae\Data aplikací\Leadertech
2013-07-02 00:27:11 ----D---- C:\Program Files\Atari

======List of files/folders modified in the last 1 month======

2013-08-01 21:05:31 ----D---- C:\WINDOWS\Temp
2013-08-01 21:05:24 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-01 21:00:51 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-01 21:00:34 ----SD---- C:\WINDOWS\Tasks
2013-08-01 21:00:34 ----HD---- C:\WINDOWS\inf
2013-08-01 21:00:34 ----D---- C:\WINDOWS\system32
2013-08-01 20:59:56 ----D---- C:\Instalace
2013-08-01 20:53:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2013-08-01 20:01:59 ----RD---- C:\Program Files
2013-08-01 19:46:37 ----D---- C:\WINDOWS
2013-08-01 18:42:07 ----SHD---- C:\WINDOWS\Installer
2013-08-01 18:41:13 ----D---- C:\WINDOWS\system32\drivers
2013-08-01 17:53:05 ----D---- C:\WINDOWS\pss
2013-08-01 17:52:18 ----SH---- C:\boot.ini
2013-08-01 17:52:18 ----A---- C:\WINDOWS\win.ini
2013-08-01 17:52:18 ----A---- C:\WINDOWS\system.ini
2013-08-01 17:51:34 ----A---- C:\WINDOWS\DFC.INI
2013-08-01 15:30:02 ----D---- C:\WINDOWS\Microsoft.NET
2013-08-01 15:00:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-01 15:00:15 ----RSD---- C:\WINDOWS\assembly
2013-08-01 15:00:09 ----D---- C:\WINDOWS\WinSxS
2013-08-01 14:37:08 ----D---- C:\Documents and Settings\ae\Data aplikací\DAEMON Tools Lite
2013-08-01 14:37:06 ----D---- C:\Documents and Settings\ae\Data aplikací\uTorrent
2013-08-01 14:37:06 ----D---- C:\Documents and Settings\ae\Data aplikací\TS3Client
2013-08-01 14:36:41 ----D---- C:\WINDOWS\Logs
2013-08-01 14:36:41 ----D---- C:\WINDOWS\Debug
2013-08-01 14:35:00 ----D---- C:\Documents and Settings\ae\Data aplikací\.minecraft
2013-08-01 14:31:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2013-08-01 14:27:30 ----D---- C:\Program Files\NVIDIA Corporation
2013-08-01 14:27:29 ----D---- C:\Documents and Settings
2013-08-01 12:36:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-01 11:56:51 ----D---- C:\WINDOWS\system32\CatRoot
2013-08-01 11:50:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-08-01 11:37:41 ----RSD---- C:\WINDOWS\Fonts
2013-08-01 11:37:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-08-01 11:37:25 ----D---- C:\Program Files\Microsoft Works
2013-08-01 11:35:16 ----D---- C:\Program Files\Common Files\System
2013-08-01 11:33:39 ----D---- C:\Program Files\Internet Explorer
2013-08-01 11:23:17 ----D---- C:\WINDOWS\system32\XPSViewer
2013-08-01 10:48:23 ----SD---- C:\WINDOWS\Offline Web Pages
2013-08-01 10:48:22 ----D---- C:\WINDOWS\system32\usmt
2013-08-01 10:48:21 ----D---- C:\WINDOWS\AppPatch
2013-08-01 10:48:19 ----D---- C:\WINDOWS\Media
2013-08-01 10:48:18 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-01 10:47:41 ----D---- C:\WINDOWS\PeerNet
2013-08-01 10:47:41 ----D---- C:\WINDOWS\ime
2013-08-01 10:47:20 ----D---- C:\WINDOWS\system32\npp
2013-08-01 10:47:11 ----D---- C:\WINDOWS\msagent
2013-08-01 10:46:40 ----D---- C:\WINDOWS\ehome
2013-08-01 10:46:04 ----D---- C:\WINDOWS\twain_32
2013-08-01 10:45:50 ----D---- C:\WINDOWS\system32\icsxml
2013-08-01 10:45:16 ----D---- C:\WINDOWS\system32\ias
2013-08-01 10:45:07 ----D---- C:\WINDOWS\system32\1033
2013-08-01 10:45:07 ----D---- C:\WINDOWS\system32\1029
2013-08-01 10:44:25 ----D---- C:\WINDOWS\system32\mui
2013-08-01 10:44:25 ----D---- C:\WINDOWS\Driver Cache
2013-08-01 09:47:38 ----RD---- C:\Program Files\Common Files
2013-08-01 09:47:03 ----D---- C:\WINDOWS\Help
2013-08-01 09:45:59 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-01 09:40:15 ----D---- C:\WINDOWS\Registration
2013-08-01 09:34:24 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-08-01 09:34:22 ----D---- C:\WINDOWS\SoftwareDistribution
2013-08-01 09:34:13 ----D---- C:\WINDOWS\system32\Restore
2013-08-01 09:34:12 ----SHD---- C:\System Volume Information
2013-08-01 09:33:32 ----D---- C:\WINDOWS\system32\config
2013-08-01 09:28:59 ----D---- C:\WINDOWS\security
2013-08-01 09:28:48 ----D---- C:\WINDOWS\system32\cs-CZ
2013-08-01 09:28:01 ----D---- C:\Program Files\Java
2013-08-01 09:26:25 ----A---- C:\WINDOWS\ODBCINST.INI
2013-08-01 09:26:06 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2013-08-01 09:25:39 ----RD---- C:\WINDOWS\Web
2013-08-01 09:25:34 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2013-08-01 09:24:54 ----D---- C:\Program Files\Windows Media Player
2013-08-01 09:24:49 ----D---- C:\WINDOWS\srchasst
2013-08-01 09:24:17 ----D---- C:\Program Files\NetMeeting
2013-08-01 09:24:15 ----D---- C:\Program Files\Common Files\Services
2013-08-01 09:24:11 ----D---- C:\Program Files\Outlook Express
2013-08-01 09:23:51 ----D---- C:\Program Files\Movie Maker
2013-08-01 09:23:31 ----D---- C:\WINDOWS\system32\oobe
2013-08-01 09:20:28 ----D---- C:\WINDOWS\system32\Setup
2013-08-01 09:12:56 ----D---- C:\WINDOWS\system32\Com
2013-08-01 09:11:53 ----D---- C:\WINDOWS\system32\en-us
2013-08-01 09:07:16 ----D---- C:\WINDOWS\system32\drivers\UMDF
2013-08-01 09:07:07 ----D---- C:\WINDOWS\system32\wbem
2013-08-01 09:05:47 ----D---- C:\Program Files\Microsoft Silverlight
2013-08-01 09:05:17 ----D---- C:\Program Files\Messenger
2013-08-01 09:05:07 ----D---- C:\WINDOWS\Cursors
2013-08-01 09:04:59 ----D---- C:\Program Files\Windows NT
2013-08-01 08:51:34 ----D---- C:\WINDOWS\system
2013-08-01 08:51:20 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-07-31 17:33:40 ----HD---- C:\Program Files\InstallShield Installation Information
2013-07-31 17:28:38 ----D---- C:\WINDOWS\system32\DirectX
2013-07-31 02:29:29 ----D---- C:\Documents and Settings\ae\Data aplikací\vlc
2013-07-30 16:15:22 ----D---- C:\Documents and Settings\ae\Data aplikací\Audacity
2013-07-30 03:44:19 ----D---- C:\Program Files\Google
2013-07-28 20:44:16 ----D---- C:\Documents and Settings\ae\Data aplikací\Skype
2013-07-11 10:17:02 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-07-07 00:10:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-07-07 00:10:30 ----RD---- C:\Program Files\Skype
2013-07-04 19:08:10 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\WINDOWS\system32\DRIVERS\avgidshx.sys [2013-07-20 60216]
R0 Avglogx;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avglogx.sys [2013-07-20 246072]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2013-07-01 96568]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2013-07-10 39224]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2013-07-20 208184]
R1 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2013-03-01 22328]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2013-07-20 171320]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2013-03-21 182072]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-06-28 242240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2013-05-19 271360]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2013-05-19 18048]
R2 rspndr;Odpovídající zařízení zjišťování topologie linkové vrstvy; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2011-01-25 62848]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2003-09-19 496800]
R3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2003-08-28 823456]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2011-01-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-06-21 10973504]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2003-08-28 113840]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 TotRec8;Total Recorder WDM audio filter driver; \??\C:\WINDOWS\system32\drivers\TotRec8.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2011-01-25 32384]
S1 DumpDrv;Crash Dump Driver; C:\WINDOWS\system32\drivers\DumpDrv.sys [2011-01-25 9472]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2011-01-25 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2011-01-25 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-06 34064]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-27 19072]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2009-05-12 122240]
S3 vmusb;VMware USB Client Driver; C:\WINDOWS\System32\Drivers\vmusb.sys [2012-11-20 31280]
S3 vmwvusb;VMware View Generic USB Driver; C:\WINDOWS\System32\Drivers\vmwvusb.sys []
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2011-01-25 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2013-06-21 156960]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [2012-11-20 721048]
R2 vmware-view-usbd;VMware Horizon View USB; C:\Program Files\VMware\VMware View\Client\bin\vmware-view-usbd.exe [2012-12-03 2436096]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2011-01-25 439808]
R2 wsnm;VMware View Client; C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe [2013-03-05 472656]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-10-03 725400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-05 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-03 162408]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-03 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2011-01-25 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#4 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\ae.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=117023 ... 4f4e61c672
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O20 - Winlogon Notify: RailNotification - Invalid registry found
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Re: Zpomalení PC - mint.bitminter.com

#5 Příspěvek od Gahe »

Mockrát děkuji, sám bych se z toho nevymotal. Rád bych jen věděl - bude stejný postup fungovat i na notebook s Windows7 ? Můj notebook je také infikován, ale jmenuje se to jinak - msumgeyw.exe
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#6 Příspěvek od Rudy »

Dejte nejprve log RSIT. Pak uvidíme.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Re: Zpomalení PC - mint.bitminter.com

#7 Příspěvek od Gahe »

Zde to je - skenování opět proběhlo až poté, co jsem vypl onen proces.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr at 2013-08-01 22:32:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 532 GB (76%) free of 699 GB
Total RAM: 5980 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:32:06, on 1.8.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Petr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NtVdmSrv] C:\Windows\inf\ntvdm.vbe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DCDhcpService - Atheros Communication Inc. - C:\Program Files (x86)\Acer\WDAgent\DCDhcpService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe

--
End of file - 13639 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-07 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-09 52352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-07 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-09-20 341360]
"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2012-01-05 296984]
"Dolby Home Theater v4"=C:\Dolby PCEE4\pcee4.exe [2011-06-01 506712]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2012-03-23 1105488]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-26 291608]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"NtVdmSrv"=C:\Windows\inf\ntvdm.vbe [2013-06-20 1219]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [2012-09-13 1009288]
"cz.seznam.software.szndesktop"=C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
"Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2013-04-02 4288048]
"Google Update"=C:\Users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22 116648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\SysWOW64\nvinit.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"msacm.siren"=sirenacm.dll
"msacm.l3codecp"=l3codecp.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-08-01 22:32:02 ----D---- C:\rsit
2013-08-01 22:32:02 ----D---- C:\Program Files (x86)\trend micro
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\TwnLib4.dll
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\picn20.dll
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\ImagXRA7.dll
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\ImagXR7.dll
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\ImagXpr7.dll
2013-07-31 15:07:13 ----N---- C:\Windows\SysWOW64\ImagX7.dll
2013-07-31 15:07:13 ----D---- C:\Program Files (x86)\Common Files\Ahead
2013-07-31 15:07:13 ----A---- C:\Windows\SysWOW64\TwnLib20.dll
2013-07-31 15:07:13 ----A---- C:\Windows\SysWOW64\NeroCheck.exe
2013-07-31 15:06:03 ----D---- C:\Users\Petr\AppData\Roaming\NVIDIA
2013-07-31 14:50:17 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-31 14:49:55 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2013-07-10 14:28:38 ----A---- C:\Windows\SysWOW64\ieui.dll
2013-07-10 14:28:37 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-10 14:28:37 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2013-07-10 14:28:37 ----A---- C:\Windows\SysWOW64\iesetup.dll
2013-07-10 14:28:37 ----A---- C:\Windows\SysWOW64\iernonce.dll
2013-07-10 14:28:36 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 14:28:36 ----A---- C:\Windows\SysWOW64\iertutil.dll
2013-07-10 14:28:35 ----A---- C:\Windows\SysWOW64\jscript.dll
2013-07-10 14:28:34 ----A---- C:\Windows\SysWOW64\urlmon.dll
2013-07-10 14:28:34 ----A---- C:\Windows\SysWOW64\jscript9.dll
2013-07-10 14:28:33 ----A---- C:\Windows\SysWOW64\wininet.dll
2013-07-10 14:28:33 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2013-07-10 14:28:31 ----A---- C:\Windows\SysWOW64\ieframe.dll
2013-07-10 14:28:27 ----A---- C:\Windows\SysWOW64\mshtml.dll
2013-07-10 14:25:10 ----SHD---- C:\Config.Msi
2013-07-10 13:10:22 ----A---- C:\Windows\SysWOW64\qedit.dll
2013-07-10 13:10:21 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 13:10:01 ----A---- C:\Windows\SysWOW64\DWrite.dll
2013-07-07 08:26:28 ----D---- C:\ProgramData\APN
2013-07-07 08:24:17 ----A---- C:\Windows\SysWOW64\javaws.exe
2013-07-07 08:24:13 ----A---- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-07 08:24:13 ----A---- C:\Windows\SysWOW64\javaw.exe
2013-07-07 08:24:13 ----A---- C:\Windows\SysWOW64\java.exe
2013-07-07 08:24:04 ----D---- C:\Program Files (x86)\Java
2013-07-03 11:47:31 ----D---- C:\Program Files (x86)\Port Royale

======List of files/folders modified in the last 1 month======

2013-08-01 22:32:03 ----D---- C:\Windows\Temp
2013-08-01 22:32:02 ----RD---- C:\Program Files (x86)
2013-08-01 20:31:27 ----D---- C:\Users\Petr\AppData\Roaming\Seznam.cz
2013-08-01 20:28:27 ----A---- C:\Windows\SysWOW64\log.txt
2013-08-01 09:13:10 ----D---- C:\Windows\LiveKernelReports
2013-07-31 15:07:13 ----D---- C:\Windows\SysWOW64
2013-07-31 15:07:13 ----D---- C:\Program Files (x86)\Common Files
2013-07-31 15:05:46 ----D---- C:\Windows\inf
2013-07-31 15:05:10 ----D---- C:\Windows\System32
2013-07-31 14:50:13 ----SHD---- C:\System Volume Information
2013-07-31 14:49:41 ----D---- C:\Windows\Prefetch
2013-07-28 13:22:46 ----D---- C:\ProgramData\PMB Files
2013-07-20 19:30:16 ----D---- C:\Instalace
2013-07-20 19:30:16 ----D---- C:\Filmy
2013-07-10 16:06:23 ----D---- C:\Windows\Microsoft.NET
2013-07-10 16:06:22 ----RSD---- C:\Windows\assembly
2013-07-10 14:56:31 ----D---- C:\Windows\winsxs
2013-07-10 14:55:14 ----D---- C:\Program Files (x86)\Windows Defender
2013-07-10 14:55:11 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-10 14:54:44 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-10 14:34:43 ----SHD---- C:\Windows\Installer
2013-07-10 14:31:56 ----A---- C:\Windows\win.ini
2013-07-08 21:21:57 ----HD---- C:\ProgramData
2013-07-07 08:24:05 ----A---- C:\Windows\SysWOW64\npDeployJava1.dll
2013-07-07 08:24:05 ----A---- C:\Windows\SysWOW64\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys []
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys []
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys []
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys []
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys []
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys []
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys []
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys []
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys []
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys []
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys []
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys []
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys []
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys []
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys []
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys []
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys []
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys []
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys []
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys []
S3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys []
S3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-03-09 107648]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-03-23 355920]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2012-02-08 871296]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2012-02-29 28264]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-30 13592]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-08-31 2425960]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-09 607456]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2011-12-16 161560]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-02-07 255376]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-12-16 277784]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2012-01-05 256536]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-12-16 363800]
R2 ZAtheros Wlan Agent;ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [2012-02-20 72864]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-20 253600]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-19 276248]
S3 DCDhcpService;DCDhcpService; C:\Program Files (x86)\Acer\WDAgent\DCDhcpService.exe [2012-02-10 111776]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-05-17 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#8 Příspěvek od Rudy »

Poprosím o log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Re: Zpomalení PC - mint.bitminter.com

#9 Příspěvek od Gahe »

Zde je

ComboFix 13-08-01.01 - Petr 01.08.2013 22:46:54.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.5980.4417 [GMT 2:00]
Spuštěný z: c:\users\Petr\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-07-01 do 2013-08-01 )))))))))))))))))))))))))))))))
.
.
2013-08-01 20:52 . 2013-08-01 20:52 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-08-01 20:52 . 2013-08-01 20:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-01 20:52 . 2013-08-01 20:52 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C6668939-8940-40C4-9BF0-2F1F1C7BBD6F}\offreg.dll
2013-08-01 20:32 . 2013-08-01 20:32 -------- d-----w- C:\rsit
2013-08-01 20:32 . 2013-08-01 20:32 -------- d-----w- c:\program files (x86)\trend micro
2013-07-31 13:07 . 2013-07-31 13:07 -------- d-----w- c:\program files (x86)\Common Files\Ahead
2013-07-31 13:07 . 2004-07-20 15:24 476320 ------w- c:\windows\SysWow64\ImagXpr7.dll
2013-07-31 13:07 . 2004-07-20 15:24 471040 ------w- c:\windows\SysWow64\ImagXRA7.dll
2013-07-31 13:07 . 2004-07-20 15:24 262144 ------w- c:\windows\SysWow64\ImagXR7.dll
2013-07-31 13:07 . 2004-07-20 15:24 1568768 ------w- c:\windows\SysWow64\ImagX7.dll
2013-07-31 13:07 . 2004-07-09 07:43 364544 ------w- c:\windows\SysWow64\TwnLib4.dll
2013-07-31 13:07 . 2001-07-09 09:50 155648 ----a-w- c:\windows\SysWow64\NeroCheck.exe
2013-07-31 13:07 . 2001-06-26 06:15 38912 ------w- c:\windows\SysWow64\picn20.dll
2013-07-31 13:07 . 2000-06-26 09:45 106496 ----a-w- c:\windows\SysWow64\TwnLib20.dll
2013-07-31 13:06 . 2013-07-31 13:06 -------- d-----w- c:\users\Petr\AppData\Roaming\NVIDIA
2013-07-31 13:05 . 2013-07-31 13:05 -------- d-----w- c:\users\Petr\AppData\Local\Programs
2013-07-31 12:50 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2013-07-31 12:49 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\SysWow64\d3dx9_34.dll
2013-07-30 14:20 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C6668939-8940-40C4-9BF0-2F1F1C7BBD6F}\mpengine.dll
2013-07-07 06:26 . 2013-07-07 06:26 -------- d-----w- c:\programdata\APN
2013-07-07 06:24 . 2013-07-07 06:24 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-07 06:24 . 2013-07-07 06:24 -------- d-----w- c:\program files (x86)\Java
2013-07-03 09:47 . 2013-07-03 11:22 -------- d-----w- c:\program files (x86)\Port Royale
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-10 12:29 . 2013-04-18 16:11 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-07-07 06:24 . 2013-04-07 12:07 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-07 06:24 . 2013-04-07 12:07 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-06-20 19:35 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-06-07 11:45 . 2013-07-31 13:05 84992 --s-a-w- c:\windows\inf\msumgeyw\zlib1.dll
2013-06-07 11:45 . 2013-07-31 13:05 612352 --s-a-w- c:\windows\inf\msumgeyw\libcurl.dll
2013-06-07 11:45 . 2013-07-31 13:05 568334 --s-a-w- c:\windows\inf\msumgeyw\msumgeyw.exe
2013-06-07 11:45 . 2013-07-31 13:05 364544 --s-a-w- c:\windows\inf\msumgeyw\ssleay32.dll
2013-06-07 11:45 . 2013-07-31 13:05 279955 --s-a-w- c:\windows\inf\msumgeyw\libidn-11.dll
2013-06-07 11:45 . 2013-07-31 13:05 183382 --s-a-w- c:\windows\inf\msumgeyw\librtmp.dll
2013-06-07 11:45 . 2013-07-31 13:05 171008 --s-a-w- c:\windows\inf\msumgeyw\libssh2.dll
2013-06-07 11:45 . 2013-07-31 13:05 1704448 --s-a-w- c:\windows\inf\msumgeyw\libeay32.dll
2013-06-07 11:45 . 2013-07-31 13:05 110094 --s-a-w- c:\windows\inf\msumgeyw\libusb-1.0.dll
2013-05-28 21:46 . 2013-05-28 21:46 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-28 21:46 . 2013-05-28 21:46 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-28 21:46 . 2013-05-28 21:46 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-28 21:46 . 2013-05-28 21:46 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-28 21:46 . 2013-05-28 21:46 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-28 21:46 . 2013-05-28 21:46 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-28 21:46 . 2013-05-28 21:46 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-28 21:46 . 2013-05-28 21:46 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-28 21:46 . 2013-05-28 21:46 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-28 21:46 . 2013-05-28 21:46 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-28 21:46 . 2013-05-28 21:46 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-28 21:46 . 2013-05-28 21:46 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-28 21:46 . 2013-05-28 21:46 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-28 21:46 . 2013-05-28 21:46 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-28 21:46 . 2013-05-28 21:46 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-28 21:46 . 2013-05-28 21:46 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-28 21:46 . 2013-05-28 21:46 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-28 21:46 . 2013-05-28 21:46 441856 ----a-w- c:\windows\system32\html.iec
2013-05-28 21:46 . 2013-05-28 21:46 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-28 21:46 . 2013-05-28 21:46 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-28 21:46 . 2013-05-28 21:46 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-28 21:46 . 2013-05-28 21:46 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-28 21:46 . 2013-05-28 21:46 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-28 21:46 . 2013-05-28 21:46 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-28 21:46 . 2013-05-28 21:46 235008 ----a-w- c:\windows\system32\url.dll
2013-05-28 21:46 . 2013-05-28 21:46 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-28 21:46 . 2013-05-28 21:46 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-28 21:46 . 2013-05-28 21:46 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-28 21:46 . 2013-05-28 21:46 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-28 21:46 . 2013-05-28 21:46 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-28 21:46 . 2013-05-28 21:46 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-28 21:46 . 2013-05-28 21:46 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-28 21:46 . 2013-05-28 21:46 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-28 21:46 . 2013-05-28 21:46 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-28 21:46 . 2013-05-28 21:46 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-28 21:46 . 2013-05-28 21:46 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-28 21:46 . 2013-05-28 21:46 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-28 21:46 . 2013-05-28 21:46 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-28 21:46 . 2013-05-28 21:46 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-28 21:46 . 2013-05-28 21:46 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-28 21:46 . 2013-05-28 21:46 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-28 21:46 . 2013-05-28 21:46 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-28 21:46 . 2013-05-28 21:46 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-28 21:46 . 2013-05-28 21:46 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-28 21:46 . 2013-05-28 21:46 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-28 21:46 . 2013-05-28 21:46 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-28 21:46 . 2013-05-28 21:46 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-28 21:46 . 2013-05-28 21:46 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-28 21:46 . 2013-05-28 21:46 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-28 21:45 . 2013-05-28 21:45 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-28 21:45 . 2013-05-28 21:45 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-28 21:45 . 2013-05-28 21:45 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-28 21:45 . 2013-05-28 21:45 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-28 21:45 . 2013-05-28 21:45 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-28 21:45 . 2013-05-28 21:45 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-28 21:45 . 2013-05-28 21:45 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-28 21:45 . 2013-05-28 21:45 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-28 21:45 . 2013-05-28 21:45 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-28 21:45 . 2013-05-28 21:45 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-28 21:45 . 2013-05-28 21:45 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-28 21:45 . 2013-05-28 21:45 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-28 21:45 . 2013-05-28 21:45 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-28 21:45 . 2013-05-28 21:45 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-28 21:45 . 2013-05-28 21:45 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-28 21:45 . 2013-05-28 21:45 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-28 21:45 . 2013-05-28 21:45 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-28 21:45 . 2013-05-28 21:45 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-28 21:45 . 2013-05-28 21:45 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-28 21:45 . 2013-05-28 21:45 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-28 21:45 . 2013-05-28 21:45 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-28 21:45 . 2013-05-28 21:45 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-28 21:45 . 2013-05-28 21:45 194560 ----a-w- c:\windows\system32\d3d10_1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"="c:\users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe" [2012-09-13 1009288]
"cz.seznam.software.szndesktop"="c:\users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-01-22 92152]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2013-04-02 4288048]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2012-01-05 296984]
"Dolby Home Theater v4"="c:\dolby pcee4\pcee4.exe" [2011-06-01 506712]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2012-03-23 1105488]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-26 291608]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2012-09-13 1009288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"NtVdmSrv"="c:\windows\inf\ntvdm.vbe" [2013-06-20 1219]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 DCDhcpService;DCDhcpService;c:\program files (x86)\Acer\WDAgent\DCDhcpService.exe;c:\program files (x86)\Acer\WDAgent\DCDhcpService.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZAtheros Wlan Agent;ZAtheros Wlan Agent;c:\program files (x86)\Atheros\Ath_WlanAgent.exe;c:\program files (x86)\Atheros\Ath_WlanAgent.exe [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-08-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-20 11:04]
.
2013-07-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002Core.job
- c:\users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22 16:16]
.
2013-08-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002UA.job
- c:\users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22 16:16]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstantUpdate"="c:\program files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe" [2012-04-07 124520]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-19 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-19 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-19 440600]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-02-14 12448872]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-02-08 1158248]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2012-02-02 576376]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-03-09 1021056]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2012-03-09 800896]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2012-02-08 1829768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=12454
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 10.10.10.1 10.10.10.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-Nero - Burning Rom!UninstallKey - c:\program files (x86)\Ahead\nero\uninstall\UNNERO.exe
AddRemove-{AAE3C789-B8B2-BEE7-C142-CEC647C57FF1}_is1 - c:\program files (x86)\Nero Burning ROM 6.3.1.20\unins000.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_222_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_222_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_222.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_222.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_222.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_222.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-08-01 22:54:44
ComboFix-quarantined-files.txt 2013-08-01 20:54
.
Před spuštěním: Volných bajtů: 558 107 832 320
Po spuštění: Volných bajtů: 558 626 275 328
.
- - End Of File - - 38251BDB37A27936F8D2155A56852A19
D41D8CD98F00B204E9800998ECF8427E
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#10 Příspěvek od Rudy »

Otevřte poznámkový blok a zkpírujte do něj:
KillAll::

Folder::
c:\windows\inf\msumgeyw

File::
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2535386745-3416956556-2201478400-1002UA.job

Collect::
c:\windows\inf\ntvdm.vbe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NtVdmSrv"=-

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\software\McAfee]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Reboot::
Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Gahe
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 01 srp 2013 19:04

Re: Zpomalení PC - mint.bitminter.com

#11 Příspěvek od Gahe »

Strašně moc Vám děkuju, zachránil jste mě před reinstalací dvou počítačů. Ještě jednou - děkuji !
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119529
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zpomalení PC - mint.bitminter.com

#12 Příspěvek od Rudy »

CF odinstalujte pomocí T-Cleaneru: http://vyosek.ic.cz/pro_usery/T-Cleaner.exe . Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“