Myš doubleclick

[_Antti_]

Zdravím!

V poslední době mi myš začal dělat při jednom kliknutí doubleclick. (A ano jsem si jist, že jsem jen jednou kliknul.)
Přátelé mi říkali, ať zajdu na reklamaci, ale chtěl bych se zeptat, jestli to nemůže způsobovat vir, popř. něco jiného co mi v pc dělá nepořádek.

Děkuji za odpovědi.

[Rudy]

Zdravím!
Virus toto způsobovat může. Dejte log RSIT: http://forum.viry.cz/viewtopic.php?t=81939 .

[_Antti_]

Dekuji za odpoved, ale mam jeste otazku. Mam tem log dat sem, nebo si zalozit nove tema v preventivkach, nebo problemech s logy?

(Omlovam se za chyby, pisu z tabletu)

[Rudy]

Dejte ho sem.

[_Antti_]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jan at 2013-08-27 05:59:11
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 239 GB (66%) free of 364 GB
Total RAM: 3039 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:59:51, on 27.8.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Uniblue\DriverScanner\dsmonitor.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Apoint\Apntex.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Genius\Gila\mousehid.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\sony\ISB Utility\ISBMgr.exe
C:\Program Files\sony\Marketing Tools\MarketingTools.exe
C:\Program Files\Genius\Gila\trayicon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\sony\Me&My VAIO\MAMV.exe
C:\Program Files\sony\Network Utility\LANUtil.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Steam\Steam.exe
C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Expat Shield\bin\openvpntray.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jan\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Jan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Expat Shield Class - {3706EE7C-3CAD-445D-8A43-03EBC3B75908} - C:\Program Files\Expat Shield\HssIE\ExpatIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [AML] C:\Program Files\Sony\VAIO Launcher\AML.exe InitApp
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Gila] C:\Program Files\Genius\Gila\mousehid.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [TP-LINK USB Printer Controller] C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe -mini
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Me&My VAIO] C:\Program Files\Sony\Me&My VAIO\MAMV.exe /autorun
O4 - HKCU\..\Run: [NSUFloatingUI] "C:\Program Files\Sony\Network Utility\LANUtil.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - c:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Expat Shield Service (ExpatShieldService) - Unknown owner - C:\Program Files\Expat Shield\bin\openvpnas.exe
O23 - Service: Expat Shield Routing Service (ExpatSrv) - AnchorFree Inc. - C:\Program Files\Expat Shield\HssWPR\hsssrv.exe
O23 - Service: Expat Shield Tray Service (ExpatTrayService) - Unknown owner - C:\Program Files\Expat Shield\bin\ExpatTrayService.EXE
O23 - Service: Expat Shield Monitoring Service (ExpatWd) - Unknown owner - C:\Program Files\Expat Shield\bin\hsswd.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IviRegMgr - InterVideo - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NSUService - Sony Corporation - C:\Program Files\sony\Network Utility\NSUService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Windows\RtkAudioService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 13377 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\dsmonitor.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uarvi6mo.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameEU.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
afurladvisor@anchorfree.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}]
Expat Shield Class - C:\Program Files\Expat Shield\HssIE\ExpatIE.dll [2012-01-05 233288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-22 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-12 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-22 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-12 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-12 345480]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2008-09-30 122880]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-10-17 6295552]
"Skytel"=C:\Windows\Skytel.exe [2008-10-17 1826816]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-12 640376]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"AML"=C:\Program Files\Sony\VAIO Launcher\AML.exe [2008-09-09 1097728]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
"Gila"=C:\Program Files\Genius\Gila\mousehid.exe [2013-01-16 307712]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-29 30192]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2008-04-04 317280]
"MarketingTools"=C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [2013-07-22 24576]
"TP-LINK USB Printer Controller"=C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [2012-09-21 4226048]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Me&My VAIO"=C:\Program Files\Sony\Me&My VAIO\MAMV.exe [2008-11-17 8847360]
"NSUFloatingUI"=C:\Program Files\Sony\Network Utility\LANUtil.exe [2008-12-05 270336]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-06-21 19875432]
"Steam"=C:\Program Files\Steam\Steam.exe [2013-07-27 1807272]
"Akamai NetSession Interface"=C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\Windows\system32\VESWinlogon.dll [2008-11-06 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticetext"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.DIVX"=DivX.dll
"VIDC.dvsd"=C:\Program Files\Common Files\Sony Shared\VideoLib\sonydv.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-08-26 14:38:46 ----D---- C:\Users\Jan\AppData\Roaming\vlc
2013-08-26 14:33:29 ----D---- C:\Program Files\VideoLAN
2013-08-25 16:51:35 ----D---- C:\Expat Shield
2013-08-25 16:51:14 ----D---- C:\Program Files\Expat Shield
2013-08-24 19:28:45 ----D---- C:\Windows\system32\SPReview
2013-08-24 18:13:24 ----A---- C:\Windows\system32\mprddm.dll
2013-08-24 18:13:24 ----A---- C:\Windows\system32\lsmproxy.dll
2013-08-24 18:13:24 ----A---- C:\Windows\system32\lpremove.exe
2013-08-24 18:13:24 ----A---- C:\Windows\system32\lpksetup.exe
2013-08-24 18:13:24 ----A---- C:\Windows\system32\LogonUI.exe
2013-08-24 18:13:24 ----A---- C:\Windows\system32\licmgr10.dll
2013-08-24 18:13:24 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-08-24 18:13:24 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-08-24 18:13:24 ----A---- C:\Windows\system32\jscript.dll
2013-08-24 18:13:24 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-08-24 18:13:24 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-08-24 18:13:24 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-08-24 18:13:24 ----A---- C:\Windows\system32\drivers\ks.sys
2013-08-24 18:13:23 ----A---- C:\Windows\system32\mfc42u.dll
2013-08-24 18:13:23 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-08-24 18:13:23 ----A---- C:\Windows\system32\MdSched.exe
2013-08-24 18:13:23 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-08-24 18:13:23 ----A---- C:\Windows\system32\mcbuilder.exe
2013-08-24 18:13:23 ----A---- C:\Windows\system32\mblctr.exe
2013-08-24 18:13:23 ----A---- C:\Windows\system32\mapistub.dll
2013-08-24 18:13:23 ----A---- C:\Windows\system32\mapi32.dll
2013-08-24 18:13:23 ----A---- C:\Windows\system32\KMSVC.DLL
2013-08-24 18:13:23 ----A---- C:\Windows\system32\KBDUS.DLL
2013-08-24 18:13:23 ----A---- C:\Windows\system32\KBDPO.DLL
2013-08-24 18:13:23 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-08-24 18:13:22 ----A---- C:\Windows\system32\netiougc.exe
2013-08-24 18:13:22 ----A---- C:\Windows\system32\netiohlp.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\netcfgx.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\ncryptui.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\msvfw32.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\mcmde.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\mciavi32.dll
2013-08-24 18:13:22 ----A---- C:\Windows\system32\drivers\netio.sys
2013-08-24 18:13:22 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-08-24 18:13:21 ----A---- C:\Windows\system32\olepro32.dll
2013-08-24 18:13:21 ----A---- C:\Windows\system32\odbc32.dll
2013-08-24 18:13:21 ----A---- C:\Windows\system32\ntlanman.dll
2013-08-24 18:13:21 ----A---- C:\Windows\system32\Mystify.scr
2013-08-24 18:13:21 ----A---- C:\Windows\system32\msxml3.dll
2013-08-24 18:13:21 ----A---- C:\Windows\system32\msvidc32.dll
2013-08-24 18:13:20 ----A---- C:\Windows\system32\oleaut32.dll
2013-08-24 18:13:20 ----A---- C:\Windows\system32\nlsbres.dll
2013-08-24 18:13:20 ----A---- C:\Windows\system32\mscories.dll
2013-08-24 18:13:20 ----A---- C:\Windows\system32\mscoree.dll
2013-08-24 18:13:20 ----A---- C:\Windows\system32\msconfig.exe
2013-08-24 18:13:20 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-08-24 18:13:19 ----A---- C:\Windows\system32\msrle32.dll
2013-08-24 18:13:19 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-08-24 18:13:18 ----A---- C:\Windows\system32\mstask.dll
2013-08-24 18:13:18 ----A---- C:\Windows\system32\msfeedssync.exe
2013-08-24 18:13:18 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-08-24 18:13:18 ----A---- C:\Windows\system32\msfeeds.dll
2013-08-24 18:13:18 ----A---- C:\Windows\system32\msdri.dll
2013-08-24 18:13:17 ----A---- C:\Windows\system32\cryptui.dll
2013-08-24 18:13:17 ----A---- C:\Windows\system32\consent.exe
2013-08-24 18:13:17 ----A---- C:\Windows\system32\certcli.dll
2013-08-24 18:13:17 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-08-24 18:13:17 ----A---- C:\Windows\system32\bootres.dll
2013-08-24 18:13:17 ----A---- C:\Windows\system32\biocpl.dll
2013-08-24 18:13:16 ----A---- C:\Windows\system32\Display.dll
2013-08-24 18:13:16 ----A---- C:\Windows\system32\d3d9.dll
2013-08-24 18:13:16 ----A---- C:\Windows\system32\d3d11.dll
2013-08-24 18:13:16 ----A---- C:\Windows\system32\d3d10level9.dll
2013-08-24 18:13:15 ----A---- C:\Windows\system32\dfshim.dll
2013-08-24 18:13:15 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-08-24 18:13:15 ----A---- C:\Windows\system32\davclnt.dll
2013-08-24 18:13:15 ----A---- C:\Windows\system32\adsldp.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-08-24 18:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2013-08-24 18:13:14 ----A---- C:\Windows\system32\iedkcs32.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\iasrecst.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\httpapi.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\halmacpi.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\halacpi.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\hal.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-08-24 18:13:14 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-08-24 18:13:14 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-08-24 18:13:14 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-08-24 18:13:14 ----A---- C:\Windows\system32\basecsp.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\AxInstSv.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\avifil32.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\authui.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\asycfilt.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\appinfo.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\advapi32.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\activeds.dll
2013-08-24 18:13:14 ----A---- C:\Windows\system32\acppage.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\imapi2.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\evr.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\eudcedit.exe
2013-08-24 18:13:13 ----A---- C:\Windows\system32\dxgi.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\dskquoui.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\dsauth.dll
2013-08-24 18:13:13 ----A---- C:\Windows\system32\dps.dll
2013-08-24 18:13:11 ----A---- C:\Windows\system32\FXSSVC.exe
2013-08-24 18:13:11 ----A---- C:\Windows\system32\FXSMON.dll
2013-08-24 18:13:11 ----A---- C:\Windows\system32\fveapi.dll
2013-08-24 18:13:10 ----A---- C:\Windows\twain_32.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\tzres.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\twext.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\themecpl.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\tapisrv.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\onex.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\framedynos.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\framedyn.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\FntCache.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\fms.dll
2013-08-24 18:13:10 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-08-24 18:13:10 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-08-24 18:13:09 ----A---- C:\Windows\system32\spwizeng.dll
2013-08-24 18:13:09 ----A---- C:\Windows\system32\sppobjs.dll
2013-08-24 18:13:09 ----A---- C:\Windows\system32\sppnp.dll
2013-08-24 18:13:09 ----A---- C:\Windows\system32\spp.dll
2013-08-24 18:13:09 ----A---- C:\Windows\system32\spoolsv.exe
2013-08-24 18:13:09 ----A---- C:\Windows\system32\shacct.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\wlangpui.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\wksprt.exe
2013-08-24 18:13:07 ----A---- C:\Windows\system32\winhttp.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\sscore.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\srvsvc.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\srrstr.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\spwizres.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\spbcd.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\shlwapi.dll
2013-08-24 18:13:07 ----A---- C:\Windows\system32\drivers\storport.sys
2013-08-24 18:13:06 ----A---- C:\Windows\system32\wimserv.exe
2013-08-24 18:13:06 ----A---- C:\Windows\system32\wimgapi.dll
2013-08-24 18:13:06 ----A---- C:\Windows\system32\wiadefui.dll
2013-08-24 18:13:05 ----A---- C:\Windows\system32\wvc.dll
2013-08-24 18:13:05 ----A---- C:\Windows\system32\wtsapi32.dll
2013-08-24 18:13:05 ----A---- C:\Windows\system32\wsqmcons.exe
2013-08-24 18:13:05 ----A---- C:\Windows\system32\win32k.sys
2013-08-24 18:13:04 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\wscapi.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\WPDSp.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\wpd_ci.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\wmpps.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\VAN.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\uxlib.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\utildll.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\usp10.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\untfs.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\unlodctr.exe
2013-08-24 18:13:04 ----A---- C:\Windows\system32\unattend.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\umpo.dll
2013-08-24 18:13:04 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-08-24 18:13:04 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-08-24 18:13:03 ----A---- C:\Windows\system32\WavDest.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\wdc.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\Vault.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\samcli.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\rpcss.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\Robocopy.exe
2013-08-24 18:13:02 ----A---- C:\Windows\system32\RMActivate.exe
2013-08-24 18:13:02 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\rdpcore.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\raschap.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\RacEngn.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\quartz.dll
2013-08-24 18:13:02 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-08-24 18:13:02 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-08-24 18:13:02 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-08-24 18:13:02 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-08-24 18:13:02 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-08-24 18:12:59 ----A---- C:\Windows\system32\remotepg.dll
2013-08-24 18:12:59 ----A---- C:\Windows\system32\recovery.dll
2013-08-24 18:12:59 ----A---- C:\Windows\system32\ReAgent.dll
2013-08-24 18:12:59 ----A---- C:\Windows\system32\rdpwsx.dll
2013-08-24 18:12:59 ----A---- C:\Windows\system32\pifmgr.dll
2013-08-24 18:12:59 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-08-24 18:12:58 ----A---- C:\Windows\system32\propsys.dll
2013-08-24 18:12:58 ----A---- C:\Windows\system32\perfts.dll
2013-08-24 18:12:58 ----A---- C:\Windows\system32\perfmon.exe
2013-08-24 18:12:58 ----A---- C:\Windows\system32\pdhui.dll
2013-08-24 18:12:58 ----A---- C:\Windows\system32\onexui.dll
2013-08-24 18:12:56 ----A---- C:\Windows\system32\QAGENT.DLL
2013-08-24 18:12:56 ----A---- C:\Windows\system32\proquota.exe
2013-08-24 18:12:55 ----A---- C:\Windows\system32\prnfldr.dll
2013-08-24 18:12:55 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-08-24 18:12:54 ----A---- C:\Windows\system32\setupcl.exe
2013-08-24 18:12:54 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-08-24 18:12:53 ----A---- C:\Windows\system32\schtasks.exe
2013-08-24 18:12:53 ----A---- C:\Windows\system32\secproc.dll
2013-08-24 18:12:53 ----A---- C:\Windows\system32\scecli.dll
2013-08-24 18:12:53 ----A---- C:\Windows\system32\scansetting.dll
2013-08-24 18:12:53 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-08-24 18:12:52 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-08-24 18:12:51 ----A---- C:\Windows\system32\msasn1.dll
2013-08-24 18:12:51 ----A---- C:\Windows\system32\MFPlay.dll
2013-08-24 18:12:51 ----A---- C:\Windows\system32\mfc40.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\mobsync.exe
2013-08-24 18:12:50 ----A---- C:\Windows\system32\MMDevAPI.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\ListSvc.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KernelBase.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\kerberos.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-08-24 18:12:50 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-08-24 18:12:50 ----A---- C:\Windows\system32\itircl.dll
2013-08-24 18:12:50 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-08-24 18:12:49 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-08-24 18:12:49 ----A---- C:\Windows\system32\mciqtz32.dll
2013-08-24 18:12:49 ----A---- C:\Windows\system32\logman.exe
2013-08-24 18:12:49 ----A---- C:\Windows\system32\logagent.exe
2013-08-24 18:12:48 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\odbcjt32.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\odbccp32.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\occache.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\ntprint.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-08-24 18:12:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2013-08-24 18:12:48 ----A---- C:\Windows\system32\ntdll.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\lsm.exe
2013-08-24 18:12:48 ----A---- C:\Windows\system32\localsec.dll
2013-08-24 18:12:48 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-08-24 18:12:48 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-08-24 18:12:48 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-08-24 18:12:47 ----A---- C:\Windows\system32\MuiUnattend.exe
2013-08-24 18:12:47 ----A---- C:\Windows\system32\muifontsetup.dll
2013-08-24 18:12:47 ----A---- C:\Windows\system32\mtxclu.dll
2013-08-24 18:12:47 ----A---- C:\Windows\system32\msscp.dll
2013-08-24 18:12:47 ----A---- C:\Windows\system32\msrating.dll
2013-08-24 18:12:47 ----A---- C:\Windows\system32\mshtml.dll
2013-08-24 18:12:47 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-08-24 18:12:46 ----A---- C:\Windows\system32\nslookup.exe
2013-08-24 18:12:46 ----A---- C:\Windows\system32\nshipsec.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\nlasvc.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\nlaapi.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\netutils.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\netplwiz.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\netid.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\netapi32.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\ncsi.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\Narrator.exe
2013-08-24 18:12:46 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-08-24 18:12:46 ----A---- C:\Windows\system32\mydocs.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\msnetobj.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\msihnd.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\msi.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\msdtctm.dll
2013-08-24 18:12:46 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-08-24 18:12:46 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-08-24 18:12:46 ----A---- C:\Windows\system32\comdlg32.dll
2013-08-24 18:12:45 ----A---- C:\Windows\system32\diskpart.exe
2013-08-24 18:12:45 ----A---- C:\Windows\system32\dhcpcore.dll
2013-08-24 18:12:45 ----A---- C:\Windows\system32\crypt32.dll
2013-08-24 18:12:45 ----A---- C:\Windows\system32\credui.dll
2013-08-24 18:12:45 ----A---- C:\Windows\system32\cmstp.exe
2013-08-24 18:12:44 ----A---- C:\Windows\system32\dnsapi.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\d3d10warp.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\bitsadmin.exe
2013-08-24 18:12:44 ----A---- C:\Windows\system32\bcdsrv.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\bcdedit.exe
2013-08-24 18:12:44 ----A---- C:\Windows\system32\bcdboot.exe
2013-08-24 18:12:44 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\apphelp.dll
2013-08-24 18:12:44 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-08-24 18:12:43 ----A---- C:\Windows\system32\CertEnroll.dll
2013-08-24 18:12:43 ----A---- C:\Windows\system32\amstream.dll
2013-08-24 18:12:42 ----A---- C:\Windows\system32\gameux.dll
2013-08-24 18:12:42 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-08-24 18:12:42 ----A---- C:\Windows\system32\certprop.dll
2013-08-24 18:12:42 ----A---- C:\Windows\system32\Bubbles.scr
2013-08-24 18:12:42 ----A---- C:\Windows\system32\browcli.dll
2013-08-24 18:12:42 ----A---- C:\Windows\system32\blackbox.dll
2013-08-24 18:12:41 ----A---- C:\Windows\system32\fontext.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\input.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\imm32.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\imgutil.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\imapi2fs.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\fphc.dll
2013-08-24 18:12:39 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-08-24 18:12:38 ----A---- C:\Windows\system32\iertutil.dll
2013-08-24 18:12:38 ----A---- C:\Windows\system32\iepeers.dll
2013-08-24 18:12:38 ----A---- C:\Windows\system32\iasrad.dll
2013-08-24 18:12:38 ----A---- C:\Windows\system32\iasacct.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\esent.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\efscore.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dxdiagn.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dwmredir.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dot3ui.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dosx.exe
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-08-24 18:12:37 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-08-24 18:12:37 ----A---- C:\Windows\explorer.exe
2013-08-24 18:12:35 ----A---- C:\Windows\system32\EncDec.dll
2013-08-24 18:12:34 ----A---- C:\Windows\system32\taskschd.dll
2013-08-24 18:12:34 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-08-24 18:12:33 ----A---- C:\Windows\system32\themeui.dll
2013-08-24 18:12:33 ----A---- C:\Windows\system32\TabSvc.dll
2013-08-24 18:12:33 ----A---- C:\Windows\system32\systemcpl.dll
2013-08-24 18:12:32 ----A---- C:\Windows\system32\umb.dll
2013-08-24 18:12:32 ----A---- C:\Windows\system32\tzutil.exe
2013-08-24 18:12:32 ----A---- C:\Windows\system32\tsmf.dll
2013-08-24 18:12:32 ----A---- C:\Windows\system32\TRAPI.dll
2013-08-24 18:12:32 ----A---- C:\Windows\system32\sxs.dll
2013-08-24 18:12:31 ----A---- C:\Windows\system32\sysmain.dll
2013-08-24 18:12:31 ----A---- C:\Windows\system32\SyncCenter.dll
2013-08-24 18:12:31 ----A---- C:\Windows\system32\sud.dll
2013-08-24 18:12:31 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-08-24 18:12:30 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-24 18:12:30 ----A---- C:\Windows\system32\WMPhoto.dll
2013-08-24 18:12:30 ----A---- C:\Windows\system32\ssText3d.scr
2013-08-24 18:12:30 ----A---- C:\Windows\system32\srvcli.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-08-24 18:12:29 ----A---- C:\Windows\system32\Wldap32.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\wkssvc.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\wisptis.exe
2013-08-24 18:12:29 ----A---- C:\Windows\system32\winsrv.dll
2013-08-24 18:12:29 ----A---- C:\Windows\system32\WinSAT.exe
2013-08-24 18:12:29 ----A---- C:\Windows\system32\WFS.exe
2013-08-24 18:12:28 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WUDFx.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WUDFHost.exe
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\wshbth.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\WSDApi.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\ws2_32.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-08-24 18:12:28 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-08-24 18:12:28 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-08-24 18:12:27 ----A---- C:\Windows\system32\usercpl.dll
2013-08-24 18:12:27 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-08-24 18:12:24 ----A---- C:\Windows\system32\werconcpl.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\webio.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\webcheck.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\vssapi.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\vpnike.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\vdsutil.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\urlmon.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\upnp.dll
2013-08-24 18:12:24 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-08-24 18:12:24 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2013-08-24 18:12:23 ----A---- C:\Windows\system32\vds.exe
2013-08-24 18:12:23 ----A---- C:\Windows\system32\riched20.dll
2013-08-24 18:12:23 ----A---- C:\Windows\system32\relog.exe
2013-08-24 18:12:23 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-08-24 18:12:23 ----A---- C:\Windows\system32\rastls.dll
2013-08-24 18:12:23 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-08-24 18:12:23 ----A---- C:\Windows\system32\drivers\RDPCDD.sys
2013-08-24 18:12:22 ----A---- C:\Windows\system32\riched32.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-24 18:12:21 ----A---- C:\Windows\system32\recdisc.exe
2013-08-24 18:12:21 ----A---- C:\Windows\system32\provsvc.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\prncache.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\printui.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\prevhost.exe
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PresentationHost.exe
2013-08-24 18:12:21 ----A---- C:\Windows\system32\powercpl.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-08-24 18:12:21 ----A---- C:\Windows\system32\PkgMgr.exe
2013-08-24 18:12:20 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-08-24 18:12:20 ----A---- C:\Windows\system32\qdv.dll
2013-08-24 18:12:20 ----A---- C:\Windows\system32\qcap.dll
2013-08-24 18:12:20 ----A---- C:\Windows\system32\puiobj.dll
2013-08-24 18:12:19 ----A---- C:\Windows\system32\shunimpl.dll
2013-08-24 18:12:19 ----A---- C:\Windows\system32\shsvcs.dll
2013-08-24 18:12:18 ----A---- C:\Windows\system32\spreview.exe
2013-08-24 18:12:17 ----A---- C:\Windows\system32\srchadmin.dll
2013-08-24 18:12:17 ----A---- C:\Windows\system32\sqlcese30.dll
2013-08-24 18:12:17 ----A---- C:\Windows\system32\spwizui.dll
2013-08-24 18:12:17 ----A---- C:\Windows\system32\sppwinob.dll
2013-08-24 18:12:16 ----A---- C:\Windows\system32\sppinst.dll
2013-08-24 18:12:16 ----A---- C:\Windows\system32\sppc.dll
2013-08-24 18:12:16 ----A---- C:\Windows\system32\spinstall.exe
2013-08-24 18:12:16 ----A---- C:\Windows\system32\schedcli.dll
2013-08-24 18:12:16 ----A---- C:\Windows\system32\sbe.dll
2013-08-24 18:12:16 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-08-24 18:12:15 ----A---- C:\Windows\system32\schedsvc.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\shsetup.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\shimgvw.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\setupugc.exe
2013-08-24 18:12:15 ----A---- C:\Windows\system32\setupcln.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\setupapi.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\SearchFolder.dll
2013-08-24 18:12:15 ----A---- C:\Windows\system32\samsrv.dll
2013-08-24 18:12:14 ----A---- C:\Windows\system32\lsasrv.dll
2013-08-24 18:12:14 ----A---- C:\Windows\system32\logoncli.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\MPSSVC.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\mprapi.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\mimefilt.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\mfc40u.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-08-24 18:12:13 ----A---- C:\Windows\system32\inetcomm.dll
2013-08-24 18:12:13 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-08-24 18:12:13 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-08-24 18:12:12 ----A---- C:\Windows\system32\imagehlp.dll
2013-08-24 18:12:12 ----A---- C:\Windows\system32\ifsutil.dll
2013-08-24 18:12:11 ----A---- C:\Windows\system32\localspl.dll
2013-08-24 18:12:11 ----A---- C:\Windows\system32\kernel32.dll
2013-08-24 18:12:11 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-08-24 18:12:11 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-08-24 18:12:11 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-08-24 18:12:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-08-24 18:12:10 ----A---- C:\Windows\system32\OobeFldr.dll
2013-08-24 18:12:10 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-08-24 18:12:10 ----A---- C:\Windows\system32\ocsetup.exe
2013-08-24 18:12:10 ----A---- C:\Windows\system32\ocsetapi.dll
2013-08-24 18:12:10 ----A---- C:\Windows\system32\ntshrui.dll
2013-08-24 18:12:10 ----A---- C:\Windows\system32\KBDMON.DLL
2013-08-24 18:12:10 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-08-24 18:12:10 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-08-24 18:12:10 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-08-24 18:12:09 ----A---- C:\Windows\system32\netjoin.dll
2013-08-24 18:12:07 ----A---- C:\Windows\system32\qmgr.dll
2013-08-24 18:12:07 ----A---- C:\Windows\system32\qdvd.dll
2013-08-24 18:12:07 ----A---- C:\Windows\system32\qasf.dll
2013-08-24 18:12:07 ----A---- C:\Windows\system32\networkmap.dll
2013-08-24 18:12:07 ----A---- C:\Windows\system32\networkexplorer.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\rastapi.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\rasppp.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\pla.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\pdh.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\mssphtb.dll
2013-08-24 18:12:06 ----A---- C:\Windows\system32\msiexec.exe
2013-08-24 18:12:06 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-08-24 18:12:06 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-08-24 18:12:03 ----A---- C:\Windows\system32\mssrch.dll
2013-08-24 18:12:02 ----A---- C:\Windows\system32\mspbda.dll
2013-08-24 18:12:02 ----A---- C:\Windows\system32\msdrm.dll
2013-08-24 18:12:02 ----A---- C:\Windows\system32\mscorier.dll
2013-08-24 18:12:01 ----A---- C:\Windows\system32\netfxperf.dll
2013-08-24 18:12:01 ----A---- C:\Windows\system32\netcfg.exe
2013-08-24 18:12:01 ----A---- C:\Windows\system32\nci.dll
2013-08-24 18:12:01 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-08-24 18:12:01 ----A---- C:\Windows\system32\mshtmled.dll
2013-08-24 18:12:01 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-08-24 18:12:01 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-08-24 18:11:59 ----A---- C:\Windows\system32\msv1_0.dll
2013-08-24 18:11:59 ----A---- C:\Windows\system32\mstscax.dll
2013-08-24 18:11:59 ----A---- C:\Windows\system32\mssvp.dll
2013-08-24 18:11:58 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-08-24 18:11:58 ----A---- C:\Windows\system32\msxml6.dll
2013-08-24 18:11:58 ----A---- C:\Windows\system32\mstsc.exe
2013-08-24 18:11:58 ----A---- C:\Windows\system32\cfgmgr32.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-08-24 18:11:57 ----A---- C:\Windows\system32\DiagCpl.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\cscapi.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\comctl32.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\clusapi.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\ci.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\certmgr.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\cdosys.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\cdd.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\cabview.dll
2013-08-24 18:11:57 ----A---- C:\Windows\system32\BlbEvents.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\fde.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\Faultrep.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-08-24 18:11:56 ----A---- C:\Windows\system32\drivers\appid.sys
2013-08-24 18:11:56 ----A---- C:\Windows\system32\dfrgui.exe
2013-08-24 18:11:56 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\dbghelp.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\dbgeng.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\cscdll.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\bitsperf.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\batmeter.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\basesrv.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\azroles.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\autoplay.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\autochk.exe
2013-08-24 18:11:56 ----A---- C:\Windows\system32\autofmt.exe
2013-08-24 18:11:56 ----A---- C:\Windows\system32\audiodev.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\aitagent.exe
2013-08-24 18:11:56 ----A---- C:\Windows\system32\ActionQueue.dll
2013-08-24 18:11:56 ----A---- C:\Windows\system32\aaclient.dll
2013-08-24 18:11:56 ----A---- C:\Windows\bfsvc.exe
2013-08-24 18:11:55 ----A---- C:\Windows\system32\ieframe.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\iccvid.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\icaapi.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\hgprint.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\gdi32.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\drvstore.dll
2013-08-24 18:11:55 ----A---- C:\Windows\system32\drivers\http.sys
2013-08-24 18:11:55 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-08-24 18:11:54 ----A---- C:\Windows\system32\elsTrans.dll
2013-08-24 18:11:54 ----A---- C:\Windows\system32\dot3cfg.dll
2013-08-24 18:11:54 ----A---- C:\Windows\system32\diskraid.exe
2013-08-24 18:11:53 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\UIRibbon.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\rdpd3d.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\dxmasf.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\dsuiext.dll
2013-08-24 18:11:53 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-08-24 18:11:53 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-08-24 18:11:53 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-08-24 18:11:52 ----A---- C:\Windows\system32\vbscript.dll
2013-08-24 18:11:52 ----A---- C:\Windows\system32\vaultsvc.dll
2013-08-24 18:11:52 ----A---- C:\Windows\system32\userinit.exe
2013-08-24 18:11:52 ----A---- C:\Windows\system32\user32.dll
2013-08-24 18:11:52 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-08-24 18:11:52 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-08-24 18:11:52 ----A---- C:\Windows\system32\tsgqec.dll
2013-08-24 18:11:52 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-08-24 18:11:52 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-08-24 18:11:52 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-08-24 18:11:51 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-08-24 18:11:51 ----A---- C:\Windows\system32\wmploc.DLL
2013-08-24 18:11:51 ----A---- C:\Windows\system32\wmp.dll
2013-08-24 18:11:51 ----A---- C:\Windows\system32\wlanui.dll
2013-08-24 18:11:51 ----A---- C:\Windows\system32\tquery.dll
2013-08-24 18:11:51 ----A---- C:\Windows\system32\tlscsp.dll
2013-08-24 18:11:51 ----A---- C:\Windows\system32\taskhost.exe
2013-08-24 18:11:51 ----A---- C:\Windows\system32\taskeng.exe
2013-08-24 18:11:51 ----A---- C:\Windows\system32\tabcal.exe
2013-08-24 18:11:51 ----A---- C:\Windows\system32\t2embed.dll
2013-08-24 18:11:51 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-08-24 18:11:51 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-08-24 18:11:50 ----A---- C:\Windows\system32\wlanpref.dll
2013-08-24 18:11:50 ----A---- C:\Windows\system32\winmm.dll
2013-08-24 18:11:49 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\zipfldr.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\xpsservices.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wwanconn.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wsnmp32.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wpdwcn.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wpdshext.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-08-24 18:11:48 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wbengine.exe
2013-08-24 18:11:48 ----A---- C:\Windows\system32\wbemcomn.dll
2013-08-24 18:11:47 ----A---- C:\Windows\system32\winlogon.exe
2013-08-24 18:11:47 ----A---- C:\Windows\system32\wdscore.dll
2013-08-24 18:11:47 ----A---- C:\Windows\system32\VSSVC.exe
2013-08-24 18:11:47 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-08-24 18:11:46 ----A---- C:\Windows\system32\wiavideo.dll
2013-08-24 18:11:46 ----A---- C:\Windows\system32\wiaservc.dll
2013-08-24 18:11:46 ----A---- C:\Windows\system32\wiarpc.dll
2013-08-24 18:11:46 ----A---- C:\Windows\system32\wevtsvc.dll
2013-08-24 18:11:46 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-08-24 18:11:46 ----A---- C:\Windows\system32\wer.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\secur32.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-08-24 18:11:45 ----A---- C:\Windows\system32\Ribbons.scr
2013-08-24 18:11:45 ----A---- C:\Windows\system32\resutils.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\repair-bde.exe
2013-08-24 18:11:45 ----A---- C:\Windows\system32\RelPost.exe
2013-08-24 18:11:45 ----A---- C:\Windows\system32\regapi.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\RDPREFDD.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\rdpencom.dll
2013-08-24 18:11:45 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-08-24 18:11:44 ----A---- C:\Windows\system32\spopk.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\slwga.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\sisbkup.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\shwebsvc.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\runonce.exe
2013-08-24 18:11:44 ----A---- C:\Windows\system32\rtutils.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\rpchttp.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-24 18:11:44 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-08-24 18:11:43 ----A---- C:\Windows\system32\syssetup.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\syncui.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\sspisrv.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\sspicli.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\spwmp.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\shdocvw.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\SessEnv.dll
2013-08-24 18:11:43 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-08-24 18:11:42 ----A---- C:\Windows\system32\schannel.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\secproc_isv.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\sdrsvc.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\sdengin2.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\sdcpl.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\sdclt.exe
2013-08-24 18:11:42 ----A---- C:\Windows\system32\scesrv.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\scavengeui.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\ReAgentc.exe
2013-08-24 18:11:42 ----A---- C:\Windows\system32\rdpdd.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\rasmans.dll
2013-08-24 18:11:42 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-08-24 18:11:41 ----A---- C:\Windows\system32\rstrui.exe
2013-08-24 18:11:41 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-08-24 18:11:41 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-08-24 18:11:41 ----A---- C:\Windows\system32\QUTIL.DLL
2013-08-24 18:11:41 ----A---- C:\Windows\system32\Query.dll
2013-08-24 18:11:41 ----A---- C:\Windows\system32\qedit.dll
2013-08-24 18:11:41 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-08-24 18:11:40 ----A---- C:\Windows\system32\mswsock.dll
2013-08-24 18:11:40 ----A---- C:\Windows\system32\msinfo32.exe
2013-08-24 18:11:40 ----A---- C:\Windows\system32\msieftp.dll
2013-08-24 18:11:40 ----A---- C:\Windows\system32\msftedit.dll
2013-08-24 18:11:40 ----A---- C:\Windows\system32\msdmo.dll
2013-08-24 18:11:40 ----A---- C:\Windows\system32\mscms.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\napdsnap.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\msyuv.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\msutb.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\mstime.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\msorcl32.dll
2013-08-24 18:11:39 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-08-24 18:11:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-08-24 18:11:37 ----A---- C:\Windows\system32\profprov.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\prntvpt.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\pnidui.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\photowiz.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-08-24 18:11:37 ----A---- C:\Windows\system32\OpcServices.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\olethk32.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\ole32.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\migisol.dll
2013-08-24 18:11:37 ----A---- C:\Windows\system32\drivers\pci.sys
2013-08-24 18:11:36 ----A---- C:\Windows\system32\profsvc.dll
2013-08-24 18:11:36 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-08-24 18:11:35 ----A---- C:\Windows\system32\netshell.dll
2013-08-24 18:11:35 ----A---- C:\Windows\system32\netbtugc.exe
2013-08-24 18:11:35 ----A---- C:\Windows\system32\net1.exe
2013-08-24 18:11:35 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-08-24 18:11:34 ----A---- C:\Windows\system32\netdiagfx.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wshirda.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wsdchngr.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wpccpl.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wmpshell.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wmpmde.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wcncsvc.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\wavemsp.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\w32tm.exe
2013-08-24 18:11:32 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\vdsbas.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\userenv.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\unimdmat.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\TSpkg.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\tsbyuv.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\odbctrac.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\odbcconf.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\nshwfp.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\nrpsrv.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\nltest.exe
2013-08-24 18:11:32 ----A---- C:\Windows\system32\netlogon.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\netcenter.dll
2013-08-24 18:11:32 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-08-24 18:11:32 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-08-24 18:11:32 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-08-24 18:11:32 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-08-24 18:11:31 ----A---- C:\Windows\system32\wmpeffects.dll
2013-08-24 18:11:30 ----A---- C:\Windows\system32\wusa.exe
2013-08-24 18:11:30 ----A---- C:\Windows\system32\WsmSvc.dll
2013-08-24 18:11:30 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-08-24 18:11:30 ----A---- C:\Windows\system32\wmpdxm.dll
2013-08-24 18:11:29 ----A---- C:\Windows\system32\winload.exe
2013-08-24 18:11:29 ----A---- C:\Windows\system32\wininet.dll
2013-08-24 18:11:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-08-24 18:11:29 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-08-24 18:11:29 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2013-08-24 18:11:29 ----A---- C:\Windows\system32\win32spl.dll
2013-08-24 18:11:29 ----A---- C:\Windows\system32\webservices.dll
2013-08-24 18:11:29 ----A---- C:\Windows\system32\WebClnt.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\wlanmsm.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\wkscli.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\wintrust.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\winsta.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\WinSCard.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\winresume.exe
2013-08-24 18:11:28 ----A---- C:\Windows\system32\stobject.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\srcore.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\sqmapi.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\sppuinotify.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\sppsvc.exe
2013-08-24 18:11:28 ----A---- C:\Windows\system32\sppcomapi.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\SndVol.exe
2013-08-24 18:11:28 ----A---- C:\Windows\system32\SmiEngine.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\slui.exe
2013-08-24 18:11:28 ----A---- C:\Windows\system32\shgina.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\shell32.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-08-24 18:11:28 ----A---- C:\Windows\system32\drivers\srv.sys
2013-08-24 18:11:27 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\thumbcache.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\termsrv.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\termmgr.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\taskmgr.exe
2013-08-24 18:11:26 ----A---- C:\Windows\system32\taskcomp.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\takeown.exe
2013-08-24 18:11:26 ----A---- C:\Windows\system32\sethc.exe
2013-08-24 18:11:26 ----A---- C:\Windows\system32\setbcdlocale.dll
2013-08-24 18:11:26 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-08-24 18:11:26 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-08-24 18:11:26 ----A---- C:\Windows\system32\drivers\tdpipe.sys
2013-08-24 18:11:25 ----A---- C:\Windows\system32\sysclass.dll
2013-08-24 18:11:24 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-08-24 18:11:24 ----A---- C:\Windows\system32\ie4uinit.exe
2013-08-24 18:11:24 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-08-24 18:11:24 ----A---- C:\Windows\system32\hgcpl.dll
2013-08-24 18:11:24 ----A---- C:\Windows\system32\hbaapi.dll
2013-08-24 18:11:24 ----A---- C:\Windows\system32\gpsvc.dll
2013-08-24 18:11:24 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-08-24 18:11:24 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-08-24 18:11:24 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-08-24 18:11:24 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-08-24 18:11:23 ----A---- C:\Windows\system32\iesysprep.dll
2013-08-24 18:11:23 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-08-24 18:11:23 ----A---- C:\Windows\system32\ftp.exe
2013-08-24 18:11:23 ----A---- C:\Windows\system32\fontsub.dll
2013-08-24 18:11:23 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-08-24 18:11:23 ----A---- C:\Windows\system32\findstr.exe
2013-08-24 18:11:23 ----A---- C:\Windows\system32\fdeploy.dll
2013-08-24 18:11:23 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\mfds.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\mf.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\manage-bde.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\luainstall.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDSG.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDSF.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\iyuv_32.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\iTVData.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\isoburn.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\iscsium.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\iscsicli.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\inseng.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\inetpp.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\inetmib1.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\cmd.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\CertPolEng.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\cca.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\cabinet.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\browseui.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\browser.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\BFE.DLL
2013-08-24 18:11:22 ----A---- C:\Windows\system32\azroleui.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\autoconv.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\audiosrv.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\AudioSes.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\audiodg.exe
2013-08-24 18:11:22 ----A---- C:\Windows\system32\atmlib.dll
2013-08-24 18:11:22 ----A---- C:\Windows\system32\atmfd.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\XpsPrint.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\eapphost.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\eappgnui.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\eapp3hst.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\DXP.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\DWrite.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dwmcore.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\cdrom.sys

[_Antti_]

2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\afd.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dpx.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dpnaddr.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dot3svc.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dot3msm.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dot3api.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\dnscmmc.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\djoin.exe
2013-08-24 18:11:21 ----A---- C:\Windows\system32\credssp.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\CPFilters.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\conhost.exe
2013-08-24 18:11:21 ----A---- C:\Windows\system32\calc.exe
2013-08-24 18:11:21 ----A---- C:\Windows\system32\aepdu.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\aeinv.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\actxprxy.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-08-24 18:11:21 ----A---- C:\Windows\system32\ActionCenter.dll
2013-08-24 18:11:19 ----A---- C:\Windows\system32\diagperf.dll
2013-08-24 18:11:19 ----A---- C:\Windows\system32\d2d1.dll
2013-08-24 18:05:24 ----D---- C:\Windows\system32\EventProviders
2013-08-24 11:48:00 ----D---- C:\Users\Jan\AppData\Roaming\.minecraft
2013-08-24 10:51:54 ----D---- C:\ProgramData\Nexon
2013-08-24 10:38:56 ----D---- C:\Nexon
2013-08-24 10:38:49 ----D---- C:\ProgramData\NexonEU
2013-08-23 06:39:15 ----A---- C:\Windows\system32\atitmmxx.dll
2013-08-23 06:39:15 ----A---- C:\Windows\system32\atipdlxx.dll
2013-08-23 06:39:13 ----A---- C:\Windows\system32\atioglxx.dll
2013-08-23 06:39:13 ----A---- C:\Windows\system32\atimuixx.dll
2013-08-23 06:39:13 ----A---- C:\Windows\system32\atimpc32.dll
2013-08-23 06:39:13 ----A---- C:\Windows\system32\amdpcom32.dll
2013-08-23 06:39:11 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2013-08-23 06:39:11 ----A---- C:\Windows\system32\atiicdxx.dat
2013-08-23 06:39:09 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\atiesrxx.exe
2013-08-23 06:39:09 ----A---- C:\Windows\system32\atieclxx.exe
2013-08-23 06:39:09 ----A---- C:\Windows\system32\ATIDEMGX.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\aticalrt.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\aticaldd.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\aticalcl.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\atibtmon.exe
2013-08-23 06:39:09 ----A---- C:\Windows\system32\atiadlxx.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\ati2edxx.dll
2013-08-23 06:20:32 ----D---- C:\Windows\Panther
2013-08-23 05:55:59 ----HD---- C:\$WINDOWS.~Q
2013-08-23 05:46:46 ----HD---- C:\$INPLACE.~TR
2013-08-22 22:43:42 ----D---- C:\ProgramData\Uniblue
2013-08-22 22:43:26 ----D---- C:\Users\Jan\AppData\Roaming\Uniblue
2013-08-22 22:43:26 ----D---- C:\Program Files\Uniblue
2013-08-22 22:30:11 ----D---- C:\Program Files\Common Files\Java
2013-08-22 22:29:48 ----A---- C:\Windows\system32\javaws.exe
2013-08-22 22:29:38 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-08-22 22:29:38 ----A---- C:\Windows\system32\javaw.exe
2013-08-22 22:29:38 ----A---- C:\Windows\system32\java.exe
2013-08-22 22:29:14 ----D---- C:\Program Files\Java
2013-08-22 22:11:28 ----N---- C:\Windows\system32\MpSigStub.exe
2013-08-22 21:45:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-08-22 21:44:15 ----A---- C:\Windows\system32\wups2.dll
2013-08-22 21:44:14 ----A---- C:\Windows\system32\wuauclt.exe
2013-08-22 21:44:12 ----A---- C:\Windows\system32\wucltux.dll
2013-08-22 21:44:11 ----A---- C:\Windows\system32\wuaueng.dll
2013-08-22 21:42:07 ----A---- C:\Windows\system32\wups.dll
2013-08-22 21:42:07 ----A---- C:\Windows\system32\wudriver.dll
2013-08-22 21:42:07 ----A---- C:\Windows\system32\wuapi.dll
2013-08-22 21:41:20 ----A---- C:\Windows\system32\wuwebv.dll
2013-08-22 21:41:20 ----A---- C:\Windows\system32\wuapp.exe
2013-08-22 21:37:21 ----SHD---- C:\Recovery
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Šablony
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Plocha
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Oblíbené položky
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Nabídka Start
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Dokumenty
2013-08-22 21:37:20 ----SHD---- C:\ProgramData\Data aplikací
2013-08-22 21:29:33 ----ASH---- C:\hiberfil.sys
2013-08-22 21:15:09 ----A---- C:\Windows\system32\emptyregdb.dat
2013-08-22 20:35:49 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2013-08-22 20:35:49 ----D---- C:\Users\Jan\AppData\Roaming\Media Center Programs
2013-08-22 20:34:26 ----D---- C:\Program Files\CONEXANT
2013-08-22 20:34:07 ----D---- C:\Windows\system32\RTCOM
2013-08-22 20:33:55 ----D---- C:\Program Files\Apoint
2013-08-22 20:23:02 ----D---- C:\Windows\Prefetch
2013-08-21 20:13:34 ----D---- C:\Windows\Sun
2013-08-19 08:04:35 ----D---- C:\Program Files\Mozilla Firefox
2013-08-15 15:07:43 ----D---- C:\ProgramData\WindowsSearch
2013-08-14 20:24:37 ----D---- C:\Users\Jan\AppData\Roaming\FileZilla
2013-08-14 20:24:29 ----D---- C:\Program Files\FileZilla FTP Client
2013-08-09 15:10:00 ----D---- C:\Users\Jan\AppData\Roaming\SFBot
2013-08-08 18:46:08 ----D---- C:\ProgramData\FLEXnet
2013-08-06 21:00:55 ----D---- C:\Update
2013-08-06 17:52:19 ----D---- C:\ProgramData\boost_interprocess
2013-08-06 14:45:10 ----A---- C:\AdwCleaner[S1].txt
2013-08-06 12:21:06 ----D---- C:\Users\Jan\AppData\Roaming\KYE Gila
2013-08-06 12:20:48 ----D---- C:\Program Files\Genius
2013-08-06 12:20:48 ----A---- C:\Windows\unins000.exe
2013-08-06 12:20:48 ----A---- C:\Windows\unins000.dat
2013-08-05 20:48:17 ----D---- C:\rsit
2013-08-05 20:48:17 ----D---- C:\Program Files\trend micro
2013-08-05 20:20:43 ----D---- C:\temp
2013-08-05 20:17:06 ----D---- C:\Program Files\PFConfig
2013-08-05 19:13:57 ----A---- C:\Windows\system32\cd.dat
2013-08-05 17:22:47 ----D---- C:\ProgramData\Sun
2013-08-05 17:22:39 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-08-05 17:22:39 ----A---- C:\Windows\system32\deployJava1.dll
2013-08-05 15:13:23 ----D---- C:\Program Files\OpenTTD
2013-08-03 17:14:07 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2013-08-03 17:13:50 ----DC---- C:\Windows\system32\DRVSTORE
2013-08-03 17:13:50 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2013-08-03 17:13:33 ----D---- C:\Program Files\Oracle
2013-08-03 10:53:22 ----ASH---- C:\Users\Jan\AppData\Roaming\desktop.ini
2013-08-02 07:00:58 ----D---- C:\Program Files\LOLReplay
2013-07-30 07:26:02 ----D---- C:\Users\Jan\AppData\Roaming\RotMG.Production
2013-07-30 07:14:34 ----D---- C:\Program Files\Common Files\Steam
2013-07-30 07:14:31 ----D---- C:\Program Files\Steam
2013-07-29 18:47:35 ----D---- C:\Program Files\CCleaner
2013-07-29 07:08:21 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-07-29 07:08:20 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-07-29 07:06:00 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2013-07-29 07:06:00 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-07-29 07:05:59 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-07-29 07:05:59 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-07-29 07:05:59 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-07-29 07:05:59 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2013-07-29 07:05:59 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2013-07-29 07:05:58 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-07-29 07:05:57 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-07-29 07:05:53 ----A---- C:\Windows\system32\aswBoot.exe
2013-07-29 07:02:56 ----A---- C:\Windows\avastSS.scr
2013-07-29 07:02:06 ----D---- C:\Program Files\AVAST Software
2013-07-29 07:01:38 ----D---- C:\ProgramData\AVAST Software

======List of files/folders modified in the last 1 month======

2013-08-27 05:59:40 ----D---- C:\Windows\Temp
2013-08-27 05:58:55 ----D---- C:\Users\Jan\AppData\Roaming\Skype
2013-08-27 05:54:06 ----D---- C:\Windows\system32\config
2013-08-26 21:05:37 ----D---- C:\Users\Jan\AppData\Roaming\TS3Client
2013-08-26 19:06:56 ----D---- C:\Users\Jan\AppData\Roaming\uTorrent
2013-08-26 14:33:29 ----RD---- C:\Program Files
2013-08-26 12:41:20 ----D---- C:\Windows\system32\drivers
2013-08-26 10:44:54 ----D---- C:\ProgramData\PMB Files
2013-08-26 07:24:40 ----D---- C:\Windows\System32
2013-08-26 07:24:40 ----D---- C:\Windows\inf
2013-08-25 17:10:23 ----D---- C:\Windows\Microsoft.NET
2013-08-25 17:10:11 ----RSD---- C:\Windows\assembly
2013-08-25 16:37:28 ----D---- C:\Windows\LiveKernelReports
2013-08-24 19:42:09 ----D---- C:\Windows\winsxs
2013-08-24 19:42:06 ----SHD---- C:\Boot
2013-08-24 19:39:50 ----D---- C:\Windows
2013-08-24 19:39:01 ----D---- C:\Windows\system32\DriverStore
2013-08-24 19:37:22 ----D---- C:\Windows\system32\catroot2
2013-08-24 19:32:17 ----D---- C:\Program Files\Windows Sidebar
2013-08-24 19:32:17 ----D---- C:\Program Files\Windows Mail
2013-08-24 19:32:17 ----D---- C:\Program Files\Internet Explorer
2013-08-24 19:32:17 ----D---- C:\Program Files\DVD Maker
2013-08-24 19:32:16 ----D---- C:\Program Files\Windows Portable Devices
2013-08-24 19:32:16 ----D---- C:\Program Files\Windows Photo Viewer
2013-08-24 19:32:16 ----D---- C:\Program Files\Windows Media Player
2013-08-24 19:32:16 ----D---- C:\Program Files\Windows Journal
2013-08-24 19:32:10 ----D---- C:\Windows\servicing
2013-08-24 19:32:10 ----D---- C:\Windows\ehome
2013-08-24 19:32:10 ----D---- C:\Program Files\Windows Defender
2013-08-24 19:31:46 ----D---- C:\Windows\system32\sk-SK
2013-08-24 19:31:46 ----D---- C:\Windows\system32\da-DK
2013-08-24 19:31:46 ----D---- C:\Windows\PolicyDefinitions
2013-08-24 19:31:45 ----D---- C:\Windows\system32\en-US
2013-08-24 19:31:44 ----D---- C:\Windows\system32\el-GR
2013-08-24 19:31:43 ----D---- C:\Windows\system32\oobe
2013-08-24 19:31:42 ----D---- C:\Windows\system32\sysprep
2013-08-24 19:31:42 ----D---- C:\Windows\system32\sv-SE
2013-08-24 19:31:42 ----D---- C:\Windows\system32\pt
2013-08-24 19:31:42 ----D---- C:\Windows\system32\migration
2013-08-24 19:31:42 ----D---- C:\Windows\system32\hu
2013-08-24 19:31:42 ----D---- C:\Windows\system32\AdvancedInstallers
2013-08-24 19:31:36 ----D---- C:\Windows\system32\Setup
2013-08-24 19:31:36 ----D---- C:\Windows\system32\cs
2013-08-24 19:31:35 ----D---- C:\Windows\system32\cs-CZ
2013-08-24 19:31:34 ----D---- C:\Windows\system32\hu-HU
2013-08-24 19:31:32 ----D---- C:\Windows\system32\pt-PT
2013-08-24 19:31:31 ----D---- C:\Windows\system32\manifeststore
2013-08-24 19:31:31 ----D---- C:\Windows\system32\es-ES
2013-08-24 19:31:31 ----D---- C:\Windows\system32\en
2013-08-24 19:31:30 ----D---- C:\Windows\system32\pl-PL
2013-08-24 19:31:29 ----D---- C:\Windows\system32\sppui
2013-08-24 19:31:28 ----D---- C:\Windows\system32\ro-RO
2013-08-24 19:31:27 ----D---- C:\Windows\system32\drivers\pt-PT
2013-08-24 19:31:27 ----D---- C:\Windows\system32\drivers\pl-PL
2013-08-24 19:31:27 ----D---- C:\Windows\system32\drivers\hu-HU
2013-08-24 19:31:27 ----D---- C:\Windows\system32\drivers\el-GR
2013-08-24 19:31:26 ----D---- C:\Windows\system32\tr-TR
2013-08-24 19:31:26 ----D---- C:\Windows\system32\drivers\tr-TR
2013-08-24 19:31:26 ----D---- C:\Windows\system32\drivers\sv-SE
2013-08-24 19:31:26 ----D---- C:\Windows\system32\drivers\en-US
2013-08-24 19:31:26 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-08-24 19:31:21 ----D---- C:\Windows\system32\wbem
2013-08-24 19:31:20 ----D---- C:\Windows\system32\migwiz
2013-08-24 19:31:19 ----D---- C:\Windows\system32\Dism
2013-08-24 19:31:02 ----RSD---- C:\Windows\Fonts
2013-08-24 19:31:01 ----D---- C:\Windows\AppPatch
2013-08-24 19:30:47 ----D---- C:\Windows\system32\Boot
2013-08-24 19:22:36 ----A---- C:\Windows\system32\msclmd.dll
2013-08-24 19:07:20 ----D---- C:\Windows\system32\catroot
2013-08-24 18:09:23 ----SHD---- C:\System Volume Information
2013-08-24 17:21:42 ----D---- C:\Windows\system32\wdi
2013-08-24 10:51:54 ----HD---- C:\ProgramData
2013-08-24 09:57:04 ----SHD---- C:\Windows\Installer
2013-08-23 19:49:16 ----D---- C:\Program Files\Common Files\System
2013-08-23 19:49:14 ----D---- C:\Windows\IME
2013-08-23 19:49:13 ----D---- C:\Windows\system32\winrm
2013-08-23 19:49:12 ----D---- C:\Windows\system32\slmgr
2013-08-23 19:49:12 ----D---- C:\Windows\system32\fi-FI
2013-08-23 19:48:51 ----D---- C:\Windows\system32\XPSViewer
2013-08-23 19:48:49 ----D---- C:\Windows\system32\WCN
2013-08-23 19:48:49 ----D---- C:\Windows\system32\MUI
2013-08-23 19:48:49 ----D---- C:\Windows\system32\drivers\UMDF
2013-08-23 19:48:42 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2013-08-23 19:48:39 ----D---- C:\Windows\system32\com
2013-08-23 19:47:04 ----D---- C:\Windows\system32\bg-BG
2013-08-23 19:46:22 ----D---- C:\Windows\en-US
2013-08-23 19:46:01 ----D---- C:\Windows\Speech
2013-08-23 15:58:10 ----D---- C:\Windows\system32\Tasks
2013-08-23 15:58:09 ----D---- C:\Windows\Tasks
2013-08-23 06:39:18 ----A---- C:\Windows\system32\atiumdva.dll
2013-08-23 06:39:17 ----A---- C:\Windows\system32\atiumdag.dll
2013-08-23 06:39:09 ----A---- C:\Windows\system32\atidxx32.dll
2013-08-23 06:20:17 ----RASH---- C:\BOOTSECT.BAK
2013-08-23 06:18:29 ----SD---- C:\Windows\system32\Microsoft
2013-08-22 22:30:11 ----D---- C:\Program Files\Common Files
2013-08-22 22:17:11 ----SHD---- C:\Windows\system32\AI_RecycleBin
2013-08-22 21:50:49 ----D---- C:\Windows\system32\LogFiles
2013-08-22 21:39:06 ----SD---- C:\ProgramData\Microsoft
2013-08-22 21:38:21 ----D---- C:\Windows\system32\restore
2013-08-22 21:37:21 ----D---- C:\Windows\system32\Recovery
2013-08-22 21:37:20 ----D---- C:\Program Files\Windows NT
2013-08-22 21:37:19 ----D---- C:\Windows\SoftwareDistribution
2013-08-22 21:26:13 ----D---- C:\Windows\Registration
2013-08-22 21:14:44 ----RSD---- C:\Windows\Media
2013-08-22 21:06:27 ----RD---- C:\Users
2013-08-22 21:04:28 ----D---- C:\Users\Jan\AppData\Roaming\WinRAR
2013-08-22 21:04:20 ----D---- C:\Users\Jan\AppData\Roaming\Sony Corporation
2013-08-22 21:04:19 ----D---- C:\Users\Jan\AppData\Roaming\Riot Games
2013-08-22 21:04:18 ----D---- C:\Users\Jan\AppData\Roaming\Mozilla
2013-08-22 21:04:12 ----D---- C:\Users\Jan\AppData\Roaming\Macromedia
2013-08-22 21:04:12 ----D---- C:\Users\Jan\AppData\Roaming\LolClient
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\Identities
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\HpUpdate
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\DivX
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\ATI
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\ArcSoft
2013-08-22 21:04:11 ----D---- C:\Users\Jan\AppData\Roaming\Adobe
2013-08-22 20:51:51 ----D---- C:\Windows\WindowsMobile
2013-08-22 20:51:51 ----D---- C:\Windows\twain_32
2013-08-22 20:51:51 ----D---- C:\Windows\system32\zh-TW
2013-08-22 20:51:50 ----D---- C:\Windows\system32\zh-HK
2013-08-22 20:51:50 ----D---- C:\Windows\system32\zh-CN
2013-08-22 20:51:50 ----D---- C:\Windows\system32\uk-UA
2013-08-22 20:51:50 ----D---- C:\Windows\system32\th-TH
2013-08-22 20:51:49 ----D---- C:\Windows\system32\sr-Latn-CS
2013-08-22 20:51:44 ----D---- C:\Windows\system32\sl-SI
2013-08-22 20:51:44 ----D---- C:\Windows\system32\sda
2013-08-22 20:51:44 ----D---- C:\Windows\system32\ru-RU
2013-08-22 20:51:43 ----D---- C:\Windows\system32\RemInst
2013-08-22 20:51:43 ----D---- C:\Windows\system32\pt-BR
2013-08-22 20:51:42 ----D---- C:\Windows\system32\OEM
2013-08-22 20:51:42 ----D---- C:\Windows\system32\nl-NL
2013-08-22 20:51:42 ----D---- C:\Windows\system32\NDF
2013-08-22 20:51:42 ----D---- C:\Windows\system32\nb-NO
2013-08-22 20:51:42 ----D---- C:\Windows\system32\Macromed
2013-08-22 20:51:42 ----D---- C:\Windows\system32\lv-LV
2013-08-22 20:51:42 ----D---- C:\Windows\system32\lt-LT
2013-08-22 20:51:42 ----D---- C:\Windows\system32\ko-KR
2013-08-22 20:51:42 ----D---- C:\Windows\system32\ja-JP
2013-08-22 20:51:42 ----D---- C:\Windows\system32\it-IT
2013-08-22 20:51:41 ----D---- C:\Windows\system32\hr-HR
2013-08-22 20:51:41 ----D---- C:\Windows\system32\he-IL
2013-08-22 20:51:41 ----D---- C:\Windows\system32\fr-FR
2013-08-22 20:51:41 ----D---- C:\Windows\system32\et-EE
2013-08-22 20:51:41 ----D---- C:\Windows\system32\es-MX
2013-08-22 20:51:41 ----D---- C:\Windows\system32\es-AR
2013-08-22 20:51:40 ----D---- C:\Windows\system32\drivers\sr-Latn-CS
2013-08-22 20:51:40 ----D---- C:\Windows\system32\drivers\etc
2013-08-22 20:51:40 ----D---- C:\Windows\system32\de-DE
2013-08-22 20:51:38 ----D---- C:\Windows\system32\Branding
2013-08-22 20:51:38 ----D---- C:\Windows\system32\ar-SA
2013-08-22 20:51:35 ----D---- C:\Windows\ShellNew
2013-08-22 20:51:34 ----D---- C:\Windows\rescache
2013-08-22 20:51:34 ----D---- C:\Windows\OEMCert
2013-08-22 20:51:34 ----D---- C:\Windows\nap
2013-08-22 20:51:30 ----D---- C:\Windows\Logs
2013-08-22 20:51:30 ----D---- C:\Windows\InstDrvs
2013-08-22 20:51:25 ----D---- C:\Windows\Help
2013-08-22 20:51:15 ----D---- C:\Windows\Drivers
2013-08-22 20:51:06 ----D---- C:\Windows\DigitalLocker
2013-08-22 20:51:06 ----D---- C:\Windows\Boot
2013-08-22 20:50:59 ----D---- C:\ProgramData\Visan
2013-08-22 20:50:59 ----D---- C:\ProgramData\Uninstall
2013-08-22 20:50:59 ----D---- C:\ProgramData\Sony Corporation
2013-08-22 20:50:27 ----D---- C:\ProgramData\Sonic
2013-08-22 20:50:27 ----D---- C:\ProgramData\Skype
2013-08-22 20:50:26 ----D---- C:\ProgramData\SiteAdvisor
2013-08-22 20:50:26 ----D---- C:\ProgramData\Roaming
2013-08-22 20:50:24 ----D---- C:\ProgramData\Mozilla
2013-08-22 20:50:24 ----D---- C:\ProgramData\Microsoft Help
2013-08-22 20:50:06 ----D---- C:\ProgramData\McAfee
2013-08-22 20:50:06 ----D---- C:\ProgramData\Intel
2013-08-22 20:50:06 ----D---- C:\ProgramData\HP Photo Creations
2013-08-22 20:50:06 ----D---- C:\ProgramData\HP
2013-08-22 20:50:02 ----D---- C:\ProgramData\ATI
2013-08-22 20:50:02 ----D---- C:\ProgramData\ArcSoft
2013-08-22 20:50:02 ----D---- C:\ProgramData\Adobe
2013-08-22 20:49:26 ----D---- C:\Program Files\WinRAR
2013-08-22 20:49:25 ----D---- C:\Program Files\Windows Photo Gallery
2013-08-22 20:49:25 ----D---- C:\Program Files\Windows Collaboration
2013-08-22 20:49:25 ----D---- C:\Program Files\Windows Calendar
2013-08-22 20:49:25 ----D---- C:\Program Files\WIDCOMM
2013-08-22 20:49:25 ----D---- C:\Program Files\TP-LINK
2013-08-22 20:49:09 ----D---- C:\Program Files\SpeedFan
2013-08-22 20:49:09 ----D---- C:\Program Files\sony
2013-08-22 20:48:35 ----RD---- C:\Program Files\Skype
2013-08-22 20:48:35 ----D---- C:\Program Files\Roxio
2013-08-22 20:48:31 ----D---- C:\Program Files\Realtek
2013-08-22 20:48:31 ----D---- C:\Program Files\Picasa2
2013-08-22 20:48:29 ----D---- C:\Program Files\Pando Networks
2013-08-22 20:48:28 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-22 20:48:27 ----D---- C:\Program Files\Microsoft.NET
2013-08-22 20:48:27 ----D---- C:\Program Files\Microsoft Works
2013-08-22 20:48:20 ----D---- C:\Program Files\Microsoft Office Suite Activation Assistant
2013-08-22 20:48:11 ----D---- C:\Program Files\Microsoft Office
2013-08-22 20:47:52 ----D---- C:\Program Files\Microsoft Games
2013-08-22 20:47:52 ----D---- C:\Program Files\McAfee
2013-08-22 20:47:31 ----D---- C:\Program Files\InterVideo
2013-08-22 20:47:29 ----HD---- C:\Program Files\InstallShield Installation Information
2013-08-22 20:47:29 ----D---- C:\Program Files\Intel
2013-08-22 20:47:23 ----D---- C:\Program Files\HP Photo Creations
2013-08-22 20:47:23 ----D---- C:\Program Files\HP
2013-08-22 20:47:20 ----D---- C:\Program Files\Google
2013-08-22 20:47:03 ----D---- C:\Program Files\Dolby
2013-08-22 20:47:03 ----D---- C:\Program Files\DivX
2013-08-22 20:44:20 ----D---- C:\Program Files\Common Files\Sony Shared
2013-08-22 20:44:17 ----D---- C:\Program Files\Common Files\Sonic Shared
2013-08-22 20:44:17 ----D---- C:\Program Files\Common Files\Skype
2013-08-22 20:44:17 ----D---- C:\Program Files\Common Files\Roxio Shared
2013-08-22 20:44:14 ----D---- C:\Program Files\Common Files\PX Storage Engine
2013-08-22 20:44:14 ----D---- C:\Program Files\Common Files\microsoft shared
2013-08-22 20:44:01 ----D---- C:\Program Files\Common Files\McAfee
2013-08-22 20:44:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-08-22 20:44:01 ----D---- C:\Program Files\Common Files\InterVideo
2013-08-22 20:44:00 ----D---- C:\Program Files\Common Files\Intel
2013-08-22 20:44:00 ----D---- C:\Program Files\Common Files\InstallShield
2013-08-22 20:44:00 ----D---- C:\Program Files\Common Files\DESIGNER
2013-08-22 20:44:00 ----D---- C:\Program Files\Common Files\ArcSoft
2013-08-22 20:43:59 ----D---- C:\Program Files\Common Files\Adobe
2013-08-22 20:43:13 ----D---- C:\Program Files\Cisco
2013-08-22 20:43:12 ----D---- C:\Program Files\Big Fish Games Game Suite
2013-08-22 20:42:53 ----D---- C:\Program Files\ATI Technologies
2013-08-22 20:42:52 ----D---- C:\Program Files\ATI
2013-08-22 20:42:51 ----D---- C:\Program Files\ArcSoft
2013-08-22 20:42:29 ----D---- C:\Program Files\Adobe
2013-08-22 20:34:36 ----D---- C:\Windows\debug
2013-08-22 20:31:38 ----D---- C:\Windows\system32\CodeIntegrity

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2013-05-09 204784]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 49376]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-07-29 175176]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-10-17 327192]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-06-16 44944]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2012-12-29 24184]
R1 aswFW;avast! TDI Firewall Driver; \??\C:\Windows\system32\drivers\aswFW.sys [2013-05-09 104752]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2013-05-09 21576]
R1 AswRdr;aswRdr; C:\Windows\system32\drivers\AswRdr.sys [2013-05-09 49760]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-07-29 770344]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-07-29 369584]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 56080]
R1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys [2008-11-25 10216]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-07-04 188176]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-07-04 94480]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 66336]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-01-25 12672]
R2 regi;regi; \??\C:\Windows\system32\drivers\regi.sys [2007-04-18 11032]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2008-10-23 68608]
R2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdptsk.sys [2008-10-23 46592]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2008-01-25 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-09-30 164400]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-24 17920]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-08-23 5091328]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-01-25 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-01-25 207360]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-10-17 2149912]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2008-10-24 150560]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2008-08-22 9344]
R3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-01-05 32768]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-01-25 659968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-07-04 104720]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-06-07 131000]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; c:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-08-23 172032]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-05-09 137960]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-10-15 555560]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-08-21 860160]
R2 ExpatShieldService;Expat Shield Service; C:\Program Files\Expat Shield\bin\openvpnas.exe [2012-01-17 331608]
R2 ExpatSrv;Expat Shield Routing Service; C:\Program Files\Expat Shield\HssWPR\hsssrv.exe [2012-01-05 363336]
R2 ExpatWd;Expat Shield Monitoring Service; C:\Program Files\Expat Shield\bin\hsswd.exe [2012-01-05 329544]
R2 IviRegMgr;IviRegMgr; c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 NSUService;NSUService; C:\Program Files\sony\Network Utility\NSUService.exe [2008-12-05 303104]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-08-21 466944]
R2 RtkAudioService;Realtek Audio Service; C:\Windows\RtkAudioService.exe [2008-10-17 102400]
R2 uCamMonitor;CamMonitor; C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files\sony\VAIO Event Service\VESMgr.exe [2008-11-06 203624]
R2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2008-11-25 415584]
R2 VCFw;VAIO Content Folder Watcher; C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-09-12 446464]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2008-09-08 192512]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2008-01-25 386560]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-07-27 563624]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2008-09-08 279848]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24 257416]
S3 ExpatTrayService;Expat Shield Tray Service; C:\Program Files\Expat Shield\bin\ExpatTrayService.EXE [2012-01-17 77520]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-11-29 651720]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-29 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-22 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-07-22 156656]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-19 117656]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2008-05-20 53248]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2008-05-20 53248]
S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [2008-10-21 103712]
S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [2008-10-21 353568]
S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [2008-10-21 62752]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2008-05-20 77824]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2008-09-08 73728]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-10-02 369952]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-09-19 83232]

-----------------EOF-----------------

[Rudy]

Poprosím o log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[_Antti_]

Tady je.

ComboFix 13-08-27.02 - Jan 27.08.2013 20:06:39.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3039.1851 [GMT 2:00]
Spuštěný z: c:\users\Jan\Desktop\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\windows\system32\pt
c:\windows\system32\pt\AuthFWSnapIn.Resources.dll
c:\windows\system32\pt\AuthFWWizFwk.Resources.dll
c:\windows\system32\pt\Narrator.resources.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-07-27 do 2013-08-27 )))))))))))))))))))))))))))))))
.
.
2013-08-27 18:17 . 2013-08-27 18:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-26 12:33 . 2013-08-26 12:33 -------- d-----w- c:\program files\VideoLAN
2013-08-25 14:51 . 2013-08-25 14:51 -------- d-----w- C:\Expat Shield
2013-08-25 14:51 . 2013-08-25 14:51 -------- d-----w- c:\program files\Expat Shield
2013-08-24 17:28 . 2013-08-24 17:28 -------- d-----w- c:\windows\system32\SPReview
2013-08-24 16:12 . 2010-11-20 02:30 173440 ----a-w- c:\windows\system32\drivers\rdyboost.sys
2013-08-24 16:11 . 2010-11-20 02:19 3215872 ----a-w- c:\windows\system32\mstscax.dll
2013-08-24 16:05 . 2013-08-24 16:05 -------- d-----w- c:\windows\system32\EventProviders
2013-08-24 09:07 . 2013-08-27 09:50 60872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4073818A-F1D0-4FDD-BB20-0778FFAA238B}\offreg.dll
2013-08-24 08:51 . 2013-08-24 08:51 -------- d-----w- c:\programdata\Nexon
2013-08-24 08:38 . 2013-08-24 08:38 -------- d-----w- C:\Nexon
2013-08-23 04:20 . 2013-08-27 14:57 -------- d-----w- c:\windows\Panther
2013-08-23 03:55 . 2013-08-22 19:16 -------- d-----w- C:\$WINDOWS.~Q
2013-08-23 03:46 . 2013-08-23 03:51 -------- d-----w- C:\$INPLACE.~TR
2013-08-22 20:43 . 2013-08-22 20:43 -------- d-----w- c:\programdata\Uniblue
2013-08-22 20:43 . 2013-08-22 20:43 -------- d-----w- c:\program files\Uniblue
2013-08-22 20:30 . 2013-08-22 20:30 -------- d-----w- c:\program files\Common Files\Java
2013-08-22 20:29 . 2013-08-22 20:29 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-08-22 20:29 . 2013-08-22 20:29 -------- d-----w- c:\program files\Java
2013-08-22 20:11 . 2013-07-15 01:34 7143960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4073818A-F1D0-4FDD-BB20-0778FFAA238B}\mpengine.dll
2013-08-22 20:11 . 2013-05-02 00:06 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-08-22 19:44 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2013-08-22 19:44 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2013-08-22 19:44 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2013-08-22 19:44 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2013-08-22 19:42 . 2013-08-26 05:24 -------- d-----w- c:\windows\system32\wbem\Performance
2013-08-22 19:42 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2013-08-22 19:42 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2013-08-22 19:42 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2013-08-22 19:41 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2013-08-22 19:41 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\Roaming
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Google
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Broadcom
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Adobe
2013-08-22 18:35 . 2013-08-23 18:23 -------- d-----w- c:\users\Jan
2013-08-22 18:34 . 2013-08-22 18:34 -------- d-----w- c:\program files\CONEXANT
2013-08-22 18:34 . 2013-08-22 18:34 -------- d-----w- c:\windows\system32\RTCOM
2013-08-22 18:34 . 2013-08-22 18:34 0 ----a-w- c:\windows\ativpsrm.bin
2013-08-22 18:33 . 2013-08-22 18:33 -------- d-----w- c:\program files\Apoint
2013-08-21 18:13 . 2013-08-22 18:51 -------- d-----w- c:\windows\Sun
2013-08-15 13:07 . 2013-08-22 18:50 -------- d-----w- c:\programdata\WindowsSearch
2013-08-14 18:24 . 2013-08-22 18:47 -------- d-----w- c:\program files\FileZilla FTP Client
2013-08-08 16:46 . 2013-08-22 18:50 -------- d-----w- c:\programdata\FLEXnet
2013-08-06 19:00 . 2013-08-06 19:01 -------- d-----w- C:\Update
2013-08-06 15:52 . 2013-08-22 18:50 -------- d-----w- c:\programdata\boost_interprocess
2013-08-06 10:20 . 2013-08-22 18:47 -------- d-----w- c:\program files\Genius
2013-08-06 10:20 . 2013-08-06 10:20 1216471 ----a-w- c:\windows\unins000.exe
2013-08-05 18:48 . 2013-08-27 03:59 -------- d-----w- c:\program files\trend micro
2013-08-05 18:48 . 2013-08-05 18:54 -------- d-----w- C:\rsit
2013-08-05 18:20 . 2013-08-05 18:20 -------- d-----w- C:\temp
2013-08-05 18:17 . 2013-08-22 18:48 -------- d-----w- c:\program files\PFConfig
2013-08-05 15:22 . 2013-08-22 20:29 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-08-05 15:22 . 2013-08-22 20:29 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-08-05 13:13 . 2013-08-22 18:48 -------- d-----w- c:\program files\OpenTTD
2013-08-03 15:14 . 2013-07-04 14:38 188176 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2013-08-03 15:13 . 2013-08-22 18:51 -------- dc----w- c:\windows\system32\DRVSTORE
2013-08-03 15:13 . 2013-07-04 14:37 94480 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2013-08-03 15:13 . 2013-08-22 18:48 -------- d-----w- c:\program files\Oracle
2013-08-02 05:00 . 2013-08-22 18:47 -------- d-----w- c:\program files\LOLReplay
2013-07-30 05:14 . 2013-08-22 18:44 -------- d-----w- c:\program files\Common Files\Steam
2013-07-30 05:14 . 2013-08-27 03:56 -------- d-----w- c:\program files\Steam
2013-07-29 16:47 . 2013-08-22 18:43 -------- d-----w- c:\program files\CCleaner
2013-07-29 05:08 . 2013-05-09 08:59 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-07-29 05:08 . 2013-07-29 05:08 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-29 05:06 . 2013-05-09 08:59 204784 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2013-07-29 05:06 . 2013-05-09 08:59 104752 ----a-w- c:\windows\system32\drivers\aswFW.sys
2013-07-29 05:05 . 2013-07-29 05:08 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-29 05:05 . 2013-07-29 05:08 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-29 05:05 . 2013-05-09 08:59 56080 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-07-29 05:05 . 2013-05-09 08:59 49760 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-07-29 05:05 . 2013-05-09 08:59 21576 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2013-07-29 05:05 . 2013-05-09 08:59 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-07-29 05:05 . 2013-05-09 08:59 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-07-29 05:05 . 2013-05-09 08:58 229648 ----a-w- c:\windows\system32\aswBoot.exe
2013-07-29 05:02 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-07-29 05:02 . 2013-08-22 18:43 -------- d-----w- c:\program files\AVAST Software
2013-07-29 05:01 . 2013-08-22 18:50 -------- d-----w- c:\programdata\AVAST Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-24 17:22 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-08-23 04:39 . 2009-07-13 22:09 2904576 ----a-w- c:\windows\system32\atiumdva.dll
2013-08-23 04:39 . 2009-06-10 21:19 3602432 ----a-w- c:\windows\system32\atiumdag.dll
2013-08-23 04:39 . 2009-07-13 22:09 3034624 ----a-w- c:\windows\system32\atidxx32.dll
2013-07-24 19:30 . 2013-07-24 19:29 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-24 19:30 . 2013-07-24 19:29 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-04 14:37 . 2013-07-04 14:37 104720 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2013-07-04 14:37 . 2013-07-04 14:37 174864 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}]
2012-01-04 23:02 233288 ----a-w- c:\program files\Expat Shield\HssIE\ExpatIE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Me&My VAIO"="c:\program files\Sony\Me&My VAIO\MAMV.exe" [2008-11-17 8847360]
"NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe" [2008-12-05 270336]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-06-21 19875432]
"Steam"="c:\program files\Steam\Steam.exe" [2013-07-26 1807272]
"Akamai NetSession Interface"="c:\users\Jan\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2008-09-30 122880]
"RtHDVCpl"="RtHDVCpl.exe" [2008-10-17 6295552]
"Skytel"="Skytel.exe" [2008-10-17 1826816]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-12 640376]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"AML"="c:\program files\Sony\VAIO Launcher\AML.exe" [2008-09-09 1097728]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"Gila"="c:\program files\Genius\Gila\mousehid.exe" [2013-01-16 307712]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-11-29 30192]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2013-07-22 24576]
"TP-LINK USB Printer Controller"="c:\program files\TP-LINK\USB Printer Controller\USB Printer Controller.exe" [2012-09-21 4226048]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-10-15 776744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-11-06 01:32 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
R3 ExpatTrayService;Expat Shield Tray Service;c:\program files\Expat Shield\bin\ExpatTrayService.EXE [2012-01-17 77520]
R3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-29 30192]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [2008-10-21 103712]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [2008-10-21 353568]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [2008-10-21 62752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-07-04 104720]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-10-02 369952]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-09-19 83232]
S0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [2013-05-09 204784]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswFW;avast! TDI Firewall Driver;c:\windows\system32\drivers\aswFW.sys [2013-05-09 104752]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2013-07-04 188176]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-07-04 94480]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-08-23 172032]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 66336]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2013-05-09 137960]
S2 ExpatShieldService;Expat Shield Service;c:\program files\Expat Shield\bin\openvpnas.exe [2012-01-17 331608]
S2 ExpatSrv;Expat Shield Routing Service;c:\program files\Expat Shield\HssWPR\hsssrv.exe [2012-01-04 363336]
S2 ExpatWd;Expat Shield Monitoring Service;c:\program files\Expat Shield\bin\hsswd.exe [2012-01-04 329544]
S2 NSUService;NSUService;c:\program files\sony\Network Utility\NSUService.exe [2008-12-05 303104]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 RtkAudioService;Realtek Audio Service;c:\windows\RtkAudioService.exe [2008-10-17 102400]
S2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2008-11-25 415584]
S2 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-09-12 446464]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-24 17920]
S3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2008-08-22 9344]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-08-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24 19:30]
.
2013-08-27 c:\windows\Tasks\dsmonitor.job
- c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2013-08-22 09:00]
.
2013-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-22 20:17]
.
2013-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-22 20:17]
.
.
------- Doplňkový sken -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uStart Page = about:blank
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uarvi6mo.default\
FF - ExtSQL: 2013-07-29 07:03; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
FF - ExtSQL: 2013-08-01 21:34; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3598126742-3985364578-432227459-1000\Control Panel\Desktop*]
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-08-27 20:21:10
ComboFix-quarantined-files.txt 2013-08-27 18:21
.
Před spuštěním: Volných bajtů: 250 421 215 232
Po spuštění: Volných bajtů: 254 123 839 488
.
- - End Of File - - 74CB07C4D5F2022BE460BD0D5260A395
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Folder::
c:\users\Jan\AppData\Local\Akamai

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

Regnull::
[HKEY_USERS\S-1-5-21-3598126742-3985364578-432227459-1000\Control Panel\Desktop*]

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[_Antti_]

Tak hotovo. Zase to na mě vyhodilo log, tak doufám, že jsem omylem nespustil znovu skenování.

ComboFix 13-08-27.02 - Jan 27.08.2013 21:51:10.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3039.1807 [GMT 2:00]
Spuštěný z: c:\users\Jan\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jan\Desktop\CFScript.txt
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jan\AppData\Local\Akamai
c:\users\Jan\AppData\Local\Akamai\admintool.exe
c:\users\Jan\AppData\Local\Akamai\client.ini
c:\users\Jan\AppData\Local\Akamai\ControlPanel.exe
c:\users\Jan\AppData\Local\Akamai\CplTasks.xml
c:\users\Jan\AppData\Local\Akamai\euc_state.json
c:\users\Jan\AppData\Local\Akamai\extraroot.pem
c:\users\Jan\AppData\Local\Akamai\guid.ini
c:\users\Jan\AppData\Local\Akamai\installer.txt
c:\users\Jan\AppData\Local\Akamai\Languages\csy.dll
c:\users\Jan\AppData\Local\Akamai\Languages\dan.dll
c:\users\Jan\AppData\Local\Akamai\Languages\deu.dll
c:\users\Jan\AppData\Local\Akamai\Languages\esp.dll
c:\users\Jan\AppData\Local\Akamai\Languages\fin.dll
c:\users\Jan\AppData\Local\Akamai\Languages\fra.dll
c:\users\Jan\AppData\Local\Akamai\Languages\chs.dll
c:\users\Jan\AppData\Local\Akamai\Languages\cht.dll
c:\users\Jan\AppData\Local\Akamai\Languages\ita.dll
c:\users\Jan\AppData\Local\Akamai\Languages\jpn.dll
c:\users\Jan\AppData\Local\Akamai\Languages\kor.dll
c:\users\Jan\AppData\Local\Akamai\Languages\nld.dll
c:\users\Jan\AppData\Local\Akamai\Languages\nor.dll
c:\users\Jan\AppData\Local\Akamai\Languages\plk.dll
c:\users\Jan\AppData\Local\Akamai\Languages\ptb.dll
c:\users\Jan\AppData\Local\Akamai\Languages\ptg.dll
c:\users\Jan\AppData\Local\Akamai\Languages\rus.dll
c:\users\Jan\AppData\Local\Akamai\Languages\sve.dll
c:\users\Jan\AppData\Local\Akamai\Languages\trk.dll
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_075655.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_082603.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_082941.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_110753.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_115844.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_154040.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_172859.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_174543.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130824_183410.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130825_123703.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130825_154411.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130825_164932.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130825_180610.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_052042.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_092851.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_095727.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_170707.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_175556.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130826_190538.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130827_035539.sent
c:\users\Jan\AppData\Local\Akamai\Logs\daemon.debug.log.130827_194409.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_075659.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_083002.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_093002.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_103003.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_110752.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_115851.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_125852.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_135853.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_145854.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_154048.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_164048.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_174555.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130824_183410.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_123549.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_133550.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_143550.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_153550.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_154410.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_164948.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_174948.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130825_180610.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_052100.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_062100.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_072101.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_082101.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_092101.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_092851.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_095748.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_105749.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_115749.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_130009.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_140010.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_150010.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_160011.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_170012.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_175618.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_185619.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130826_190538.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_035559.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_045559.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_055600.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_065600.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_075600.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_085601.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_095601.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_105602.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_115602.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_125603.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_135603.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_145604.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_155604.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_165605.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_175605.sent
c:\users\Jan\AppData\Local\Akamai\Logs\debug.log.130827_194434.sent
c:\users\Jan\AppData\Local\Akamai\netsession_win.exe
c:\users\Jan\AppData\Local\Akamai\readme.txt
c:\users\Jan\AppData\Local\Akamai\root.pem
c:\users\Jan\AppData\Local\Akamai\rswinui.exe
c:\users\Jan\AppData\Local\Akamai\uninstall.exe
c:\users\Jan\AppData\Local\Akamai\user.dat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-07-27 do 2013-08-27 )))))))))))))))))))))))))))))))
.
.
2013-08-26 12:33 . 2013-08-26 12:33 -------- d-----w- c:\program files\VideoLAN
2013-08-25 14:51 . 2013-08-25 14:51 -------- d-----w- C:\Expat Shield
2013-08-25 14:51 . 2013-08-25 14:51 -------- d-----w- c:\program files\Expat Shield
2013-08-24 16:12 . 2010-11-20 02:30 173440 ----a-w- c:\windows\system32\drivers\rdyboost.sys
2013-08-24 16:11 . 2010-11-20 02:19 3215872 ----a-w- c:\windows\system32\mstscax.dll
2013-08-24 16:05 . 2013-08-24 16:05 -------- d-----w- c:\windows\system32\EventProviders
2013-08-24 09:07 . 2013-08-27 09:50 60872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4073818A-F1D0-4FDD-BB20-0778FFAA238B}\offreg.dll
2013-08-24 08:51 . 2013-08-24 08:51 -------- d-----w- c:\programdata\Nexon
2013-08-24 08:38 . 2013-08-24 08:38 -------- d-----w- C:\Nexon
2013-08-23 04:20 . 2013-08-27 14:57 -------- d-----w- c:\windows\Panther
2013-08-23 03:55 . 2013-08-22 19:16 -------- d-----w- C:\$WINDOWS.~Q
2013-08-23 03:46 . 2013-08-23 03:51 -------- d-----w- C:\$INPLACE.~TR
2013-08-22 20:43 . 2013-08-22 20:43 -------- d-----w- c:\programdata\Uniblue
2013-08-22 20:43 . 2013-08-22 20:43 -------- d-----w- c:\program files\Uniblue
2013-08-22 20:30 . 2013-08-22 20:30 -------- d-----w- c:\program files\Common Files\Java
2013-08-22 20:29 . 2013-08-22 20:29 -------- d-----w- c:\program files\Java
2013-08-22 20:11 . 2013-07-15 01:34 7143960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4073818A-F1D0-4FDD-BB20-0778FFAA238B}\mpengine.dll
2013-08-22 20:11 . 2013-05-02 00:06 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-08-22 19:42 . 2013-08-26 05:24 -------- d-----w- c:\windows\system32\wbem\Performance
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\Roaming
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Google
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Broadcom
2013-08-22 19:06 . 2013-08-22 19:06 -------- d-----w- c:\users\Default\AppData\Local\Adobe
2013-08-22 18:35 . 2013-08-23 18:23 -------- d-----w- c:\users\Jan
2013-08-22 18:34 . 2013-08-22 18:34 -------- d-----w- c:\program files\CONEXANT
2013-08-22 18:34 . 2013-08-22 18:34 0 ----a-w- c:\windows\ativpsrm.bin
2013-08-22 18:33 . 2013-08-22 18:33 -------- d-----w- c:\program files\Apoint
2013-08-21 18:13 . 2013-08-22 18:51 -------- d-----w- c:\windows\Sun
2013-08-15 13:07 . 2013-08-22 18:50 -------- d-----w- c:\programdata\WindowsSearch
2013-08-14 18:24 . 2013-08-22 18:47 -------- d-----w- c:\program files\FileZilla FTP Client
2013-08-08 16:46 . 2013-08-22 18:50 -------- d-----w- c:\programdata\FLEXnet
2013-08-06 19:00 . 2013-08-06 19:01 -------- d-----w- C:\Update
2013-08-06 15:52 . 2013-08-22 18:50 -------- d-----w- c:\programdata\boost_interprocess
2013-08-06 10:20 . 2013-08-22 18:47 -------- d-----w- c:\program files\Genius
2013-08-06 10:20 . 2013-08-06 10:20 1216471 ----a-w- c:\windows\unins000.exe
2013-08-05 18:48 . 2013-08-27 03:59 -------- d-----w- c:\program files\trend micro
2013-08-05 18:48 . 2013-08-05 18:54 -------- d-----w- C:\rsit
2013-08-05 18:20 . 2013-08-05 18:20 -------- d-----w- C:\temp
2013-08-05 18:17 . 2013-08-22 18:48 -------- d-----w- c:\program files\PFConfig
2013-08-05 15:22 . 2013-08-22 20:29 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-08-05 15:22 . 2013-08-22 20:29 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-08-05 13:13 . 2013-08-22 18:48 -------- d-----w- c:\program files\OpenTTD
2013-08-03 15:14 . 2013-07-04 14:38 188176 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2013-08-03 15:13 . 2013-08-22 18:51 -------- dc----w- c:\windows\system32\DRVSTORE
2013-08-03 15:13 . 2013-07-04 14:37 94480 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2013-08-03 15:13 . 2013-08-22 18:48 -------- d-----w- c:\program files\Oracle
2013-08-02 05:00 . 2013-08-22 18:47 -------- d-----w- c:\program files\LOLReplay
2013-07-30 05:14 . 2013-08-22 18:44 -------- d-----w- c:\program files\Common Files\Steam
2013-07-30 05:14 . 2013-08-27 20:06 -------- d-----w- c:\program files\Steam
2013-07-29 16:47 . 2013-08-22 18:43 -------- d-----w- c:\program files\CCleaner
2013-07-29 05:08 . 2013-05-09 08:59 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-07-29 05:08 . 2013-07-29 05:08 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-29 05:06 . 2013-05-09 08:59 204784 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2013-07-29 05:06 . 2013-05-09 08:59 104752 ----a-w- c:\windows\system32\drivers\aswFW.sys
2013-07-29 05:05 . 2013-07-29 05:08 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-29 05:05 . 2013-07-29 05:08 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-29 05:05 . 2013-05-09 08:59 56080 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-07-29 05:05 . 2013-05-09 08:59 49760 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-07-29 05:05 . 2013-05-09 08:59 21576 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2013-07-29 05:05 . 2013-05-09 08:59 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-07-29 05:05 . 2013-05-09 08:59 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-07-29 05:05 . 2013-05-09 08:58 229648 ----a-w- c:\windows\system32\aswBoot.exe
2013-07-29 05:02 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-07-29 05:02 . 2013-08-22 18:43 -------- d-----w- c:\program files\AVAST Software
2013-07-29 05:01 . 2013-08-22 18:50 -------- d-----w- c:\programdata\AVAST Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-24 17:22 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-08-23 04:39 . 2009-07-13 22:09 2904576 ----a-w- c:\windows\system32\atiumdva.dll
2013-08-23 04:39 . 2009-06-10 21:19 3602432 ----a-w- c:\windows\system32\atiumdag.dll
2013-08-23 04:39 . 2009-07-13 22:09 3034624 ----a-w- c:\windows\system32\atidxx32.dll
2013-08-22 20:29 . 2013-08-22 20:29 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-24 19:30 . 2013-07-24 19:29 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-24 19:30 . 2013-07-24 19:29 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-04 14:37 . 2013-07-04 14:37 104720 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2013-07-04 14:37 . 2013-07-04 14:37 174864 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}]
2012-01-04 23:02 233288 ----a-w- c:\program files\Expat Shield\HssIE\ExpatIE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Me&My VAIO"="c:\program files\Sony\Me&My VAIO\MAMV.exe" [2008-11-17 8847360]
"NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe" [2008-12-05 270336]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-06-21 19875432]
"Steam"="c:\program files\Steam\Steam.exe" [2013-07-26 1807272]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2008-09-30 122880]
"RtHDVCpl"="RtHDVCpl.exe" [2008-10-17 6295552]
"Skytel"="Skytel.exe" [2008-10-17 1826816]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-12 640376]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"AML"="c:\program files\Sony\VAIO Launcher\AML.exe" [2008-09-09 1097728]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"Gila"="c:\program files\Genius\Gila\mousehid.exe" [2013-01-16 307712]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-11-29 30192]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2013-07-22 24576]
"TP-LINK USB Printer Controller"="c:\program files\TP-LINK\USB Printer Controller\USB Printer Controller.exe" [2012-09-21 4226048]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-10-15 776744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-11-06 01:32 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 ExpatTrayService;Expat Shield Tray Service;c:\program files\Expat Shield\bin\ExpatTrayService.EXE [2012-01-17 77520]
R3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-29 30192]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [2008-10-21 103712]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [2008-10-21 353568]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [2008-10-21 62752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-07-04 104720]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-10-02 369952]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-09-19 83232]
S0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [2013-05-09 204784]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswFW;avast! TDI Firewall Driver;c:\windows\system32\drivers\aswFW.sys [2013-05-09 104752]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2013-07-04 188176]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-07-04 94480]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-08-23 172032]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 66336]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2013-05-09 137960]
S2 ExpatShieldService;Expat Shield Service;c:\program files\Expat Shield\bin\openvpnas.exe [2012-01-17 331608]
S2 ExpatSrv;Expat Shield Routing Service;c:\program files\Expat Shield\HssWPR\hsssrv.exe [2012-01-04 363336]
S2 ExpatWd;Expat Shield Monitoring Service;c:\program files\Expat Shield\bin\hsswd.exe [2012-01-04 329544]
S2 NSUService;NSUService;c:\program files\sony\Network Utility\NSUService.exe [2008-12-05 303104]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 RtkAudioService;Realtek Audio Service;c:\windows\RtkAudioService.exe [2008-10-17 102400]
S2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2008-11-25 415584]
S2 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-09-12 446464]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-24 17920]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2008-08-22 9344]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-08-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24 19:30]
.
2013-08-27 c:\windows\Tasks\dsmonitor.job
- c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2013-08-22 09:00]
.
2013-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-22 20:17]
.
2013-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-22 20:17]
.
.
------- Doplňkový sken -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uStart Page = about:blank
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uarvi6mo.default\
FF - ExtSQL: 2013-07-29 07:03; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
FF - ExtSQL: 2013-08-01 21:34; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Akamai - c:\users\Jan\AppData\Local\Akamai\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3598126742-3985364578-432227459-1000\Control Panel\Desktop*]
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(4512)
c:\windows\system32\btmmhook.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\WLANExt.exe
c:\windows\system32\conhost.exe
c:\windows\system32\atieclxx.exe
c:\windows\system32\taskhost.exe
c:\program files\Sony\VAIO Update 4\VAIOUpdt.exe
c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Intel\WiFi\bin\EvtEng.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
c:\program files\sony\VAIO Event Service\VESMgr.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\windows\system32\DllHost.exe
c:\program files\sony\VAIO Event Service\VESMgrSub.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
c:\windows\system32\conhost.exe
c:\windows\system32\WUDFHost.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Apoint\ApMsgFwd.exe
c:\program files\Apoint\Apntex.exe
c:\windows\system32\conhost.exe
c:\program files\Genius\Gila\trayicon.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\sppsvc.exe
c:\program files\Common Files\Steam\SteamService.exe
c:\program files\Sony\VAIO Power Management\SPMgr.exe
.
**************************************************************************
.
Celkový čas: 2013-08-27 22:12:27 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-08-27 20:12
ComboFix2.txt 2013-08-27 18:21
.
Před spuštěním: Volných bajtů: 254 094 270 464
Po spuštění: Volných bajtů: 254 095 646 720
.
- - End Of File - - 736C3A0E595B2B5038984EC257B41163
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Dočištění je vlastně sken s parametry, danými skriptem. Log je již OK. Nastala nějaká změna?

[_Antti_]

Zkoušel jsem 100x kliknout a bylo vše OK. Jestli by se to znovu objevilo, tak si asi už zajdu na reklamaci. Můžu se zeptat co tam bylo za "viry"?

[_Antti_]

No tak po chvilce se to zase objevilo, ale teď to je asi tak 1x za 10 kliknutí.

[Rudy]

Pouze nějaké AdWary, nic zvláštního. Co jste instaloval těsně před tím, než se problém objevil?

[_Antti_]

cca. nějak v té době jsem instaloval jen: Software dodaný společně s myší, SpeedFan, CCleaner a hru League of Legends