není sshnas21.dll a proces Vfihua.exe

Zpráva

Medim · #1 Příspěvek od **Medim** » 14 Lis 2010 03:42

Prosím o kontrolu logu, v PC mám nějaký nepořádek, moje chyba. Díky. Přikládám i log z MBAM, dole.

2093761Logfile of random's system information tool 1.08 (written by random/random)
Run by Vesely at 2010-11-14 03:24:21
Microsoft Windows 7 Ultimate
System drive C: has 27 GB (53%) free of 51 GB
Total RAM: 4094 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:24:31, on 14.11.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
D:\Programy\ATI Tray Tools\atitray.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\Vfihua.exe
C:\Program Files\trend micro\Vesely.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - D:\Programy - portable\FlashGet\FlashGetBHO3.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file)
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [U36VRSFLG6] C:\Users\Vesely\AppData\Local\Temp\Vml.exe
O4 - HKCU\..\Run: [Metropolis] rundll32.exe C:\Windows\system32\sshnas21.dll,GetHandle
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: ATI Tray Tools.lnk = D:\Programy\ATI Tray Tools\atitray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http://software.kuaiche.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Microsoft Office 2003\Office12\GrooveSystemServices.dll
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDAgent - Raxco Software, Inc. - D:\Programy\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - D:\Programy\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - c:\windows\SysWOW64\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9749 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Essentials\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
c:\windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {F31D2000-1DF0-4F19-A02E-7455B34D93CB}
"C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"D:\Programy\ATI Tray Tools\atitray.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_skipped/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=4012.076C1D80.985070422 /prefetch:3
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=C:\Users\Vesely\AppData\Local\Google\Chrome\Application\6.0.472.63\gcswf32.dll --lang=cs --plugin-data-dir="C:\Users\Vesely\AppData\Local\Google\Chrome\User Data\Default" --channel=4012.075ABC4C.1045432894 /prefetch:4
C:\Windows\Vfihua.exe
"C:\Program Files\Microsoft Security Essentials\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 7189824A-E46E-C86B-4CFA-23CF1792B332 -Reinvoke
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512
"D:\stahování\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3382314003-2657993076-1350657225-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3382314003-2657993076-1350657225-1000UA.job
C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}]
vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - D:\Programy - portable\FlashGet\FlashGetBHO3.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-10-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{B922D405-6D13-4A2B-AE89-08A030DA4402}
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
{043C5167-00BB-4324-AF7E-62013FAEDACF} - vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSSE"=C:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1448568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"U36VRSFLG6"=C:\Users\Vesely\AppData\Local\Temp\Vml.exe []
"Metropolis"=C:\Windows\system32\sshnas21.dll,GetHandle []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DU Meter]
D:\Programy\DU Meter\DUMeter.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
D:\Programy\Microsoft Office 2003\Office12\GrooveMonitor.exe [2008-10-25 31072]

C:\Users\Vesely\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
ATI Tray Tools.lnk - D:\Programy\ATI Tray Tools\atitray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0x00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-14 03:24:21 ----D---- C:\rsit
2010-11-14 03:24:21 ----D---- C:\Program Files\trend micro
2010-11-14 03:21:37 ----RD---- C:\32788R22FWJFW
2010-11-13 17:18:29 ----A---- C:\Windows\Vfihua.exe
2010-11-13 17:18:18 ----A---- C:\Windows\SYSWOW64\sshnas21.dll
2010-11-12 15:31:48 ----D---- C:\Users\Vesely\AppData\Roaming\vlc
2010-11-12 12:53:51 ----D---- C:\Users\Vesely\AppData\Roaming\BSplayer PRO
2010-11-12 12:05:04 ----A---- C:\Users\Vesely\AppData\Roaming\coreavc.ini
2010-11-12 10:14:28 ----D---- C:\Program Files (x86)\CoreCodec
2010-11-12 08:10:03 ----D---- C:\Windows\pss
2010-11-11 21:54:06 ----D---- C:\Users\Vesely\AppData\Roaming\LangSoft
2010-11-11 21:54:06 ----D---- C:\ProgramData\LangSoft
2010-11-11 21:25:36 ----A---- C:\Windows\IsUninst.exe
2010-11-11 20:32:59 ----D---- C:\Users\Vesely\AppData\Roaming\Canneverbe Limited
2010-11-11 20:32:59 ----D---- C:\ProgramData\Canneverbe Limited
2010-11-11 11:31:52 ----D---- C:\ProgramData\ATI
2010-11-11 11:30:54 ----D---- C:\Program Files (x86)\ATI Technologies
2010-11-11 11:29:49 ----D---- C:\Program Files\ATI Technologies
2010-11-08 18:21:48 ----D---- C:\Users\Vesely\AppData\Roaming\runic games
2010-11-08 09:21:02 ----D---- C:\Program Files (x86)\Microsoft Chart Controls
2010-11-07 19:12:25 ----A---- C:\Windows\libem.INI
2010-11-07 19:12:24 ----D---- C:\Users\Vesely\AppData\Roaming\BITS
2010-11-07 19:07:52 ----D---- C:\Users\Vesely\AppData\Roaming\uTorrent
2010-11-07 17:24:35 ----D---- C:\Program Files (x86)\vShare
2010-11-05 20:53:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-11-05 13:07:12 ----D---- C:\Windows\SYSWOW64\xlive
2010-11-05 13:07:11 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-11-04 08:29:30 ----DC---- C:\Windows\SYSWOW64\memcards
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\sstates
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\logs
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\inis
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-03 06:36:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-11-03 06:36:41 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-03 06:36:39 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-11-03 06:36:39 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-03 06:36:38 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-11-03 06:36:38 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-03 06:36:36 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-11-03 06:36:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-11-03 06:36:36 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-03 06:36:36 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-03 06:36:35 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-11-03 06:36:35 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-03 06:36:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-11-03 06:36:34 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-03 06:36:29 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-11-03 06:36:29 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-03 06:36:28 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-11-03 06:36:28 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-03 06:36:25 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-03 06:36:22 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-11-03 06:36:22 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-03 06:36:21 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-11-03 06:36:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-11-03 06:36:21 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-03 06:36:21 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-03 06:36:20 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-11-03 06:36:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-11-03 06:36:20 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-03 06:36:20 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-03 06:36:17 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-03 06:36:13 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-11-03 06:36:13 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-03 06:36:12 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-11-03 06:36:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-11-03 06:36:12 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-03 06:36:12 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-03 06:36:11 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-11-03 06:36:11 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-11-03 06:36:11 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-03 06:36:11 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-03 06:36:10 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-11-03 06:36:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-11-03 06:36:10 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-03 06:36:10 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-03 06:36:09 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-11-03 06:36:09 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-03 06:36:07 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-03 06:36:05 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-11-03 06:36:05 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-03 06:36:04 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-11-03 06:36:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-11-03 06:36:04 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-03 06:36:04 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-03 06:36:03 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-11-03 06:36:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-11-03 06:36:03 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-03 06:36:03 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-03 06:36:01 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-03 06:35:59 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-11-03 06:35:59 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-11-03 06:35:59 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-03 06:35:59 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-03 06:35:58 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-11-03 06:35:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-11-03 06:35:58 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-03 06:35:58 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-03 06:35:56 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-03 06:35:54 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-11-03 06:35:54 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-03 06:35:53 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-11-03 06:35:53 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-03 06:35:52 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-11-03 06:35:52 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-03 06:35:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-11-03 06:35:51 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-03 06:35:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-11-03 06:35:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-11-03 06:35:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-03 06:35:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-03 06:35:48 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-03 06:35:45 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-11-03 06:35:45 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-03 06:35:44 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-11-03 06:35:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-11-03 06:35:44 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-03 06:35:44 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-03 06:35:43 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-03 06:35:41 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-11-03 06:35:41 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-03 06:35:40 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-11-03 06:35:40 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-03 06:35:39 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-11-03 06:35:39 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-03 06:35:38 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-03 06:35:35 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-11-03 06:35:35 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-03 06:35:34 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-11-03 06:35:34 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-03 06:35:32 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-11-03 06:35:32 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-03 06:35:31 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-11-03 06:35:31 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-03 06:35:28 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-11-03 06:35:28 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-03 06:35:26 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-11-03 06:35:26 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-11-03 06:35:26 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-03 06:35:26 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-03 06:35:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-11-03 06:35:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-03 06:35:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-11-03 06:35:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-11-03 06:35:22 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-03 06:35:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-03 06:35:21 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-11-03 06:35:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-11-03 06:35:20 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-11-03 06:35:20 ----A---- C:\Windows\system32\xinput1_1.dll
2010-11-03 06:35:19 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-11-03 06:35:19 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-11-03 06:35:08 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-11-03 06:35:08 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-11-03 06:35:07 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-11-03 06:35:05 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-11-03 06:35:05 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-11-03 06:35:04 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-11-03 06:35:04 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-11-03 06:35:02 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-11-03 06:35:02 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-11-03 06:34:59 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-11-03 06:34:59 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-11-03 06:34:57 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-11-03 06:34:57 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-11-03 06:34:55 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-11-03 06:34:55 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-11-02 09:22:50 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-11-02 09:22:46 ----D---- C:\Program Files\Microsoft Security Essentials
2010-11-01 21:45:35 ----D---- C:\Users\Vesely\AppData\Roaming\Media Player Classic
2010-10-31 21:53:15 ----D---- C:\Windows\system32\appmgmt
2010-10-31 09:41:59 ----D---- C:\Program Files (x86)\Microsoft Works
2010-10-31 09:41:22 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-10-31 09:40:43 ----D---- C:\Windows\PCHEALTH
2010-10-31 00:11:55 ----D---- C:\Program Files\Microsoft Office
2010-10-31 00:11:44 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-10-27 06:14:31 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-10-27 06:14:31 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 06:14:31 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 06:14:23 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-25 08:10:05 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2010-10-24 08:27:22 ----D---- C:\ProgramData\Media Center Programs
2010-10-20 22:47:02 ----A---- C:\Windows\system32\drivers\cpuz134_x64.sys
2010-10-20 11:50:07 ----D---- C:\Users\Vesely\AppData\Roaming\Google
2010-10-20 11:05:58 ----D---- C:\Windows\cs
2010-10-20 11:05:00 ----D---- C:\Program Files\Windows Live
2010-10-20 11:05:00 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2010-10-20 10:40:28 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2010-10-20 10:40:28 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2010-10-20 10:40:28 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-10-20 10:40:28 ----A---- C:\Windows\system32\mfps.dll
2010-10-20 10:40:27 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-10-20 10:40:26 ----A---- C:\Windows\SYSWOW64\mf.dll
2010-10-20 10:40:26 ----A---- C:\Windows\system32\mf.dll
2010-10-20 10:34:40 ----D---- C:\ProgramData\Sun
2010-10-20 10:33:55 ----D---- C:\Windows\Sun
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\java.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2010-10-20 10:33:46 ----D---- C:\Program Files (x86)\Java
2010-10-19 12:16:20 ----D---- C:\ProgramData\Raxco
2010-10-19 11:24:57 ----A---- C:\Windows\FreeMem.exe
2010-10-18 16:21:12 ----A---- C:\Windows\system32\drivers\hidusbf.sys
2010-10-18 11:14:00 ----A---- C:\Windows\WTRDCTM.INI
2010-10-18 11:13:34 ----A---- C:\Windows\SYSWOW64\BIVBX11.DLL
2010-10-15 06:46:30 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-10-15 06:46:04 ----D---- C:\Program Files\ATI

======List of files/folders modified in the last 1 months======

2010-11-14 03:24:31 ----D---- C:\Windows\Temp
2010-11-14 03:24:31 ----D---- C:\Windows\Prefetch
2010-11-14 03:24:21 ----RD---- C:\Program Files
2010-11-14 03:20:27 ----D---- C:\Windows\System32
2010-11-14 03:20:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-14 03:20:26 ----D---- C:\Windows\inf
2010-11-14 03:19:03 ----D---- C:\Windows\Tasks
2010-11-14 03:16:46 ----D---- C:\Windows\system32\drivers
2010-11-13 19:53:29 ----D---- C:\Windows\system32\config
2010-11-13 17:41:17 ----D---- C:\Windows
2010-11-13 17:35:06 ----D---- C:\Windows\system32\Tasks
2010-11-13 17:30:33 ----D---- C:\Users\Vesely\AppData\Roaming\AIMP
2010-11-13 17:18:18 ----D---- C:\Windows\SysWOW64
2010-11-13 11:52:30 ----SHD---- C:\System Volume Information
2010-11-13 09:27:22 ----D---- C:\Windows\system32\catroot2
2010-11-12 13:41:23 ----RD---- C:\Program Files (x86)
2010-11-11 21:54:06 ----HD---- C:\ProgramData
2010-11-11 20:16:13 ----D---- C:\Program Files (x86)\Common Files
2010-11-11 20:12:39 ----SHD---- C:\Windows\Installer
2010-11-11 19:11:25 ----SD---- C:\Users\Vesely\AppData\Roaming\Microsoft
2010-11-11 17:34:30 ----D---- C:\Windows\system32\drivers\etc
2010-11-11 11:31:29 ----D---- C:\Windows\system32\catroot
2010-11-11 11:31:12 ----D---- C:\Windows\system32\DriverStore
2010-11-11 03:03:18 ----D---- C:\ProgramData\Microsoft Help
2010-11-11 03:00:37 ----A---- C:\Windows\system32\MRT.exe
2010-11-10 11:48:29 ----RSD---- C:\Windows\assembly
2010-11-09 07:31:02 ----D---- C:\Windows\SYSWOW64\directx
2010-11-08 09:20:31 ----D---- C:\Windows\winsxs
2010-11-05 21:05:41 ----D---- C:\Users\Vesely\AppData\Roaming\Zoner
2010-11-05 06:55:59 ----D---- C:\Windows\system32\wdi
2010-11-02 21:54:34 ----D---- C:\Windows\Minidump
2010-11-02 21:30:16 ----D---- C:\ProgramData\Google
2010-11-02 21:29:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-11-02 09:22:50 ----SD---- C:\ProgramData\Microsoft
2010-11-02 09:16:49 ----D---- C:\Windows\SYSWOW64\drivers
2010-11-01 21:32:16 ----D---- C:\PerfLogs
2010-10-31 09:49:23 ----RSD---- C:\Windows\Fonts
2010-10-31 09:47:27 ----A---- C:\Windows\win.ini
2010-10-31 09:46:55 ----D---- C:\Windows\ShellNew
2010-10-31 09:41:38 ----D---- C:\Program Files (x86)\MSBuild
2010-10-31 09:40:43 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-10-31 09:38:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-31 09:34:52 ----D---- C:\Windows\system32\NDF
2010-10-29 07:42:57 ----D---- C:\Windows\rescache
2010-10-28 20:20:50 ----D---- C:\Users\Vesely\AppData\Roaming\Skype
2010-10-27 07:07:23 ----D---- C:\Windows\Microsoft.NET
2010-10-27 06:26:19 ----D---- C:\Windows\AppPatch
2010-10-27 06:25:43 ----D---- C:\Windows\ehome
2010-10-25 07:15:39 ----A---- C:\Windows\TRNCOM.INI
2010-10-24 03:44:37 ----D---- C:\Users\Vesely\AppData\Roaming\WinRAR
2010-10-20 11:05:43 ----D---- C:\Program Files (x86)\Windows Live
2010-10-20 11:05:00 ----DC---- C:\Windows\system32\DRVSTORE
2010-10-19 21:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-15 06:46:30 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-11-11 508472]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R2 DefragFS;DefragFS; C:\Windows\system32\drivers\DefragFS.sys [2010-04-07 138256]
R3 ALSysIO;ALSysIO; \??\C:\Users\Vesely\AppData\Local\Temp\ALSysIO64.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-09-29 7883264]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-09-29 285696]
R3 cmuda3;C-Media PCI Audio Interface; C:\Windows\system32\drivers\cmudax3.sys [2009-12-01 1155072]
R3 hidusbf;USB Mouse Rate Adjuster Lower Filter by SweetLow; C:\Windows\system32\DRIVERS\hidusbf.sys [2010-10-18 7808]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R4 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 []
S3 a3zlmn8j;a3zlmn8j; C:\Windows\system32\drivers\a3zlmn8j.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-09-29 7883264]
S3 cpuz130;cpuz130; \??\C:\Users\Vesely\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-02-26 25088]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-02-26 173056]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-02-26 19456]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-02-26 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2010-02-26 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-09-29 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]
R2 PnkBstrA;PnkBstrA; c:\windows\SysWOW64\PnkBstrA.exe [2010-06-28 75064]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 StarWindServiceAE;StarWind AE Service; D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2010-01-07 380928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Microsoft Office 2003\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PDAgent;PDAgent; D:\Programy\Raxco\PerfectDisk\PDAgent.exe [2010-04-12 2607368]
S3 PDEngine;PDEngine; D:\Programy\Raxco\PerfectDisk\PDEngine.exe [2010-04-12 2259208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-04-17 247152]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 5111

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

14.11.2010 3:59:18
mbam-log-2010-11-14 (03-59-18).txt

Typ skenu: Rychlý sken
Skenované objekty: 143880
Uplynulý čas: 4 minuta(y), 29 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 4
Infikované hodnoty registru: 2
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 4

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\C8H1KKCTZV (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\U36VRSFLG6 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.

Infikované hodnoty registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\metropolis (Trojan.FraudPack) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\u36vrsflg6 (Trojan.FakeAlert) -> No action taken.

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Windows\System32\sshnas21.dll (Trojan.FraudPack) -> No action taken.
C:\Windows\Vfihua.exe (Trojan.FraudPack) -> No action taken.
C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job (Trojan.Downloader) -> No action taken.
C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken.

#2 Příspěvek od **cernohous13** » 14 Lis 2010 09:00

Zdravím,

MBAM spustit znovu - dát Kompletní kontrola
po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Infikované adresáře:
C:\Program Files\xxxxxx -> Quarantined and deleted successfully.
ten bych taky rád viděl

nový RSIT sem + popis problémů po restartu.

Medim · #3 Příspěvek od **Medim** » 14 Lis 2010 12:16

Zdravím,
včera jsem to udělal podle návodů z netu, myslím, že je vše v pořádku. Ale pro jistotu prosím o kontrolu, díky.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Vesely at 2010-11-14 12:09:30
Microsoft Windows 7 Ultimate
System drive C: has 26 GB (51%) free of 51 GB
Total RAM: 4094 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:09:37, on 14.11.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
D:\Programy\ATI Tray Tools\atitray.exe
D:\Programy\uTorrent\uTorrent.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vesely.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - D:\Programy - portable\FlashGet\FlashGetBHO3.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file)
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: ATI Tray Tools.lnk = D:\Programy\ATI Tray Tools\atitray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http://software.kuaiche.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Microsoft Office 2003\Office12\GrooveSystemServices.dll
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDAgent - Raxco Software, Inc. - D:\Programy\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - D:\Programy\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - c:\windows\SysWOW64\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9599 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Essentials\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
c:\windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {716A4A19-5F88-47F6-B105-D18A6963C0F0}
"C:\Users\Vesely\AppData\Local\Temp\Rar$EX00.512\Core Temp.exe"
"C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"D:\Programy\ATI Tray Tools\atitray.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"D:\Programy\uTorrent\uTorrent.exe"
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3916.07182780.34714062 /prefetch:3
"C:\Users\Vesely\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=C:\Users\Vesely\AppData\Local\Google\Chrome\Application\6.0.472.63\gcswf32.dll --lang=cs --plugin-data-dir="C:\Users\Vesely\AppData\Local\Google\Chrome\User Data\Default" --channel=3916.071A484C.599440856 /prefetch:4
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512
"D:\stahování\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3382314003-2657993076-1350657225-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3382314003-2657993076-1350657225-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}]
vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - D:\Programy - portable\FlashGet\FlashGetBHO3.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-10-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{B922D405-6D13-4A2B-AE89-08A030DA4402}
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
{043C5167-00BB-4324-AF7E-62013FAEDACF} - vShare Plugin - C:\Program Files (x86)\vShare\vshare_toolbar.dll [2010-10-20 481872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSSE"=C:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1448568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DU Meter]
D:\Programy\DU Meter\DUMeter.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
D:\Programy\Microsoft Office 2003\Office12\GrooveMonitor.exe [2008-10-25 31072]

C:\Users\Vesely\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
ATI Tray Tools.lnk - D:\Programy\ATI Tray Tools\atitray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Microsoft Office 2003\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0x00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-14 12:09:30 ----D---- C:\rsit
2010-11-14 03:52:41 ----D---- C:\Users\Vesely\AppData\Roaming\Malwarebytes
2010-11-14 03:52:31 ----D---- C:\ProgramData\Malwarebytes
2010-11-14 03:24:21 ----D---- C:\Program Files\trend micro
2010-11-12 15:31:48 ----D---- C:\Users\Vesely\AppData\Roaming\vlc
2010-11-12 12:53:51 ----D---- C:\Users\Vesely\AppData\Roaming\BSplayer PRO
2010-11-12 12:05:04 ----A---- C:\Users\Vesely\AppData\Roaming\coreavc.ini
2010-11-12 10:14:28 ----D---- C:\Program Files (x86)\CoreCodec
2010-11-12 08:10:03 ----D---- C:\Windows\pss
2010-11-11 21:54:06 ----D---- C:\Users\Vesely\AppData\Roaming\LangSoft
2010-11-11 21:54:06 ----D---- C:\ProgramData\LangSoft
2010-11-11 21:25:36 ----A---- C:\Windows\IsUninst.exe
2010-11-11 20:32:59 ----D---- C:\Users\Vesely\AppData\Roaming\Canneverbe Limited
2010-11-11 20:32:59 ----D---- C:\ProgramData\Canneverbe Limited
2010-11-11 11:31:52 ----D---- C:\ProgramData\ATI
2010-11-11 11:31:15 ----D---- C:\Windows\LastGood.Tmp
2010-11-11 11:30:54 ----D---- C:\Program Files (x86)\ATI Technologies
2010-11-11 11:29:49 ----D---- C:\Program Files\ATI Technologies
2010-11-08 18:21:48 ----D---- C:\Users\Vesely\AppData\Roaming\runic games
2010-11-08 09:21:02 ----D---- C:\Program Files (x86)\Microsoft Chart Controls
2010-11-08 07:45:58 ----D---- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2010-11-07 19:12:25 ----A---- C:\Windows\libem.INI
2010-11-07 19:12:24 ----D---- C:\Users\Vesely\AppData\Roaming\BITS
2010-11-07 19:07:52 ----D---- C:\Users\Vesely\AppData\Roaming\uTorrent
2010-11-07 17:24:35 ----D---- C:\Program Files (x86)\vShare
2010-11-05 20:53:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-11-05 13:07:12 ----D---- C:\Windows\SYSWOW64\xlive
2010-11-05 13:07:11 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-11-04 08:29:30 ----DC---- C:\Windows\SYSWOW64\memcards
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\sstates
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\logs
2010-11-04 08:29:30 ----D---- C:\Windows\SYSWOW64\inis
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-11-03 06:36:43 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-03 06:36:43 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-03 06:36:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-11-03 06:36:41 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-03 06:36:40 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-03 06:36:39 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-11-03 06:36:39 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-03 06:36:38 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-11-03 06:36:38 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-11-03 06:36:37 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-03 06:36:37 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-03 06:36:36 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-11-03 06:36:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-11-03 06:36:36 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-03 06:36:36 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-03 06:36:35 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-11-03 06:36:35 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-03 06:36:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-11-03 06:36:34 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-03 06:36:30 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-03 06:36:29 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-11-03 06:36:29 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-03 06:36:28 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-11-03 06:36:28 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-03 06:36:25 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-03 06:36:25 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-03 06:36:22 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-11-03 06:36:22 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-03 06:36:21 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-11-03 06:36:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-11-03 06:36:21 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-03 06:36:21 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-03 06:36:20 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-11-03 06:36:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-11-03 06:36:20 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-03 06:36:20 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-03 06:36:17 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-03 06:36:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-03 06:36:13 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-11-03 06:36:13 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-03 06:36:12 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-11-03 06:36:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-11-03 06:36:12 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-03 06:36:12 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-03 06:36:11 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-11-03 06:36:11 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-11-03 06:36:11 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-03 06:36:11 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-03 06:36:10 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-11-03 06:36:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-11-03 06:36:10 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-03 06:36:10 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-03 06:36:09 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-11-03 06:36:09 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-03 06:36:07 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-03 06:36:07 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-03 06:36:05 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-11-03 06:36:05 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-03 06:36:04 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-11-03 06:36:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-11-03 06:36:04 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-03 06:36:04 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-03 06:36:03 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-11-03 06:36:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-11-03 06:36:03 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-03 06:36:03 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-03 06:36:01 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-03 06:36:01 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-03 06:35:59 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-11-03 06:35:59 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-11-03 06:35:59 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-03 06:35:59 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-03 06:35:58 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-11-03 06:35:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-11-03 06:35:58 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-03 06:35:58 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-03 06:35:56 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-03 06:35:56 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-03 06:35:54 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-11-03 06:35:54 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-03 06:35:53 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-11-03 06:35:53 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-03 06:35:52 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-11-03 06:35:52 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-03 06:35:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-11-03 06:35:51 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-03 06:35:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-11-03 06:35:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-11-03 06:35:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-03 06:35:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-03 06:35:48 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-03 06:35:48 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-03 06:35:45 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-11-03 06:35:45 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-03 06:35:44 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-11-03 06:35:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-11-03 06:35:44 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-03 06:35:44 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-03 06:35:43 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-03 06:35:43 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-03 06:35:41 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-11-03 06:35:41 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-03 06:35:40 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-11-03 06:35:40 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-03 06:35:39 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-11-03 06:35:39 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-03 06:35:38 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-03 06:35:38 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-03 06:35:35 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-11-03 06:35:35 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-03 06:35:34 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-11-03 06:35:34 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-03 06:35:32 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-11-03 06:35:32 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-03 06:35:31 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-11-03 06:35:31 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-03 06:35:28 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-11-03 06:35:28 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-03 06:35:26 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-11-03 06:35:26 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-11-03 06:35:26 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-03 06:35:26 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-03 06:35:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-11-03 06:35:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-03 06:35:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-11-03 06:35:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-11-03 06:35:22 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-03 06:35:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-03 06:35:21 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-11-03 06:35:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-11-03 06:35:20 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-11-03 06:35:20 ----A---- C:\Windows\system32\xinput1_1.dll
2010-11-03 06:35:19 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-11-03 06:35:19 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-11-03 06:35:08 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-11-03 06:35:08 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-11-03 06:35:07 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-11-03 06:35:07 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-11-03 06:35:05 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-11-03 06:35:05 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-11-03 06:35:04 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-11-03 06:35:04 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-11-03 06:35:02 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-11-03 06:35:02 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-11-03 06:34:59 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-11-03 06:34:59 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-11-03 06:34:57 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-11-03 06:34:57 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-11-03 06:34:55 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-11-03 06:34:55 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-11-02 09:22:50 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-11-02 09:22:46 ----D---- C:\Program Files\Microsoft Security Essentials
2010-11-01 21:45:35 ----D---- C:\Users\Vesely\AppData\Roaming\Media Player Classic
2010-10-31 21:53:15 ----D---- C:\Windows\system32\appmgmt
2010-10-31 09:41:59 ----D---- C:\Program Files (x86)\Microsoft Works
2010-10-31 09:41:22 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-10-31 09:40:43 ----D---- C:\Windows\PCHEALTH
2010-10-31 00:11:55 ----D---- C:\Program Files\Microsoft Office
2010-10-31 00:11:44 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-10-27 06:14:31 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-10-27 06:14:31 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 06:14:31 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 06:14:23 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-25 08:10:05 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2010-10-24 08:27:22 ----D---- C:\ProgramData\Media Center Programs
2010-10-20 22:47:02 ----A---- C:\Windows\system32\drivers\cpuz134_x64.sys
2010-10-20 11:50:07 ----D---- C:\Users\Vesely\AppData\Roaming\Google
2010-10-20 11:05:58 ----D---- C:\Windows\cs
2010-10-20 11:05:00 ----D---- C:\Program Files\Windows Live
2010-10-20 11:05:00 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2010-10-20 10:40:28 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2010-10-20 10:40:28 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2010-10-20 10:40:28 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-10-20 10:40:28 ----A---- C:\Windows\system32\mfps.dll
2010-10-20 10:40:27 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-10-20 10:40:26 ----A---- C:\Windows\SYSWOW64\mf.dll
2010-10-20 10:40:26 ----A---- C:\Windows\system32\mf.dll
2010-10-20 10:34:40 ----D---- C:\ProgramData\Sun
2010-10-20 10:33:55 ----D---- C:\Windows\Sun
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\java.exe
2010-10-20 10:33:54 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2010-10-20 10:33:46 ----D---- C:\Program Files (x86)\Java
2010-10-19 12:16:20 ----D---- C:\ProgramData\Raxco
2010-10-19 11:24:57 ----A---- C:\Windows\FreeMem.exe
2010-10-18 16:21:12 ----A---- C:\Windows\system32\drivers\hidusbf.sys
2010-10-18 11:14:00 ----A---- C:\Windows\WTRDCTM.INI
2010-10-18 11:13:34 ----A---- C:\Windows\SYSWOW64\BIVBX11.DLL
2010-10-15 06:46:30 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-10-15 06:46:04 ----D---- C:\Program Files\ATI

======List of files/folders modified in the last 1 months======

2010-11-14 12:09:37 ----D---- C:\Windows\Prefetch
2010-11-14 11:45:57 ----D---- C:\Windows\system32\config
2010-11-14 11:39:08 ----D---- C:\Windows\Temp
2010-11-14 11:35:33 ----SHD---- C:\System Volume Information
2010-11-14 05:13:32 ----D---- C:\Windows\System32
2010-11-14 05:13:32 ----D---- C:\Windows\inf
2010-11-14 05:13:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-14 05:09:33 ----D---- C:\Windows\system32\drivers
2010-11-14 05:09:02 ----D---- C:\Windows\Tasks
2010-11-14 05:09:00 ----D---- C:\Windows\system32\wfp
2010-11-14 05:08:58 ----D---- C:\Windows\system32\wbem
2010-11-14 05:08:58 ----D---- C:\Windows
2010-11-14 05:08:06 ----D---- C:\Windows\system32\DriverStore
2010-11-14 05:08:06 ----D---- C:\Windows\system32\drivers\etc
2010-11-14 05:08:06 ----D---- C:\Windows\system32\catroot2
2010-11-14 05:08:04 ----D---- C:\Windows\system32\Tasks
2010-11-14 05:08:00 ----D---- C:\Users\Vesely\AppData\Roaming\AIMP
2010-11-14 05:07:53 ----D---- C:\Windows\registration
2010-11-14 05:07:51 ----D---- C:\Windows\SysWOW64
2010-11-14 05:07:32 ----RD---- C:\Program Files (x86)
2010-11-14 05:07:32 ----RD---- C:\Program Files
2010-11-14 05:07:32 ----HD---- C:\ProgramData
2010-11-11 20:16:13 ----D---- C:\Program Files (x86)\Common Files
2010-11-11 20:12:39 ----SHD---- C:\Windows\Installer
2010-11-11 19:11:25 ----SD---- C:\Users\Vesely\AppData\Roaming\Microsoft
2010-11-11 11:31:29 ----D---- C:\Windows\system32\catroot
2010-11-11 03:03:18 ----D---- C:\ProgramData\Microsoft Help
2010-11-11 03:00:37 ----A---- C:\Windows\system32\MRT.exe
2010-11-10 11:48:29 ----RSD---- C:\Windows\assembly
2010-11-09 07:31:02 ----D---- C:\Windows\SYSWOW64\directx
2010-11-08 09:20:31 ----D---- C:\Windows\winsxs
2010-11-05 21:05:41 ----D---- C:\Users\Vesely\AppData\Roaming\Zoner
2010-11-05 06:55:59 ----D---- C:\Windows\system32\wdi
2010-11-02 21:54:34 ----D---- C:\Windows\Minidump
2010-11-02 21:30:16 ----D---- C:\ProgramData\Google
2010-11-02 21:29:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-11-02 09:22:50 ----SD---- C:\ProgramData\Microsoft
2010-11-02 09:16:49 ----D---- C:\Windows\SYSWOW64\drivers
2010-11-01 21:32:16 ----D---- C:\PerfLogs
2010-10-31 09:49:23 ----RSD---- C:\Windows\Fonts
2010-10-31 09:47:27 ----A---- C:\Windows\win.ini
2010-10-31 09:46:55 ----D---- C:\Windows\ShellNew
2010-10-31 09:41:38 ----D---- C:\Program Files (x86)\MSBuild
2010-10-31 09:40:43 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-10-31 09:38:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-31 09:34:52 ----D---- C:\Windows\system32\NDF
2010-10-29 07:42:57 ----D---- C:\Windows\rescache
2010-10-28 20:20:50 ----D---- C:\Users\Vesely\AppData\Roaming\Skype
2010-10-27 07:07:23 ----D---- C:\Windows\Microsoft.NET
2010-10-27 06:26:19 ----D---- C:\Windows\AppPatch
2010-10-27 06:25:43 ----D---- C:\Windows\ehome
2010-10-25 07:15:39 ----A---- C:\Windows\TRNCOM.INI
2010-10-24 03:44:37 ----D---- C:\Users\Vesely\AppData\Roaming\WinRAR
2010-10-20 11:05:43 ----D---- C:\Program Files (x86)\Windows Live
2010-10-20 11:05:00 ----DC---- C:\Windows\system32\DRVSTORE
2010-10-19 21:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-15 06:46:30 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-11-11 508472]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R2 DefragFS;DefragFS; C:\Windows\system32\drivers\DefragFS.sys [2010-04-07 138256]
R3 ALSysIO;ALSysIO; \??\C:\Users\Vesely\AppData\Local\Temp\ALSysIO64.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-09-29 7883264]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-09-29 285696]
R3 cmuda3;C-Media PCI Audio Interface; C:\Windows\system32\drivers\cmudax3.sys [2009-12-01 1155072]
R3 hidusbf;USB Mouse Rate Adjuster Lower Filter by SweetLow; C:\Windows\system32\DRIVERS\hidusbf.sys [2010-10-18 7808]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R4 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 []
S3 a21b8zpf;a21b8zpf; C:\Windows\system32\drivers\a21b8zpf.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-09-29 7883264]
S3 cpuz130;cpuz130; \??\C:\Users\Vesely\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-02-26 25088]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-02-26 173056]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-02-26 19456]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-02-26 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2010-02-26 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-09-29 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]
R2 PnkBstrA;PnkBstrA; c:\windows\SysWOW64\PnkBstrA.exe [2010-06-28 75064]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 StarWindServiceAE;StarWind AE Service; D:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2010-01-07 380928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Microsoft Office 2003\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PDAgent;PDAgent; D:\Programy\Raxco\PerfectDisk\PDAgent.exe [2010-04-12 2607368]
S3 PDEngine;PDEngine; D:\Programy\Raxco\PerfectDisk\PDEngine.exe [2010-04-12 2259208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-04-17 247152]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

Medim · #4 Příspěvek od **Medim** » 14 Lis 2010 12:45

Ještě k postupu. Včera jsem to projel Malwarebytes, nalezl 10, vše jsem smazal, pak restart a obnova systému o 24 h zpět, vše se zdá být v pořádku. Log bohužel nemám.

#5 Příspěvek od **cernohous13** » 14 Lis 2010 14:25

Jestli je to dobré, tak není co řešit. V logu taky nic zlého nevidím.

V případě problémů se ozvi. Obrázek

Medim · #6 Příspěvek od **Medim** » 14 Lis 2010 19:25

Díky

#7 Příspěvek od **cernohous13** » 14 Lis 2010 19:58

Nemáš zač, vyřešil jsi sám

VIRY.CZ

není sshnas21.dll a proces Vfihua.exe

není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe

Re: není sshnas21.dll a proces Vfihua.exe