Kurzíva různě po systému

[W1ll.1.4M]

Zdravím vás, včera se mi tady z ničeho nic objevil problém, všude možně se mi změnily fonty na kurzíva (Opera, Steam, Garena,...)

Fonty jsem kontroloval, změnu jsem v nich nenašel, ani nikde v nastavení fontů. Tudíž mě napadlo, že za tím může být nějaká breberka.

Logfile of random's system information tool 1.08 (written by random/random)
Run by W1ll.1.4M at 2011-04-29 02:08:01
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 105 GB (67%) free of 157 GB
Total RAM: 4093 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:08:04, on 29.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Xfire\Xfire.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Miranda IM\miranda32.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\W1ll.1.4M.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Exetender_298] "C:\Program Files (x86)\Frag Games\GPlayer.exe" /schedule 300000
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [Exetender_298] "C:\Program Files (x86)\Frag Games\GPlayer.exe" /runonstartup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Exetender_298] "C:\Program Files (x86)\Frag Games\GPlayer.exe" /runonstartup (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Exetender_298] "C:\Program Files (x86)\Frag Games\GPlayer.exe" /runonstartup (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files (x86)\Xfire\Xfire.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 1590478377
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8255 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
atieclxx
"taskhost.exe"
taskeng.exe {9D123DF0-B267-41D1-B002-63225ADEC997}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Core Temp\Core Temp.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Xfire\Xfire.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Xfire\xfire64.exe" xfire64.exe /pid 2772
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Xfire\xfire64.exe" xfire64.exe /pid 2772
"C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Miranda IM\miranda32.exe"
"C:\Program Files (x86)\uTorrent\uTorrent.exe"
"D:\Steam\Steam.exe"
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files (x86)\Winamp\winamp.exe"
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\W1ll.1.4M\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-03-18 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-03-23 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-01-19 9996320]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 1436224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
""= []
"Exetender_298"=C:\Program Files (x86)\Frag Games\GPlayer.exe /schedule 300000 []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-02 87336]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-08-26 75048]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-04-05 336384]

C:\Users\W1ll.1.4M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Xfire.lnk - C:\Program Files (x86)\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-29 02:06:04 ----D---- C:\rsit
2011-04-29 02:06:04 ----D---- C:\Program Files\trend micro
2011-04-28 01:27:52 ----D---- C:\ProgramData\ATI
2011-04-28 01:27:50 ----D---- C:\Program Files (x86)\AMD APP
2011-04-28 01:21:56 ----SHD---- C:\Config.Msi
2011-04-28 01:04:17 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-04-28 01:04:17 ----A---- C:\Windows\explorer.exe
2011-04-28 01:04:16 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-04-28 01:04:16 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-28 01:04:00 ----A---- C:\Windows\system32\fsutil.exe
2011-04-28 01:04:00 ----A---- C:\Windows\system32\esent.dll
2011-04-28 01:03:59 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\storport.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-04-28 01:03:59 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-04-28 01:03:58 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-04-28 01:03:58 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-04-28 01:03:53 ----A---- C:\Windows\system32\prevhost.exe
2011-04-28 01:03:52 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-04-27 23:25:05 ----A---- C:\Windows\DIIUnin.pif
2011-04-27 23:25:05 ----A---- C:\Windows\DIIUnin.exe
2011-04-27 01:49:07 ----A---- C:\Windows\ScUnin.pif
2011-04-27 01:49:07 ----A---- C:\Windows\ScUnin.exe
2011-04-23 19:05:09 ----D---- C:\ProgramData\Exent
2011-04-23 19:00:03 ----D---- C:\ProgramData\Frag Games
2011-04-23 18:59:59 ----D---- C:\Remote Programs
2011-04-21 20:41:06 ----D---- C:\Program Files (x86)\Hamachi
2011-04-21 20:41:06 ----A---- C:\Windows\system32\drivers\hamachi.sys
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-04-21 00:03:08 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\url.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-04-21 00:03:07 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\wininet.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\urlmon.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-04-21 00:03:07 ----A---- C:\Windows\system32\msrating.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\msls31.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-21 00:03:07 ----A---- C:\Windows\system32\iertutil.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-04-21 00:03:06 ----A---- C:\Windows\system32\pngfilt.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\occache.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\mshtmler.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\mshtml.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\mshta.exe
2011-04-21 00:03:06 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-21 00:03:06 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\jscript9.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\jscript.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\imgutil.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieUnatt.exe
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieui.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\iesysprep.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\iepeers.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieframe.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieakui.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieaksie.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\ieakeng.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\dxtrans.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\dxtmsft.dll
2011-04-21 00:03:06 ----A---- C:\Windows\system32\admparse.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\wextract.exe
2011-04-21 00:03:05 ----A---- C:\Windows\system32\webcheck.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\vbscript.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\url.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\inseng.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\iexpress.exe
2011-04-21 00:03:05 ----A---- C:\Windows\system32\iesetup.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\iernonce.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\ieapfltr.dll
2011-04-21 00:03:05 ----A---- C:\Windows\system32\ie4uinit.exe
2011-04-21 00:03:05 ----A---- C:\Windows\system32\icardie.dll
2011-04-20 00:54:48 ----A---- C:\STFEC8E.tmp
2011-04-20 00:53:56 ----A---- C:\STF2220.tmp
2011-04-20 00:53:10 ----A---- C:\STF6FC1.tmp
2011-04-20 00:51:28 ----A---- C:\STFDF69.tmp
2011-04-20 00:50:25 ----A---- C:\STFEADD.tmp
2011-04-18 20:50:25 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Hamachi
2011-04-18 16:53:08 ----D---- C:\Program Files (x86)\AMD
2011-04-18 03:24:36 ----D---- C:\Windows\SYSWOW64\directx
2011-04-17 03:19:44 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\CyberLink
2011-04-17 03:19:28 ----D---- C:\ProgramData\CyberLink
2011-04-17 03:17:44 ----D---- C:\Program Files (x86)\CyberLink
2011-04-17 03:17:44 ----A---- C:\Windows\SYSWOW64\msxml3a.dll
2011-04-17 03:17:00 ----D---- C:\ProgramData\Temp
2011-04-16 23:02:17 ----ASH---- C:\pagefile.sys
2011-04-14 23:47:06 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\TS3Client
2011-04-14 23:46:13 ----D---- C:\Program Files\TeamSpeak 3 Client
2011-04-14 19:18:48 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\skypePM
2011-04-14 19:18:48 ----D---- C:\ProgramData\Skype Extras
2011-04-14 19:18:12 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Skype
2011-04-14 19:17:18 ----RD---- C:\Program Files (x86)\Skype
2011-04-14 19:17:14 ----D---- C:\ProgramData\Skype
2011-04-14 15:35:28 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-04-14 15:35:28 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-14 15:35:25 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 15:35:13 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 15:35:12 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-04-14 15:35:12 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-04-14 15:35:12 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 15:34:44 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 15:34:44 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 15:34:44 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 15:34:43 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-04-14 15:34:43 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 15:34:42 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-04-14 15:34:42 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 15:32:49 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-04-14 15:32:49 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-04-14 15:32:49 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 15:32:49 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 15:32:49 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 15:32:45 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 15:32:44 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-04-14 15:32:43 ----A---- C:\Windows\system32\winresume.exe
2011-04-14 15:32:43 ----A---- C:\Windows\system32\winload.exe
2011-04-14 15:32:42 ----A---- C:\Windows\system32\kdusb.dll
2011-04-14 15:32:42 ----A---- C:\Windows\system32\kdcom.dll
2011-04-14 15:32:42 ----A---- C:\Windows\system32\kd1394.dll
2011-04-14 15:32:08 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-14 15:32:05 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 15:32:05 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 15:32:05 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 15:32:05 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-14 04:15:18 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Cloanto
2011-04-13 21:59:14 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2011-04-13 21:58:46 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2011-04-13 15:54:20 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\TeamViewer
2011-04-13 15:54:05 ----D---- C:\Program Files (x86)\TeamViewer
2011-04-12 22:24:50 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2011-04-12 22:24:07 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2011-04-12 17:26:27 ----A---- C:\Windows\IsUninst.exe
2011-04-11 18:37:26 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\VitySoft
2011-04-10 16:38:31 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Nero
2011-04-10 16:35:50 ----D---- C:\Program Files (x86)\Nero
2011-04-10 16:35:37 ----D---- C:\ProgramData\Nero
2011-04-08 14:50:38 ----A---- C:\Windows\War3Unin.pif
2011-04-08 14:50:38 ----A---- C:\Windows\War3Unin.exe
2011-04-08 13:28:58 ----A---- C:\Windows\SYSWOW64\xfcodec.dll
2011-04-08 13:28:58 ----A---- C:\Windows\system32\xfcodec64.dll
2011-04-07 22:43:09 ----A---- C:\Windows\SYSWOW64\CmdLineExt03.dll
2011-04-06 06:11:44 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2011-04-06 04:29:18 ----A---- C:\Windows\system32\atio6axx.dll
2011-04-06 04:07:18 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2011-04-06 04:03:24 ----A---- C:\Windows\system32\atiapfxx.exe
2011-04-06 04:03:14 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2011-04-06 03:59:32 ----A---- C:\Windows\system32\ATIDEMGX.dll
2011-04-06 03:59:24 ----A---- C:\Windows\system32\atieclxx.exe
2011-04-06 03:58:48 ----A---- C:\Windows\system32\atiesrxx.exe
2011-04-06 03:57:36 ----A---- C:\Windows\system32\atitmm64.dll
2011-04-06 03:57:20 ----A---- C:\Windows\system32\atipdl64.dll
2011-04-06 03:57:14 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2011-04-06 03:57:02 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll
2011-04-06 03:56:56 ----A---- C:\Windows\system32\atimuixx.dll
2011-04-06 03:56:52 ----A---- C:\Windows\system32\atiedu64.dll
2011-04-06 03:56:48 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2011-04-06 03:53:34 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2011-04-06 03:42:14 ----A---- C:\Windows\system32\aticalrt64.dll
2011-04-06 03:42:12 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2011-04-06 03:42:04 ----A---- C:\Windows\system32\aticalcl64.dll
2011-04-06 03:42:02 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2011-04-06 03:41:50 ----A---- C:\Windows\system32\aticaldd64.dll
2011-04-06 03:38:50 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2011-04-06 03:35:00 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2011-04-06 03:34:38 ----A---- C:\Windows\system32\atiumd6v.dll
2011-04-06 03:34:16 ----A---- C:\Windows\SYSWOW64\atiumdmv.dll
2011-04-06 03:34:04 ----A---- C:\Windows\system32\atiumd6a.dll
2011-04-06 03:29:00 ----A---- C:\Windows\system32\atiumd64.dll
2011-04-06 03:26:40 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2011-04-06 03:22:20 ----A---- C:\Windows\system32\atiadlxx.dll
2011-04-06 03:22:12 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2011-04-06 03:22:04 ----A---- C:\Windows\system32\atig6pxx.dll
2011-04-06 03:22:00 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2011-04-06 03:22:00 ----A---- C:\Windows\system32\atiglpxx.dll
2011-04-06 03:21:56 ----A---- C:\Windows\system32\atig6txx.dll
2011-04-06 03:21:50 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2011-04-06 03:21:42 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2011-04-06 03:20:52 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2011-04-06 03:20:04 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2011-04-06 03:13:22 ----A---- C:\Windows\system32\atimpc64.dll
2011-04-06 03:13:22 ----A---- C:\Windows\system32\amdpcom64.dll
2011-04-06 03:13:16 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2011-04-06 03:13:16 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2011-04-06 00:51:31 ----D---- C:\Program Files (x86)\Image Grabber II
2011-04-05 22:09:50 ----A---- C:\Windows\system32\OVDecode64.dll
2011-04-05 22:09:22 ----A---- C:\Windows\system32\amdocl64.dll
2011-04-04 21:29:59 ----A---- C:\Windows\SYSWOW64\npptNT2.sys
2011-04-04 21:29:45 ----D---- C:\Program Files\Common Files\INCA Shared
2011-04-04 19:40:35 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\ijjigame
2011-04-04 19:39:33 ----D---- C:\Program Files (x86)\REACTOR
2011-04-03 18:33:36 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2011-04-02 17:57:43 ----D---- C:\Program Files\MediaInfo
2011-04-01 21:21:24 ----D---- C:\ProgramData\Electronic Arts
2011-04-01 21:21:24 ----D---- C:\ProgramData\EA Core
2011-03-30 12:25:12 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2011-03-30 12:25:10 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\SystemRequirementsLab
2011-03-30 12:24:55 ----D---- C:\Windows\Sun

======List of files/folders modified in the last 1 months======

2011-04-29 02:06:04 ----RD---- C:\Program Files
2011-04-29 02:03:55 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\uTorrent
2011-04-29 01:38:01 ----D---- C:\Windows\Temp
2011-04-29 01:31:29 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Xfire
2011-04-28 22:18:56 ----D---- C:\Program Files (x86)\Garena
2011-04-28 20:33:51 ----D---- C:\Users\W1ll.1.4M\AppData\Roaming\Mumble
2011-04-28 17:19:18 ----D---- C:\Windows\system32\config
2011-04-28 01:40:40 ----D---- C:\Windows
2011-04-28 01:40:36 ----D---- C:\Windows\winsxs
2011-04-28 01:39:38 ----D---- C:\Windows\SysWOW64
2011-04-28 01:39:38 ----D---- C:\Windows\System32
2011-04-28 01:38:49 ----D---- C:\Windows\system32\catroot
2011-04-28 01:38:39 ----D---- C:\Windows\SYSWOW64\en-US
2011-04-28 01:38:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-04-28 01:38:39 ----D---- C:\Windows\system32\en-US
2011-04-28 01:38:39 ----D---- C:\Windows\system32\drivers
2011-04-28 01:38:39 ----D---- C:\Windows\system32\cs-CZ
2011-04-28 01:38:39 ----D---- C:\Windows\AppPatch
2011-04-28 01:38:38 ----D---- C:\Windows\system32\DriverStore
2011-04-28 01:27:52 ----SHD---- C:\Windows\Installer
2011-04-28 01:27:52 ----HD---- C:\ProgramData
2011-04-28 01:27:50 ----RD---- C:\Program Files (x86)
2011-04-28 01:27:25 ----D---- C:\Program Files\ATI Technologies
2011-04-28 01:24:34 ----D---- C:\Windows\inf
2011-04-28 01:20:11 ----SHD---- C:\System Volume Information
2011-04-28 01:03:45 ----D---- C:\Windows\system32\catroot2
2011-04-28 00:59:55 ----SD---- C:\Users\W1ll.1.4M\AppData\Roaming\Microsoft
2011-04-28 00:59:55 ----D---- C:\Windows\system32\appmgmt
2011-04-28 00:56:59 ----SD---- C:\ProgramData\Microsoft
2011-04-28 00:56:58 ----D---- C:\Windows\Prefetch
2011-04-24 16:00:52 ----D---- C:\Windows\rescache
2011-04-24 13:44:21 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-04-22 13:07:20 ----D---- C:\ProgramData\Xfire
2011-04-21 07:49:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-21 07:48:32 ----D---- C:\Windows\ModemLogs
2011-04-21 07:42:25 ----D---- C:\Windows\system32\wdi
2011-04-21 00:25:40 ----D---- C:\Windows\SYSWOW64\migration
2011-04-21 00:25:40 ----D---- C:\Program Files\Internet Explorer
2011-04-21 00:25:40 ----D---- C:\Program Files (x86)\Internet Explorer
2011-04-21 00:25:39 ----D---- C:\Windows\system32\migration
2011-04-21 00:25:39 ----D---- C:\Windows\PolicyDefinitions
2011-04-21 00:04:19 ----D---- C:\Windows\Logs
2011-04-19 03:50:55 ----D---- C:\ProgramData\Win7codecs
2011-04-18 16:22:44 ----A---- C:\Windows\system32\MRT.exe
2011-04-18 03:24:38 ----A---- C:\Windows\system32\wrap_oal.dll
2011-04-18 03:24:38 ----A---- C:\Windows\system32\OpenAL32.dll
2011-04-18 03:24:37 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2011-04-18 03:24:37 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2011-04-17 03:19:30 ----D---- C:\Windows\system32\Tasks
2011-04-17 03:19:04 ----D---- C:\Program Files (x86)\Common Files
2011-04-17 03:16:19 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2011-04-16 21:46:31 ----RSD---- C:\Windows\assembly
2011-04-16 17:19:13 ----D---- C:\Windows\Microsoft.NET
2011-04-15 12:10:19 ----D---- C:\Windows\system32\Boot
2011-04-14 20:30:10 ----D---- C:\Program Files (x86)\uTorrent
2011-04-13 17:39:49 ----D---- C:\Program Files (x86)\Opera
2011-04-13 00:06:50 ----DC---- C:\Windows\system32\DRVSTORE
2011-04-12 13:55:43 ----D---- C:\Program Files (x86)\Xfire
2011-04-07 00:48:16 ----D---- C:\Windows\system32\LogFiles
2011-04-06 04:02:00 ----A---- C:\Windows\system32\aticfx64.dll
2011-04-06 03:44:52 ----A---- C:\Windows\system32\atidxx64.dll
2011-04-06 03:28:02 ----A---- C:\Windows\system32\coinst.dll
2011-04-06 03:20:58 ----A---- C:\Windows\system32\atiuxp64.dll
2011-04-06 03:20:46 ----A---- C:\Windows\system32\atiu9p64.dll
2011-04-06 03:20:38 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2011-04-05 13:28:48 ----D---- C:\Windows\system32\NDF
2011-04-04 21:37:51 ----D---- C:\Windows\Downloaded Program Files
2011-04-04 21:30:07 ----D---- C:\Windows\SYSWOW64\drivers
2011-04-04 21:29:45 ----D---- C:\Program Files\Common Files
2011-04-04 18:47:46 ----D---- C:\Windows\system32\drivers\UMDF
2011-03-30 09:33:00 ----SHD---- C:\$Recycle.Bin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-23 254528]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 188928]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/04/17 03:19:24]; \??\C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-08-26 146928]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2009-07-20 27136]
R3 ALSysIO;ALSysIO; \??\C:\Users\W1LL1~1.4M\AppData\Local\Temp\ALSysIO64.sys []
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-06 9323520]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-06 304128]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2011-04-21 33344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-01-19 2242720]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 40832]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 72064]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 dump_wmimmc;dump_wmimmc; \??\D:\AVA\Binaries\GameGuard\dump_wmimmc.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 NPPTNT2;NPPTNT2; \??\C:\Windows\syswow64\npptNT2.sys [2005-01-02 4682]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-04-06 50688]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan60.sys [2007-12-03 24064]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-02-17 156080]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-06 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-04-05 365568]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 12784]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\syswow64\GameMon.des [2011-03-08 3986936]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-03-24 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[W1ll.1.4M]

ComboFix 11-04-29.02 - W1ll.1.4M 30.04.2011 4:14.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1033.18.4093.2938 [GMT 2:00]
Spuštěný z: c:\users\W1ll.1.4M\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-28 do 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-30 02:20 . 2011-04-30 02:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-29 11:25 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CC3B0BDB-60C2-45B8-96BC-D9451D87F118}\mpengine.dll
2011-04-29 00:06 . 2011-04-29 00:08 -------- d-----w- c:\program files\trend micro
2011-04-29 00:06 . 2011-04-29 00:06 -------- d-----w- C:\rsit
2011-04-27 23:27 . 2011-04-27 23:27 -------- d-----w- c:\programdata\ATI
2011-04-27 23:27 . 2011-04-27 23:27 -------- d-----w- c:\program files (x86)\AMD APP
2011-04-27 23:04 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-04-27 23:04 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-04-27 23:04 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-27 23:04 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-04-27 23:04 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2011-04-27 23:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-04-27 23:03 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-04-27 23:03 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-04-27 23:03 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-04-27 23:03 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-04-27 23:03 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-04-27 23:03 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-04-27 23:03 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-04-27 23:03 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2011-04-27 23:03 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-04-27 23:03 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-04-27 23:03 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2011-04-27 21:25 . 2011-04-27 21:25 94208 ----a-w- c:\windows\DIIUnin.exe
2011-04-27 21:25 . 2011-04-27 21:25 2829 ----a-w- c:\windows\DIIUnin.pif
2011-04-26 23:49 . 2011-04-26 23:50 967 ----a-w- c:\windows\ScUnin.pif
2011-04-26 23:49 . 2011-04-26 23:50 94208 ----a-w- c:\windows\ScUnin.exe
2011-04-23 17:05 . 2011-04-23 17:05 -------- d-----w- c:\programdata\Exent
2011-04-23 17:00 . 2011-04-23 17:00 -------- d-----w- c:\programdata\Frag Games
2011-04-23 16:59 . 2011-04-23 17:07 -------- d-----w- C:\Remote Programs
2011-04-22 11:25 . 2011-04-22 11:25 159080 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
2011-04-21 18:41 . 2011-04-21 18:41 -------- d-----w- c:\program files (x86)\Hamachi
2011-04-21 18:41 . 2011-04-21 18:41 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-04-19 22:54 . 2011-04-19 22:54 3778 ----a-w- C:\STFEC8E.tmp
2011-04-19 22:53 . 2011-04-19 22:53 3820 ----a-w- C:\STF2220.tmp
2011-04-19 22:53 . 2011-04-19 22:53 4106 ----a-w- C:\STF6FC1.tmp
2011-04-19 22:51 . 2011-04-19 22:51 4530 ----a-w- C:\STFDF69.tmp
2011-04-19 22:50 . 2011-04-19 22:50 3778 ----a-w- C:\STFEADD.tmp
2011-04-18 18:50 . 2011-04-23 23:28 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Hamachi
2011-04-18 14:53 . 2011-04-18 14:53 -------- d-----w- c:\program files (x86)\AMD
2011-04-18 14:52 . 2011-04-18 14:54 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Downloaded Installations
2011-04-18 01:25 . 2011-04-18 01:27 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Bit.Trip Beat
2011-04-18 00:44 . 2011-04-19 22:50 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\SKIDROW
2011-04-18 00:44 . 2011-04-18 00:51 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\BIT.TRIP RUNNER
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Cyberlink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\CyberLink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\programdata\CyberLink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\program files (x86)\Common Files\CyberLink
2011-04-17 01:17 . 2011-04-17 01:19 -------- d-----w- c:\program files (x86)\CyberLink
2011-04-17 01:17 . 2011-04-17 01:16 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll
2011-04-16 19:53 . 2011-04-16 19:53 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Two Worlds II
2011-04-16 19:48 . 2011-04-16 19:48 146944 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{CFC5B23E-16FC-4E40-8599-36F37AD2C809}-rld-tw2k.exe
2011-04-14 21:47 . 2011-04-20 20:15 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\TS3Client
2011-04-14 21:46 . 2011-04-14 21:46 -------- d-----w- c:\program files\TeamSpeak 3 Client
2011-04-14 17:18 . 2011-04-14 17:18 -------- d-----w- c:\programdata\Skype Extras
2011-04-14 17:18 . 2011-04-14 17:18 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\skypePM
2011-04-14 17:18 . 2011-04-14 17:20 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----w- c:\program files (x86)\Common Files\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----r- c:\program files (x86)\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----w- c:\programdata\Skype
2011-04-14 13:35 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 13:35 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-04-14 13:35 . 2011-03-03 03:52 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-04-14 13:35 . 2011-03-11 06:34 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 13:35 . 2011-03-11 06:34 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 13:35 . 2011-03-11 05:33 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-04-14 13:35 . 2011-03-11 05:33 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-04-14 13:34 . 2011-02-23 04:56 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-04-14 13:34 . 2011-02-23 04:56 411648 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-14 13:34 . 2011-02-23 04:55 167936 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-14 13:34 . 2011-02-19 09:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2011-04-14 13:34 . 2011-02-19 04:34 294912 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-04-14 13:34 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-04-14 13:34 . 2011-02-19 06:30 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-04-14 02:15 . 2011-04-14 02:15 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Cloanto
2011-04-13 19:59 . 2011-04-13 19:59 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-04-13 19:58 . 2011-04-13 19:58 12385280 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-04-13 13:54 . 2011-04-13 14:01 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\TeamViewer
2011-04-13 13:54 . 2011-04-13 13:54 -------- d-----w- c:\program files (x86)\TeamViewer
2011-04-12 20:24 . 2011-02-17 15:21 228272 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-04-12 20:24 . 2011-02-17 15:21 56688 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-04-12 17:46 . 2011-04-12 17:46 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\DOSBox
2011-04-12 15:26 . 1997-08-26 10:06 315904 ----a-w- c:\windows\IsUninst.exe
2011-04-12 15:19 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\objectps.dll
2011-04-12 15:19 . 2000-01-04 04:39 212992 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2011-04-11 16:37 . 2011-04-11 16:37 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\VitySoft
2011-04-10 14:38 . 2011-04-10 14:38 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Nero
2011-04-10 14:35 . 2011-04-10 14:36 -------- d-----w- c:\program files (x86)\Nero
2011-04-10 14:35 . 2011-04-10 14:36 -------- d-----w- c:\program files (x86)\Common Files\Nero
2011-04-10 14:35 . 2011-04-10 14:35 -------- d-----w- c:\programdata\Nero
2011-04-08 12:50 . 2011-04-08 12:52 2829 ----a-w- c:\windows\War3Unin.pif
2011-04-08 12:50 . 2011-04-08 12:52 139264 ----a-w- c:\windows\War3Unin.exe
2011-04-08 11:28 . 2011-04-08 11:28 41872 ----a-w- c:\windows\SysWow64\xfcodec.dll
2011-04-08 11:28 . 2011-04-08 11:28 27536 ----a-w- c:\windows\system32\xfcodec64.dll
2011-04-07 20:43 . 2011-04-28 16:00 43520 ----a-w- c:\windows\SysWow64\CmdLineExt03.dll
2011-04-06 04:11 . 2011-04-06 04:11 9323520 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-04-06 02:29 . 2011-04-06 02:29 22623232 ----a-w- c:\windows\system32\atio6axx.dll
2011-04-06 02:07 . 2011-04-06 02:07 17469952 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-04-06 02:03 . 2011-04-06 02:03 147456 ----a-w- c:\windows\system32\atiapfxx.exe
2011-04-06 02:03 . 2011-04-06 02:03 671744 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-04-06 01:59 . 2011-04-06 01:59 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-04-06 01:59 . 2011-04-06 01:59 480256 ----a-w- c:\windows\system32\atieclxx.exe
2011-04-06 01:58 . 2011-04-06 01:58 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2011-04-06 01:57 . 2011-04-06 01:57 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-04-06 01:57 . 2011-04-06 01:57 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-04-06 01:57 . 2011-04-06 01:57 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-04-06 01:57 . 2011-04-06 01:57 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-04-06 01:56 . 2011-04-06 01:56 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-04-06 01:56 . 2011-04-06 01:56 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-04-06 01:56 . 2011-04-06 01:56 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-04-06 01:53 . 2011-04-06 01:53 4307968 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-04-06 01:42 . 2011-04-06 01:42 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-04-06 01:42 . 2011-04-06 01:42 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-04-06 01:42 . 2011-04-06 01:42 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-04-06 01:42 . 2011-04-06 01:42 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-04-06 01:41 . 2011-04-06 01:41 7467008 ----a-w- c:\windows\system32\aticaldd64.dll
2011-04-06 01:38 . 2011-04-06 01:38 6098432 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-04-06 01:35 . 2011-04-06 01:35 4256768 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-04-06 01:34 . 2011-04-06 01:34 1208320 ----a-w- c:\windows\system32\atiumd6v.dll
2011-04-06 01:34 . 2011-04-06 01:34 1912832 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-04-06 01:34 . 2011-04-06 01:34 3421184 ----a-w- c:\windows\system32\atiumd6a.dll
2011-04-06 01:29 . 2011-04-06 01:29 5408256 ----a-w- c:\windows\system32\atiumd64.dll
2011-04-06 01:26 . 2011-04-06 01:26 3631616 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-04-06 01:22 . 2011-04-06 01:22 361984 ----a-w- c:\windows\system32\atiadlxx.dll
2011-04-06 01:22 . 2011-04-06 01:22 258048 ----a-w- c:\windows\SysWow64\atiadlxy.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-18 01:24 . 2011-03-25 12:14 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2011-04-18 01:24 . 2011-03-25 12:14 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2011-04-18 01:24 . 2011-03-25 12:14 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-04-18 01:24 . 2011-03-25 12:14 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-04-17 01:16 . 2009-06-24 19:19 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll
2011-04-11 08:21 . 2011-03-23 14:11 8802128 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-04-06 02:02 . 2011-01-26 21:59 788480 ----a-w- c:\windows\system32\aticfx64.dll
2011-04-06 01:44 . 2011-01-26 21:40 5086208 ----a-w- c:\windows\system32\atidxx64.dll
2011-04-06 01:28 . 2011-01-26 21:20 58880 ----a-w- c:\windows\system32\coinst.dll
2011-04-06 01:20 . 2011-01-26 21:12 40448 ----a-w- c:\windows\system32\atiuxp64.dll
2011-04-06 01:20 . 2011-01-26 21:12 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-04-06 01:20 . 2011-01-26 21:12 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-03-24 23:34 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-03-24 23:34 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-03-23 14:20 . 2011-03-23 14:20 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-23 14:10 . 2011-03-26 03:41 601424 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2011-03-23 13:45 . 2011-03-23 13:45 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-03-21 17:56 . 2011-03-21 17:56 53760 ----a-w- c:\windows\system32\OpenCL.dll
2011-03-21 17:56 . 2011-03-21 17:56 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-03-04 06:19 . 2011-04-27 23:04 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 23:04 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-23 09:34 . 2011-03-23 13:39 7947600 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E5BAA81-FFB6-4613-8986-DE9B5CC916DD}\mpengine.dll
2011-02-19 12:05 . 2011-03-24 23:24 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 12:04 . 2011-03-24 23:24 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 12:04 . 2011-03-24 19:20 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 06:30 . 2011-03-24 23:24 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 06:30 . 2011-03-24 23:24 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-17 15:21 . 2011-02-17 15:21 156080 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-02-08 10:52 . 2011-02-08 10:52 145688 ----a-w- c:\windows\SysWow64\MicrosoftUpdateCatalogWebControl.dll
2011-02-02 17:11 . 2011-03-23 13:39 270720 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2010-08-26 75048]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-05 336384]
.
c:\users\W1ll.1.4M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2011-4-8 3510160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 dump_wmimmc;dump_wmimmc;d:\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0);c:\windows\system32\DRIVERS\RtTeam60.sys [x]
R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan60.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-04-05 365568]
S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys [x]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena\safedrv.sys [x]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-19 9996320]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-Exetender_298 - c:\program files (x86)\Frag Games\GPlayer.exe
Wow6432Node-HKU-Default-Run-Exetender_298 - c:\program files (x86)\Frag Games\GPlayer.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-30 04:22:32
ComboFix-quarantined-files.txt 2011-04-30 02:22
.
Před spuštěním: Volných bajtů: 110 288 318 464
Po spuštění: Volných bajtů: 114 462 294 016
.
- - End Of File - - ADBFFC18778E24961B03ABD7C71AD8EE

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Collect::
C:\STFEC8E.tmp
C:\STF2220.tmp
C:\STF6FC1.tmp
C:\STFDF69.tmp
C:\STFEADD.tmp

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příakzy ze skriptu.

[W1ll.1.4M]

Tak po restartu to nějaký soubor uploadovalo s tím, že je to malware.

ComboFix 11-04-29.03 - W1ll.1.4M 30.04.2011 15:34:57.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1033.18.4093.2530 [GMT 2:00]
Spuštěný z: c:\users\W1ll.1.4M\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\W1ll.1.4M\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\STF2220.tmp
C:\STF6FC1.tmp
C:\STFDF69.tmp
C:\STFEADD.tmp
C:\STFEC8E.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-28 do 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-30 13:40 . 2011-04-30 13:40 -------- d-----w- c:\users\Guest\AppData\Local\temp
2011-04-30 13:40 . 2011-04-30 13:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-30 13:40 . 2011-04-30 13:40 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2011-04-30 13:30 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{371D1294-A342-413A-99CF-6D890636F1EC}\mpengine.dll
2011-04-29 00:06 . 2011-04-29 00:08 -------- d-----w- c:\program files\trend micro
2011-04-29 00:06 . 2011-04-29 00:06 -------- d-----w- C:\rsit
2011-04-27 23:27 . 2011-04-27 23:27 -------- d-----w- c:\programdata\ATI
2011-04-27 23:27 . 2011-04-27 23:27 -------- d-----w- c:\program files (x86)\AMD APP
2011-04-27 23:04 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-04-27 23:04 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-04-27 23:04 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-27 23:04 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-04-27 23:04 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2011-04-27 23:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-04-27 23:03 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-04-27 23:03 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-04-27 23:03 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-04-27 23:03 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-04-27 23:03 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-04-27 23:03 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-04-27 23:03 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-04-27 23:03 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2011-04-27 23:03 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-04-27 23:03 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-04-27 23:03 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2011-04-27 21:25 . 2011-04-27 21:25 94208 ----a-w- c:\windows\DIIUnin.exe
2011-04-27 21:25 . 2011-04-27 21:25 2829 ----a-w- c:\windows\DIIUnin.pif
2011-04-26 23:49 . 2011-04-26 23:50 967 ----a-w- c:\windows\ScUnin.pif
2011-04-26 23:49 . 2011-04-26 23:50 94208 ----a-w- c:\windows\ScUnin.exe
2011-04-23 17:05 . 2011-04-23 17:05 -------- d-----w- c:\programdata\Exent
2011-04-23 17:00 . 2011-04-23 17:00 -------- d-----w- c:\programdata\Frag Games
2011-04-23 16:59 . 2011-04-23 17:07 -------- d-----w- C:\Remote Programs
2011-04-22 11:25 . 2011-04-22 11:25 159080 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
2011-04-21 18:41 . 2011-04-21 18:41 -------- d-----w- c:\program files (x86)\Hamachi
2011-04-21 18:41 . 2011-04-21 18:41 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-04-18 18:50 . 2011-04-23 23:28 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Hamachi
2011-04-18 14:53 . 2011-04-18 14:53 -------- d-----w- c:\program files (x86)\AMD
2011-04-18 14:52 . 2011-04-18 14:54 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Downloaded Installations
2011-04-18 01:25 . 2011-04-18 01:27 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Bit.Trip Beat
2011-04-18 00:44 . 2011-04-19 22:50 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\SKIDROW
2011-04-18 00:44 . 2011-04-18 00:51 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\BIT.TRIP RUNNER
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Cyberlink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\CyberLink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\programdata\CyberLink
2011-04-17 01:19 . 2011-04-17 01:19 -------- d-----w- c:\program files (x86)\Common Files\CyberLink
2011-04-17 01:17 . 2011-04-17 01:19 -------- d-----w- c:\program files (x86)\CyberLink
2011-04-17 01:17 . 2011-04-17 01:16 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll
2011-04-16 19:53 . 2011-04-16 19:53 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\Two Worlds II
2011-04-16 19:48 . 2011-04-16 19:48 146944 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{CFC5B23E-16FC-4E40-8599-36F37AD2C809}-rld-tw2k.exe
2011-04-14 21:47 . 2011-04-20 20:15 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\TS3Client
2011-04-14 21:46 . 2011-04-14 21:46 -------- d-----w- c:\program files\TeamSpeak 3 Client
2011-04-14 17:18 . 2011-04-14 17:18 -------- d-----w- c:\programdata\Skype Extras
2011-04-14 17:18 . 2011-04-14 17:18 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\skypePM
2011-04-14 17:18 . 2011-04-14 17:20 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----w- c:\program files (x86)\Common Files\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----r- c:\program files (x86)\Skype
2011-04-14 17:17 . 2011-04-14 17:17 -------- d-----w- c:\programdata\Skype
2011-04-14 13:35 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 13:35 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-04-14 13:35 . 2011-03-03 03:52 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-04-14 13:35 . 2011-03-11 06:34 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 13:35 . 2011-03-11 06:34 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 13:35 . 2011-03-11 05:33 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-04-14 13:35 . 2011-03-11 05:33 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-04-14 13:34 . 2011-02-23 04:56 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-04-14 13:34 . 2011-02-23 04:56 411648 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-14 13:34 . 2011-02-23 04:55 167936 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-14 13:34 . 2011-02-19 09:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2011-04-14 13:34 . 2011-02-19 04:34 294912 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-04-14 13:34 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-04-14 13:34 . 2011-02-19 06:30 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-04-14 02:15 . 2011-04-14 02:15 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Cloanto
2011-04-13 19:59 . 2011-04-13 19:59 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-04-13 19:58 . 2011-04-13 19:58 12385280 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-04-13 13:54 . 2011-04-13 14:01 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\TeamViewer
2011-04-13 13:54 . 2011-04-13 13:54 -------- d-----w- c:\program files (x86)\TeamViewer
2011-04-12 20:24 . 2011-02-17 15:21 228272 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-04-12 20:24 . 2011-02-17 15:21 56688 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-04-12 17:46 . 2011-04-12 17:46 -------- d-----w- c:\users\W1ll.1.4M\AppData\Local\DOSBox
2011-04-12 15:26 . 1997-08-26 10:06 315904 ----a-w- c:\windows\IsUninst.exe
2011-04-12 15:19 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\objectps.dll
2011-04-12 15:19 . 2000-01-04 04:39 212992 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2011-04-11 16:37 . 2011-04-11 16:37 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\VitySoft
2011-04-10 14:38 . 2011-04-10 14:38 -------- d-----w- c:\users\W1ll.1.4M\AppData\Roaming\Nero
2011-04-10 14:35 . 2011-04-10 14:36 -------- d-----w- c:\program files (x86)\Nero
2011-04-10 14:35 . 2011-04-10 14:36 -------- d-----w- c:\program files (x86)\Common Files\Nero
2011-04-10 14:35 . 2011-04-10 14:35 -------- d-----w- c:\programdata\Nero
2011-04-08 12:50 . 2011-04-08 12:52 2829 ----a-w- c:\windows\War3Unin.pif
2011-04-08 12:50 . 2011-04-08 12:52 139264 ----a-w- c:\windows\War3Unin.exe
2011-04-08 11:28 . 2011-04-08 11:28 41872 ----a-w- c:\windows\SysWow64\xfcodec.dll
2011-04-08 11:28 . 2011-04-08 11:28 27536 ----a-w- c:\windows\system32\xfcodec64.dll
2011-04-07 20:43 . 2011-04-28 16:00 43520 ----a-w- c:\windows\SysWow64\CmdLineExt03.dll
2011-04-06 04:11 . 2011-04-06 04:11 9323520 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-04-06 02:29 . 2011-04-06 02:29 22623232 ----a-w- c:\windows\system32\atio6axx.dll
2011-04-06 02:07 . 2011-04-06 02:07 17469952 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-04-06 02:03 . 2011-04-06 02:03 147456 ----a-w- c:\windows\system32\atiapfxx.exe
2011-04-06 02:03 . 2011-04-06 02:03 671744 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-04-06 01:59 . 2011-04-06 01:59 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-04-06 01:59 . 2011-04-06 01:59 480256 ----a-w- c:\windows\system32\atieclxx.exe
2011-04-06 01:58 . 2011-04-06 01:58 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2011-04-06 01:57 . 2011-04-06 01:57 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-04-06 01:57 . 2011-04-06 01:57 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-04-06 01:57 . 2011-04-06 01:57 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-04-06 01:57 . 2011-04-06 01:57 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-04-06 01:56 . 2011-04-06 01:56 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-04-06 01:56 . 2011-04-06 01:56 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-04-06 01:56 . 2011-04-06 01:56 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-04-06 01:53 . 2011-04-06 01:53 4307968 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-04-06 01:42 . 2011-04-06 01:42 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-04-06 01:42 . 2011-04-06 01:42 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-04-06 01:42 . 2011-04-06 01:42 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-04-06 01:42 . 2011-04-06 01:42 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-04-06 01:41 . 2011-04-06 01:41 7467008 ----a-w- c:\windows\system32\aticaldd64.dll
2011-04-06 01:38 . 2011-04-06 01:38 6098432 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-04-06 01:35 . 2011-04-06 01:35 4256768 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-04-06 01:34 . 2011-04-06 01:34 1208320 ----a-w- c:\windows\system32\atiumd6v.dll
2011-04-06 01:34 . 2011-04-06 01:34 1912832 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-04-06 01:34 . 2011-04-06 01:34 3421184 ----a-w- c:\windows\system32\atiumd6a.dll
2011-04-06 01:29 . 2011-04-06 01:29 5408256 ----a-w- c:\windows\system32\atiumd64.dll
2011-04-06 01:26 . 2011-04-06 01:26 3631616 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-04-06 01:22 . 2011-04-06 01:22 361984 ----a-w- c:\windows\system32\atiadlxx.dll
2011-04-06 01:22 . 2011-04-06 01:22 258048 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-04-06 01:22 . 2011-04-06 01:22 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2011-04-06 01:22 . 2011-04-06 01:22 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2011-04-06 01:22 . 2011-04-06 01:22 12800 ----a-w- c:\windows\system32\atiglpxx.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-18 01:24 . 2011-03-25 12:14 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2011-04-18 01:24 . 2011-03-25 12:14 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2011-04-18 01:24 . 2011-03-25 12:14 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-04-18 01:24 . 2011-03-25 12:14 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-04-17 01:16 . 2009-06-24 19:19 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll
2011-04-11 08:21 . 2011-03-23 14:11 8802128 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-04-06 02:02 . 2011-01-26 21:59 788480 ----a-w- c:\windows\system32\aticfx64.dll
2011-04-06 01:44 . 2011-01-26 21:40 5086208 ----a-w- c:\windows\system32\atidxx64.dll
2011-04-06 01:28 . 2011-01-26 21:20 58880 ----a-w- c:\windows\system32\coinst.dll
2011-04-06 01:20 . 2011-01-26 21:12 40448 ----a-w- c:\windows\system32\atiuxp64.dll
2011-04-06 01:20 . 2011-01-26 21:12 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-04-06 01:20 . 2011-01-26 21:12 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-03-24 23:34 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-03-24 23:34 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-03-23 14:20 . 2011-03-23 14:20 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-23 14:10 . 2011-03-26 03:41 601424 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2011-03-23 13:45 . 2011-03-23 13:45 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-03-21 17:56 . 2011-03-21 17:56 53760 ----a-w- c:\windows\system32\OpenCL.dll
2011-03-21 17:56 . 2011-03-21 17:56 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-03-04 06:19 . 2011-04-27 23:04 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 23:04 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-23 09:34 . 2011-03-23 13:39 7947600 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E5BAA81-FFB6-4613-8986-DE9B5CC916DD}\mpengine.dll
2011-02-19 12:05 . 2011-03-24 23:24 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 12:04 . 2011-03-24 23:24 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 12:04 . 2011-03-24 19:20 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 06:30 . 2011-03-24 23:24 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 06:30 . 2011-03-24 23:24 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-17 15:21 . 2011-02-17 15:21 156080 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-02-08 10:52 . 2011-02-08 10:52 145688 ----a-w- c:\windows\SysWow64\MicrosoftUpdateCatalogWebControl.dll
2011-02-02 17:11 . 2011-03-23 13:39 270720 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2010-08-26 75048]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-05 336384]
.
c:\users\W1ll.1.4M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2011-4-8 3510160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 ALSysIO;ALSysIO;c:\users\W1LL1~1.4M\AppData\Local\Temp\ALSysIO64.sys [x]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 dump_wmimmc;dump_wmimmc;d:\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena\safedrv.sys [x]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0);c:\windows\system32\DRIVERS\RtTeam60.sys [x]
R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan60.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-04-05 365568]
S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys [x]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-19 9996320]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
.
**************************************************************************
.
Celkový čas: 2011-04-30 15:47:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-04-30 13:47
ComboFix2.txt 2011-04-30 02:22
.
Před spuštěním: Volných bajtů: 113 907 376 128
Po spuštění: Volných bajtů: 113 828 728 832
.
- - End Of File - - 9310C65A1FAD2FB55540DCFF1A728F1B
Nahr nˇ probŘhlo ŁspŘçnŘ

[Rudy]

Smazáno, log již vypadá čistý. Nastala nějaká změna?

[W1ll.1.4M]

V Opeře kurzíva nejsou, ve Steamu zůstaly.

[Rudy]

Zkuste obnovu systému k datu, kdy korektně fungoval.

[W1ll.1.4M]

To už jsem zkoušel předtím, nepomohlo.

[Rudy]

Zkuste Steam reinstalovat.

[W1ll.1.4M]

Tam mi to zase až tak nevadí, tak to řešit nebudu. V Opeře už kurzíva nejsou, tak nevím, co tomu pomohlo.

Díky za váš čas.

[Rudy]

Tohle občas způsobují některé hry. To, co jsme smazali přes CF, jsme mazali proto, že Google ty soubory nezná. Nejsou systémové a patrně nebude vadit, budou-li smazány. CF také zřejmě opravil některé klíče v registry.

[W1ll.1.4M]

Tak už se objevili po delším používání zase i v Opeře.

[Rudy]

Reinstal Opery by nepomohl? Vím, že podobná "zvěrstva" dělají některé hry, které cosi přepisují v registry a pak se mění třeba písmo, fonty, nastavení displeje atd.