conflicker/win32+64 vir

[ElPitooo]

nazdar chcel by som pomoct dostal som dnes tento virus, tu mate log s programu RSIT:

Logfile of random's system information tool 1.08 (written by random/random)
Run by okay at 2010-09-07 16:09:29
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 58 GB (20%) free of 283 GB
Total RAM: 2942 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:09:37, on 7. 9. 2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\okay\Desktop\RSIT.exe
C:\Program Files\trend micro\okay.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... spire_5536
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... spire_5536
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... spire_5536
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1007111158\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\okay\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1007111158\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [amd_dc_opt] "C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [System] "C:\Program Files\system32.exe"
O4 - HKCU\..\Run: [ProductReg] "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" /m
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: amd_dc_opt.exe.lnk = C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe
O4 - Global Startup: Bluetooth.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\okay\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\okay\AppData\Roaming\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate1ca3f9127ed5710) (gupdate1ca3f9127ed5710) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 11907 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-1706774859-1303265402-2087292403-1000.job
C:\Windows\tasks\Uniblue SpeedUpMyPC Nag.job
C:\Windows\tasks\Uniblue SpeedUpMyPC.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5366673-E8CA-11D3-9CD9-0090271D075B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-07-10 278192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll [2010-07-10 814648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\okay\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2010-05-11 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\1007111158\ICQToolBar.dll [2010-06-02 1018616]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} -
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-07-10 278192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-03-18 61440]
"PLFSetI"=C:\Windows\PLFSetI.exe [2009-09-24 200704]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2009-02-24 204800]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2009-04-03 698912]
"CLMLServer"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2009-01-21 202024]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2009-02-19 866824]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-10-07 1461080]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-04-06 8555040]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]
"amd_dc_opt"=C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe [2006-06-28 106496]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-08-28 202256]
"System"=C:\Program Files\system32.exe [2010-08-30 44032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ProductReg"=C:\Program Files\Acer\WR_PopUp\ProductReg.exe [2008-11-17 135168]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-24 68856]
"SmartRAM"=C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2010-07-21 198864]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-05-16 213936]
"Steam"=c:\program files\steam\steam.exe [2010-08-25 1242448]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcadeDeluxeAgent]
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-01-21 156968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-04-11 249600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2008-07-22 2772992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2010-08-09 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ParentalControl]
C:\Program Files\Parental Control\ParentalControl.exe /SERVICE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2008-12-26 173288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-04-06 26102056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\steam\Steam.exe [2010-08-25 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue SpeedUpMyPC]
C:\Program Files\Uniblue\SpeedUpMyPC 3\StartSUMP2.exe [2007-09-10 202008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^okay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DesktopVideoPlayer.LNK]
C:\PROGRA~1\vghd\vghd.exe [2010-04-21 480592]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
amd_dc_opt.exe.lnk - C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableClock"=0
"NoDispCPL"=0
"DisableTaskMgr"=1
"DisableTaskMgr "=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFind"=0
"NoMultiIE"=0
"LWA"=0
"LWB"=0
"LWC"=0
"LWD"=0
"LWE"=0
"LWF"=0
"LWG"=0
"LWH"=0
"LWI"=0
"LWJ"=0
"LWK"=0
"LWL"=0
"LWM"=0
"LWN"=0
"LWO"=0
"LWP"=0
"LWQ"=0
"LWR"=0
"LWS"=0
"LWT"=0
"LWU"=0
"LWV"=0
"LWW"=0
"LWX"=0
"LWY"=0
"LWZ"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 3 months======

2010-09-07 16:03:52 ----D---- C:\Program Files\trend micro
2010-09-07 16:03:51 ----D---- C:\rsit
2010-09-07 15:28:25 ----D---- C:\Program Files\PROnetworks
2010-09-07 14:53:04 ----D---- C:\Program Files\OO Software
2010-09-07 14:41:19 ----D---- C:\Program Files\Symantec
2010-09-05 15:49:29 ----A---- C:\Windows\libem.INI
2010-09-05 15:49:12 ----D---- C:\Users\okay\AppData\Roaming\FlashGet
2010-09-05 15:49:07 ----D---- C:\Users\okay\AppData\Roaming\BITS
2010-09-05 15:48:53 ----D---- C:\Users\okay\AppData\Roaming\FlashGetBHO
2010-09-05 15:48:51 ----D---- C:\Program Files\FlashGet Network
2010-09-04 18:51:39 ----D---- C:\sierra
2010-09-03 18:33:18 ----D---- C:\Program Files\Extra RAM
2010-08-30 15:32:44 ----A---- C:\Program Files\system32.exe
2010-08-28 17:56:58 ----D---- C:\ProgramData\TVU Networks
2010-08-28 17:38:47 ----A---- C:\Windows\system32\rmoc3260.dll
2010-08-28 17:38:36 ----A---- C:\Windows\system32\pndx5032.dll
2010-08-28 17:38:36 ----A---- C:\Windows\system32\pndx5016.dll
2010-08-28 17:38:24 ----D---- C:\Program Files\Common Files\xing shared
2010-08-28 17:37:52 ----A---- C:\Windows\system32\pncrt.dll
2010-08-28 17:37:50 ----D---- C:\Program Files\Real
2010-08-28 17:37:47 ----D---- C:\Program Files\Common Files\Real
2010-08-28 17:37:45 ----D---- C:\ProgramData\Real
2010-08-28 17:37:42 ----D---- C:\Users\okay\AppData\Roaming\Real
2010-08-28 17:30:43 ----D---- C:\Users\okay\AppData\Roaming\JLC's Software
2010-08-28 17:30:29 ----D---- C:\Program Files\JLC's Software
2010-08-27 07:52:23 ----D---- C:\Program Files\Video Desktop Company
2010-08-25 14:40:01 ----D---- C:\Program Files\Smart PC Utilities
2010-08-25 14:39:00 ----D---- C:\Users\okay\AppData\Roaming\Smart PC Utilities
2010-08-24 09:47:26 ----D---- C:\Users\okay\AppData\Roaming\Sierra
2010-08-23 13:18:49 ----A---- C:\Windows\avisplitter.ini
2010-08-23 13:18:46 ----A---- C:\Windows\system32\yv12vfw.dll
2010-08-23 13:18:46 ----A---- C:\Windows\system32\xvidvfw.dll
2010-08-23 13:18:46 ----A---- C:\Windows\system32\xvidcore.dll
2010-08-23 13:18:46 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-08-23 13:18:45 ----A---- C:\Windows\system32\ff_vfw.dll
2010-08-22 16:20:50 ----D---- C:\ProgramData\Sun
2010-08-22 16:20:49 ----D---- C:\Program Files\Common Files\Java
2010-08-22 16:20:32 ----A---- C:\Windows\system32\javaws.exe
2010-08-22 16:20:32 ----A---- C:\Windows\system32\javaw.exe
2010-08-22 16:20:32 ----A---- C:\Windows\system32\java.exe
2010-08-22 16:20:32 ----A---- C:\Windows\system32\deployJava1.dll
2010-08-18 15:03:12 ----A---- C:\Windows\system32\drivers\AmdTools.sys
2010-08-18 15:01:14 ----D---- C:\Program Files\Driver-Soft
2010-08-18 14:46:23 ----D---- C:\Program Files\Lavalys
2010-08-18 14:20:51 ----A---- C:\Windows\system32\drivers\AmdLLD.sys
2010-08-17 09:47:04 ----D---- C:\Program Files\ABCgames Cheater
2010-08-12 13:54:50 ----D---- C:\Users\okay\AppData\Roaming\SpaceMonger
2010-08-12 13:54:44 ----D---- C:\Program Files\SpaceMonger
2010-08-11 19:50:36 ----D---- C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2010-08-11 12:13:32 ----D---- C:\Program Files\ElcomSoft
2010-08-11 12:05:22 ----D---- C:\Program Files\RAR Password Cracker
2010-08-11 08:43:37 ----D---- C:\Program Files\Steam
2010-08-07 20:26:44 ----D---- C:\Windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2010-08-04 21:02:38 ----D---- C:\Users\okay\AppData\Roaming\ParentalControl
2010-08-03 07:57:18 ----D---- C:\Program Files\T2002 V1.0
2010-08-02 19:41:41 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-08-02 19:41:41 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-08-02 19:41:39 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-08-02 19:41:39 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-08-02 19:41:38 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-08-02 19:41:38 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-08-02 19:41:37 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-08-02 19:41:36 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-08-02 19:41:36 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-08-02 19:41:36 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-08-02 19:41:35 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-08-02 19:41:35 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-08-02 09:15:26 ----D---- C:\TEMP
2010-07-31 07:14:56 ----D---- C:\Users\okay\AppData\Roaming\Need for Speed World
2010-07-27 13:46:22 ----D---- C:\Windows\system32\Nový priečinok
2010-07-26 08:31:33 ----D---- C:\Program Files\RisenMDS
2010-07-21 12:54:04 ----A---- C:\Windows\system32\H@tKeysH@@k.DLL
2010-07-20 13:40:32 ----D---- C:\Program Files\LogMeIn Hamachi
2010-07-19 11:35:22 ----A---- C:\Windows\unvise32.exe
2010-07-15 18:16:17 ----D---- C:\Users\okay\AppData\Roaming\dvdcss
2010-07-13 16:44:49 ----D---- C:\Users\okay\AppData\Roaming\vlc
2010-07-13 16:43:44 ----D---- C:\Users\okay\AppData\Roaming\MozillaControl
2010-07-13 16:43:31 ----D---- C:\Program Files\Mozilla ActiveX Control v1.7.12
2010-07-13 16:42:11 ----D---- C:\Program Files\VideoLAN
2010-07-13 16:41:54 ----D---- C:\Program Files\Graboid
2010-07-12 20:48:55 ----D---- C:\Users\okay\AppData\Roaming\Red Alert 3
2010-07-11 11:57:42 ----D---- C:\Program Files\ICQ7.2
2010-07-04 16:31:03 ----D---- C:\ProgramData\{66E2F539-12B6-4870-A500-7689CDE75C5E}
2010-07-04 15:57:57 ----D---- C:\Users\okay\AppData\Roaming\Uniblue
2010-07-04 15:57:40 ----D---- C:\Program Files\Uniblue
2010-07-03 19:18:38 ----D---- C:\Redistributable
2010-07-03 19:18:38 ----D---- C:\PunkBuster
2010-07-03 19:18:37 ----D---- C:\DirectX
2010-07-01 01:19:30 ----D---- C:\Windows\1C4551A64743409391E41477CD655043.TMP
2010-07-01 01:19:19 ----D---- C:\Program Files\NVIDIA Corporation
2010-06-29 20:44:42 ----D---- C:\Fraps
2010-06-28 19:31:24 ----D---- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2010-06-28 17:07:55 ----D---- C:\Program Files\Common Files\DivX Shared
2010-06-28 17:04:20 ----D---- C:\Program Files\DivX
2010-06-28 17:03:23 ----D---- C:\ProgramData\DivX
2010-06-28 14:12:31 ----SHD---- C:\ProgramData\SecuROM
2010-06-24 16:56:25 ----D---- C:\Users\okay\AppData\Roaming\FUEL
2010-06-24 16:52:45 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-06-22 17:33:36 ----D---- C:\Program Files\xarReplacer
2010-06-22 17:31:48 ----D---- C:\Program Files\CarReplacer
2010-06-22 17:25:18 ----D---- C:\Program Files\NfS CarTuner
2010-06-22 17:23:33 ----N---- C:\Windows\Setup1.exe
2010-06-22 17:23:32 ----A---- C:\Windows\ST6UNST.EXE
2010-06-22 12:08:16 ----D---- C:\Program Files\Recuva
2010-06-22 12:05:28 ----D---- C:\Program Files\Sanny Builder 3
2010-06-22 11:15:09 ----D---- C:\ProgramData\KONAMI
2010-06-21 14:18:05 ----D---- C:\Program Files\GameThrust
2010-06-15 04:16:24 ----A---- C:\Windows\system32\frapsvid.dll
2010-06-08 16:24:01 ----D---- C:\Windows\system32\EventProviders
2010-06-08 16:22:43 ----D---- C:\989ba0282829226c9b

======List of files/folders modified in the last 3 months======

2010-09-07 16:09:30 ----D---- C:\Windows\Temp
2010-09-07 16:06:07 ----SHD---- C:\System Volume Information
2010-09-07 16:03:52 ----RD---- C:\Program Files
2010-09-07 16:00:14 ----D---- C:\Program Files\Mozilla Firefox
2010-09-07 15:28:26 ----SHD---- C:\Windows\Installer
2010-09-07 15:16:57 ----D---- C:\Windows\inf
2010-09-07 15:02:11 ----D---- C:\Program Files\PowerArchiver
2010-09-07 14:45:17 ----D---- C:\Windows\System32
2010-09-07 14:41:51 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-07 14:41:32 ----D---- C:\Windows\system32\drivers
2010-09-07 14:23:47 ----D---- C:\Czech Soccer Manager 2002 FE
2010-09-07 07:40:28 ----D---- C:\Windows
2010-09-07 06:49:34 ----D---- C:\Users\okay\AppData\Roaming\Skype
2010-09-07 06:49:26 ----D---- C:\Users\okay\AppData\Roaming\skypePM
2010-09-06 15:00:51 ----D---- C:\games
2010-09-06 12:18:17 ----D---- C:\Windows\system32\catroot2
2010-09-05 20:19:33 ----D---- C:\Windows\tracing
2010-09-05 16:26:13 ----D---- C:\install
2010-09-03 13:30:16 ----D---- C:\seriály
2010-09-03 13:28:05 ----D---- C:\filmy
2010-09-02 07:36:17 ----D---- C:\Windows\Tasks
2010-09-01 00:02:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-31 01:00:32 ----D---- C:\Program Files\YouTube Downloader
2010-08-30 09:12:43 ----A---- C:\Windows\iun6002.exe
2010-08-28 17:56:58 ----HD---- C:\ProgramData
2010-08-28 17:38:24 ----D---- C:\Program Files\Common Files
2010-08-28 17:37:54 ----D---- C:\Program Files\Internet Explorer
2010-08-28 14:18:51 ----A---- C:\Windows\win.ini
2010-08-27 12:05:37 ----D---- C:\Users\okay\AppData\Roaming\IObit
2010-08-27 11:53:55 ----D---- C:\Users\okay\AppData\Roaming\ICQ
2010-08-27 07:52:09 ----A---- C:\Windows\GPInstall.exe
2010-08-26 18:04:55 ----D---- C:\Windows\Prefetch
2010-08-26 16:52:51 ----D---- C:\18
2010-08-26 08:04:23 ----D---- C:\Program Files\Emilka Holubová - Montezumův poklad
2010-08-25 19:09:40 ----D---- C:\Windows\system32\Msdtc
2010-08-25 19:09:37 ----D---- C:\Windows\system32\wbem
2010-08-25 19:08:02 ----D---- C:\Windows\system32\config
2010-08-25 19:07:26 ----D---- C:\Windows\winsxs
2010-08-25 19:07:26 ----D---- C:\Windows\system32\spool
2010-08-25 19:07:26 ----D---- C:\Windows\system32\drivers\etc
2010-08-25 19:07:26 ----D---- C:\Windows\system32\CodeIntegrity
2010-08-25 19:07:26 ----D---- C:\Windows\rescache
2010-08-25 19:07:25 ----D---- C:\Users\okay\AppData\Roaming\GHISLER
2010-08-25 19:07:24 ----D---- C:\ultr
2010-08-25 19:07:24 ----D---- C:\Program Files\Ask.com
2010-08-25 19:06:50 ----D---- C:\Windows\registration
2010-08-25 15:41:56 ----D---- C:\Windows\Microsoft.NET
2010-08-25 15:41:55 ----RSD---- C:\Windows\assembly
2010-08-25 14:37:53 ----D---- C:\Windows\system32\catroot
2010-08-23 13:19:00 ----D---- C:\Program Files\K-Lite Codec Pack
2010-08-23 13:09:41 ----D---- C:\Program Files\JetAudio
2010-08-23 13:09:39 ----D---- C:\Program Files\Common Files\COWON
2010-08-23 12:45:48 ----D---- C:\ProgramData\CyberLink
2010-08-23 12:04:23 ----D---- C:\Users\okay\AppData\Roaming\DeepBurner
2010-08-23 09:32:42 ----AD---- C:\ProgramData\Temp
2010-08-22 16:20:27 ----D---- C:\Program Files\Java
2010-08-18 17:29:07 ----D---- C:\COD2
2010-08-18 15:03:30 ----D---- C:\Program Files\AMD
2010-08-18 15:01:20 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-08-12 14:19:44 ----D---- C:\Program Files\CCleaner
2010-08-12 14:11:43 ----D---- C:\ProgramData\Electronic Arts
2010-08-12 13:07:52 ----D---- C:\Windows\Logs
2010-08-12 13:07:52 ----D---- C:\Users\okay\AppData\Roaming\uTorrent
2010-08-11 10:20:49 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-08-08 17:18:51 ----D---- C:\OutputFolder
2010-08-05 10:18:48 ----D---- C:\Program Files\LEGO Company
2010-08-05 10:17:16 ----D---- C:\Program Files\GothicSourcer V3.10
2010-08-05 09:16:59 ----D---- C:\Program Files\Cubosphere
2010-08-04 20:57:03 ----SD---- C:\Users\okay\AppData\Roaming\Microsoft
2010-08-04 13:00:22 ----D---- C:\Users\okay\AppData\Roaming\Facebook
2010-08-02 19:41:42 ----D---- C:\Windows\system32\directx
2010-08-02 19:40:57 ----HD---- C:\Windows\msdownld.tmp
2010-08-02 17:04:29 ----D---- C:\Program Files\Scorpions WinCheater
2010-07-31 19:59:09 ----D---- C:\Users\okay\AppData\Roaming\BSplayer
2010-07-28 13:42:36 ----SD---- C:\ProgramData\Microsoft
2010-07-26 14:37:14 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-07-20 13:38:13 ----D---- C:\Users\okay\AppData\Roaming\Hamachi
2010-07-13 11:44:54 ----D---- C:\Program Files\Electronic Arts
2010-07-12 11:09:58 ----D---- C:\Program Files\ICQ6Toolbar
2010-07-11 11:58:15 ----D---- C:\ProgramData\ICQ
2010-07-09 17:01:39 ----RSD---- C:\Windows\Fonts
2010-07-08 22:06:58 ----D---- C:\Program Files\Opera
2010-07-06 11:05:53 ----A---- C:\Windows\system.ini
2010-07-04 16:02:33 ----SD---- C:\Windows\Downloaded Program Files
2010-07-04 15:57:53 ----D---- C:\Windows\system32\Tasks
2010-07-02 10:29:45 ----D---- C:\transformers
2010-07-01 01:19:20 ----D---- C:\Program Files\AGEIA Technologies
2010-06-29 16:02:19 ----D---- C:\Program Files\Acer GameZone
2010-06-27 17:41:27 ----A---- C:\Windows\system32\CmdLineExt.dll
2010-06-24 12:49:29 ----D---- C:\Program Files\XVideoConverter
2010-06-22 12:07:58 ----D---- C:\ProgramData\Microsoft Help
2010-06-21 23:22:21 ----D---- C:\Users\okay\AppData\Roaming\PlayFirst
2010-06-21 23:22:21 ----D---- C:\ProgramData\PlayFirst
2010-06-18 15:17:32 ----A---- C:\Windows\system32\CmdLineExt03.dll
2010-06-18 14:00:43 ----AT---- C:\Windows\system32\SIntfNT.dll
2010-06-18 14:00:43 ----AT---- C:\Windows\system32\SIntf32.dll
2010-06-18 14:00:43 ----AT---- C:\Windows\system32\SIntf16.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ahcix86s;ahcix86s; C:\Windows\system32\DRIVERS\ahcix86s.sys [2008-10-03 183312]
R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-04-28 14352]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2009-02-03 59000]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
R0 UBHelper;UBHelper; C:\Windows\system32\drivers\UBHelper.sys [2008-01-31 13824]
R1 epfwtdi;epfwtdi; C:\Windows\system32\DRIVERS\epfwtdi.sys [2009-10-07 55256]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2009-02-10 82320]
R1 PQNTDrv;PQNTDrv; C:\Windows\system32\drivers\PQNTDrv.sys [2004-05-05 4228]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-12-08 281760]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2009-10-07 40824]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-10-07 73760]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-21 95744]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-12-08 25888]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2009-01-16 12672]
R2 RMCAST;RMCAST (Pgm) Protocol Driver; C:\Windows\system32\DRIVERS\RMCAST.sys [2008-05-10 113664]
R2 SVKP;SVKP; \??\C:\Windows\system32\SVKP.sys [2010-02-22 2368]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\XAudio32.sys [2009-01-16 8704]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 AmdTools;AMD Special Tools Driver; C:\Windows\system32\DRIVERS\AmdTools.sys [2006-06-27 31744]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-02-23 195120]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-12-30 952832]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-03-19 4386304]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-03 21264]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-10-07 32072]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-10-16 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-10-16 207360]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-04-06 3066912]
R3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60x.sys [2008-09-04 223232]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\Drivers\NTIDrvr.sys [2009-03-26 15360]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2009-02-21 153952]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2008-05-28 22072]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-10-16 661504]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-13 691696]
S1 ATITool;ATITool Overclocking Utility; C:\Windows\system32\DRIVERS\ATITool.sys [2006-11-10 24064]
S1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2009-10-07 54184]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-09-24 23040]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-09-24 507392]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-09-24 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-04-10 84256]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2009-03-25 106784]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-03-25 17056]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 GarenaPEngine;GarenaPEngine; \??\C:\Users\okay\AppData\Local\Temp\QRZ714F.tmp []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 nocashio;nocashio; C:\Windows\system32\drivers\nocashio.sys [2010-03-15 4096]
S3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-21 30720]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-09-24 149504]
S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys [2009-08-22 9088]
S3 RTCore32;RTCore32; \??\C:\rmclock\RTCore32.sys [2005-05-25 4608]
S3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2009-02-07 62464]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2008-01-21 28160]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-03-19 733184]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-04-13 578848]
R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-12-18 75048]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-10-07 472280]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-04-03 723488]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-04-11 61184]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-09-23 144632]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-26 75064]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2005-08-08 167936]
S2 gupdate1ca3f9127ed5710;Služba Google Update (gupdate1ca3f9127ed5710); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-27 133104]
S2 HsfXAudioService;HsfXAudioService; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-10-07 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-16 654848]
S3 getPlusHelper;@C:\Program Files\NOS\bin\getPlus_Helper.dll,-101; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-09-23 50424]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-07-16 316664]

-----------------EOF-----------------

[earl]

Zdravim,

CTETE POZORNE NAVOD,TENTO SOFT NETOLERUJE CHYBY V POSTUPU APLIKOVANI!

Klidne si nasledujici radky vytisknete,at vite,co se bude na obrazovce odehravat.

Budte prihlasen na pc s administratorskymi pravy.

V operacnich systemech Windows Vista a Windows 7 je nutno spoustet aplikaci jako spravce (kliknutim pravym tlacitkem mysi na ikonu ComboFixu a klepnutim levym na volbu "Spustit jako spravce")

stahnete a ulozte nejlepe na plochu ComboFix

v pripade,ze nepujde stranka nacist-stahnete odtud download , popr. nepujde ComboFix spustit - prejmenujte jej na grinder.com a postupujte dale dle instrukci.

hned po startu se zobrazi Zreknuti se prava zaruky na funkcnost software, pokracujte kliknutim na tlacitko Ano:



pote muze nasledovat upozorneni na nainstalovane emulatory CD mechanik,typicky Daemon Tools nebo Alcohol 120



odklepnout OK

Souhlasit s instalaci Recovery console(Konzola pro zotaveni)-nutno funkcni internet

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: upozorneni: Vypnete rezidentni stit u antiviru a antispywaru a zakazte docasne firewall-ComboFix by nemusel fungovat korektne-pokud budete mit stity vypnute a Combofix zahlasi,ze nejsou,pokracujte dal a potvrdte.

po restartu aplikace vytvori log, ulozeny na C:/Combofix.txt (pri opakovanem pouziti jsou logy oznaceny Combofix2.txt atd.), jeho obsah vlozte sem