VIRY.CZ

Logfile of random's system information tool 1.08 (written by random/random)
Run by Maťo at 2010-10-17 10:22:13
Microsoft Windows 7 Ultimate
System drive C: has 19 GB (37%) free of 50 GB
Total RAM: 2047 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:22:23, on 17. 10. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe
C:\Program Files (x86)\ICQ7.1\ICQ.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\services.exe
C:\Program Files (x86)\Nero\Nero 9\Nero Vision\NeroVision.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files\trend micro\Maťo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Mario Forever Toolbar - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Program Files (x86)\pc translator\WebIE.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
O2 - BHO: Mario Forever Toolbar - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Program Files (x86)\pc translator\WebIE.dll
O3 - Toolbar: Mario Forever Toolbar - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: services.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files (x86)\pc translator\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files (x86)\pc translator\WebIE.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11542 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
taskeng.exe {46BA244B-8417-4561-8989-82A07C9B8878}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\AutoKMS.exe
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe" /c /a /s UserSession
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-eed3c94d-f324-4abc-80b2-77bd6a137f36 -SystemEventPortName:HostProcess-6fc13f67-1361-4b50-ac29-3320882abe8d -IoCancelEventPortName:HostProcess-ef6f0f3b-1f16-4c7e-a9f8-fedee8829188 -NonStateChangingEventPortName:HostProcess-e8890022-d11e-413d-9c5c-aaf472c09df7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d3c90d26-5377-46e2-81a9-630dd264f6d5
"C:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
"C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\services.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"cmd.exe" /C start /B C:\Windows\KMSEmulator.exe
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Sidebar\sidebar.exe" /showGadgets
"C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Nero\Nero 9\Nero Vision\NeroVision.exe" -ScParameter=30003
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3128 CREDAT:71937
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\AUDIODG.EXE 0x8b0
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3956.520200.1239727338 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 3956 plugin \\.\pipe\gecko-crash-server-pipe.3956
"taskhost.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 begin_of_the_skype_highlighting              1 -2147483646      end_of_the_skype_highlighting begin_of_the_skype_highlighting              1 -2147483646      end_of_the_skype_highlighting "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Users\Maťo\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Program Files (x86)\pc translator\WebIE.dll [2010-09-20 503808]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll [2010-09-04 396144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL [2010-05-14 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{707db484-2428-402d-afb5-d85b387544c7}]
Mario Forever Toolbar - C:\Program Files (x86)\Mario_Forever\tbMari.dll [2009-04-23 2087448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-09-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll [2010-09-04 396144]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Program Files (x86)\pc translator\WebIE.dll [2010-09-20 503808]
{707db484-2428-402d-afb5-d85b387544c7} - Mario Forever Toolbar - C:\Program Files (x86)\Mario_Forever\tbMari.dll [2009-04-23 2087448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Nektra OEAPI"= []
"OEXPRESS"= []
"ICQ"=C:\Program Files (x86)\ICQ7.1\ICQ.exe [2010-08-22 133432]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2010-04-15 427328]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-11-12 361632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CorelDRAW Graphics Suite 11b]
C:\Program Files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe [2004-06-23 729088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-11-12 5106904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2003-03-11 113664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
services.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-17 10:22:14 ----DC---- C:\Program Files\trend micro
2010-10-17 10:22:13 ----DC---- C:\rsit
2010-10-16 18:21:37 ----DC---- C:\Windows\system32\DRVSTORE
2010-10-16 18:21:37 ----A---- C:\Windows\system32\drivers\DKRtWrt.sys
2010-10-16 18:21:26 ----D---- C:\Program Files\Common Files\Diskeeper Corporation
2010-10-16 18:21:25 ----D---- C:\ProgramData\Diskeeper Corporation
2010-10-16 18:21:24 ----DC---- C:\Program Files\Diskeeper Corporation
2010-10-16 13:04:22 ----D---- C:\Windows\pss
2010-10-15 10:14:51 ----D---- C:\Users\Maťo\AppData\Roaming\Malwarebytes
2010-10-15 10:14:34 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2010-10-15 10:14:32 ----D---- C:\ProgramData\Malwarebytes
2010-10-15 10:14:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-15 10:14:31 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-10-14 20:43:05 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-10-14 20:41:29 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2010-10-14 20:38:42 ----D---- C:\Users\Maťo\AppData\Roaming\DAEMON Tools Pro
2010-10-14 20:38:42 ----D---- C:\ProgramData\DAEMON Tools Pro
2010-10-14 17:30:26 ----D---- C:\Program Files (x86)\MediaMonkey
2010-10-14 16:19:01 ----A---- C:\Windows\AutoKMS.ini
2010-10-14 16:19:01 ----A---- C:\Windows\AutoKMS.exe
2010-10-14 16:05:58 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2010-10-14 16:05:27 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2010-10-14 15:57:29 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2010-10-14 11:25:51 ----A---- C:\Windows\SYSWOW64\drivers\sp_rsdrv2.sys
2010-10-14 11:25:50 ----D---- C:\Users\Maťo\AppData\Roaming\Spyware Terminator
2010-10-14 11:25:48 ----D---- C:\ProgramData\Spyware Terminator
2010-10-14 11:25:47 ----D---- C:\Program Files (x86)\Spyware Terminator
2010-10-14 10:34:42 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-10-14 10:34:42 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-14 10:34:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-14 10:34:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-14 10:34:42 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-13 18:32:34 ----A---- C:\Windows\system32\wmp.dll
2010-10-13 18:32:32 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-10-13 18:32:31 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-10-13 18:32:30 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-13 18:32:17 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-10-13 18:32:17 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-10-13 18:31:46 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-10-13 18:31:46 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-13 18:31:44 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-10-13 18:31:44 ----A---- C:\Windows\system32\t2embed.dll
2010-10-13 18:31:42 ----A---- C:\Windows\system32\ole32.dll
2010-10-13 18:31:41 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-10-13 18:31:28 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-10-13 18:31:28 ----A---- C:\Windows\system32\schannel.dll
2010-10-13 18:31:25 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-10-13 18:31:25 ----A---- C:\Windows\system32\comctl32.dll
2010-10-13 18:31:23 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-13 18:31:22 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-10-13 18:31:20 ----A---- C:\Windows\system32\mshtml.dll
2010-10-13 18:31:19 ----A---- C:\Windows\system32\ieframe.dll
2010-10-13 18:31:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-10-13 18:31:18 ----A---- C:\Windows\system32\iertutil.dll
2010-10-13 18:31:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-10-13 18:31:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-10-13 18:31:16 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-13 18:31:15 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-10-13 18:31:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-10-13 18:31:15 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-10-13 18:31:15 ----A---- C:\Windows\system32\urlmon.dll
2010-10-13 18:31:15 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-10-13 18:31:14 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\wininet.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\mstime.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\ieui.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\iepeers.dll
2010-10-13 18:31:14 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-13 18:31:13 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-10-13 18:31:13 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-10-13 18:31:13 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-10-13 18:31:13 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-13 18:31:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-13 18:31:13 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-13 18:28:35 ----A---- C:\Windows\system32\win32k.sys
2010-10-08 20:24:03 ----D---- C:\Program Files (x86)\Google
2010-10-08 20:23:59 ----D---- C:\Program Files (x86)\Veetle
2010-10-04 20:14:12 ----D---- C:\Program Files (x86)\Elaborate Bytes
2010-09-30 17:42:14 ----D---- C:\Program Files (x86)\Microsoft
2010-09-30 17:29:12 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2010-09-30 17:28:54 ----D---- C:\Program Files (x86)\Windows Live
2010-09-30 17:28:33 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-09-30 17:28:33 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-09-30 17:27:43 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-09-29 08:53:03 ----D---- C:\Users\Maťo\AppData\Roaming\Mp3tag
2010-09-29 08:51:26 ----D---- C:\Program Files (x86)\Mp3tag
2010-09-29 08:47:10 ----A---- C:\Windows\system32\drivers\ks.sys
2010-09-29 08:07:14 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-09-29 08:07:14 ----A---- C:\Windows\system32\tzres.dll
2010-09-25 10:44:25 ----D---- C:\Users\Maťo\AppData\Roaming\Nero
2010-09-25 10:33:29 ----A---- C:\Windows\Irremote.ini
2010-09-23 21:08:23 ----D---- C:\Program Files (x86)\Nero
2010-09-23 18:44:05 ----D---- C:\Users\Maťo\AppData\Roaming\ACD Systems
2010-09-23 17:02:13 ----A---- C:\Windows\IsUn0405.exe
2010-09-23 14:07:31 ----D---- C:\ProgramData\vsosdk
2010-09-22 22:20:52 ----D---- C:\Users\Maťo\AppData\Roaming\Vso
2010-09-22 22:18:38 ----A---- C:\Windows\SYSWOW64\sipr3260.dll
2010-09-22 22:18:38 ----A---- C:\Windows\SYSWOW64\Pncrt.dll
2010-09-22 22:18:38 ----A---- C:\Windows\SYSWOW64\drv43260.dll
2010-09-22 22:18:38 ----A---- C:\Windows\SYSWOW64\drv33260.dll
2010-09-22 22:18:37 ----A---- C:\Windows\SYSWOW64\vp7vfw.dll
2010-09-22 22:18:37 ----A---- C:\Windows\SYSWOW64\drv23260.dll
2010-09-22 22:18:37 ----A---- C:\Windows\SYSWOW64\cook3260.dll
2010-09-22 22:18:36 ----A---- C:\Windows\SYSWOW64\wvc1dmod.dll
2010-09-22 22:18:24 ----D---- C:\Program Files (x86)\VSO
2010-09-22 19:31:26 ----D---- C:\Users\Maťo\AppData\Roaming\Foxit Software
2010-09-22 13:56:58 ----D---- C:\Users\Maťo\AppData\Roaming\Media Player Classic
2010-09-20 21:20:20 ----D---- C:\Program Files (x86)\Conduit
2010-09-20 21:20:18 ----D---- C:\Program Files (x86)\Mario_Forever
2010-09-20 18:03:44 ----D---- C:\Program Files (x86)\pc translator
2010-09-20 18:01:01 ----A---- C:\Windows\TRNCOM.INI
2010-09-20 17:59:53 ----D---- C:\Users\Maťo\AppData\Roaming\LangSoft
2010-09-20 17:59:53 ----D---- C:\ProgramData\LangSoft
2010-09-20 15:30:05 ----D---- C:\Users\Maťo\AppData\Roaming\ICQ
2010-09-20 15:29:53 ----D---- C:\Program Files (x86)\ICQ7.1
2010-09-19 13:09:11 ----D---- C:\Program Files (x86)\Foxit Software
2010-09-19 03:14:09 ----A---- C:\Users\Maťo\AppData\Roaming\burnaware.ini
2010-09-19 02:58:29 ----D---- C:\Program Files\Defraggler
2010-09-19 02:56:07 ----D---- C:\Users\Maťo\AppData\Roaming\InfraRecorder
2010-09-19 02:56:05 ----D---- C:\Program Files (x86)\InfraRecorder
2010-09-18 23:25:31 ----D---- C:\Users\Maťo\AppData\Roaming\skypePM
2010-09-18 21:05:56 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-09-18 17:51:38 ----D---- C:\Users\Maťo\AppData\Roaming\Corel
2010-09-18 16:50:35 ----D---- C:\Windows\system32\appmgmt
2010-09-18 16:40:57 ----D---- C:\ProgramData\Nero
2010-09-18 16:18:02 ----D---- C:\ProgramData\NVIDIA
2010-09-18 16:03:07 ----D---- C:\ProgramData\NVIDIA Corporation
2010-09-18 16:02:57 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-18 15:55:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-09-18 15:55:40 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-09-18 15:55:31 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-09-18 15:55:22 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-09-18 15:55:13 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-09-18 15:55:04 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-09-18 15:52:06 ----A---- C:\Windows\system32\browserchoice.exe
2010-09-18 15:46:07 ----A---- C:\Windows\system32\MRT.exe
2010-09-18 15:27:41 ----D---- C:\ProgramData\FLEXnet
2010-09-18 15:23:51 ----A---- C:\Windows\system32\rtutils.dll
2010-09-18 15:23:50 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-09-18 15:23:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-09-18 15:23:48 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-09-18 15:23:48 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-09-18 15:23:17 ----A---- C:\Windows\system32\shell32.dll
2010-09-18 15:23:16 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-09-18 15:23:08 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2010-09-18 15:23:08 ----A---- C:\Windows\SYSWOW64\secur32.dll
2010-09-18 15:23:08 ----A---- C:\Windows\system32\lsasrv.dll
2010-09-18 15:23:08 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-09-18 15:22:57 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-09-18 15:22:52 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2010-09-18 15:22:52 ----A---- C:\Windows\system32\CertEnroll.dll
2010-09-18 15:22:44 ----A---- C:\Windows\system32\CPFilters.dll
2010-09-18 15:22:43 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-09-18 15:22:43 ----A---- C:\Windows\system32\msdri.dll
2010-09-18 15:22:42 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2010-09-18 15:22:42 ----A---- C:\Windows\system32\psisdecd.dll
2010-09-18 15:22:37 ----A---- C:\Windows\explorer.exe
2010-09-18 15:22:36 ----A---- C:\Windows\SYSWOW64\explorer.exe
2010-09-18 15:22:36 ----A---- C:\Windows\system32\winlogon.exe
2010-09-18 15:22:35 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2010-09-18 15:22:35 ----A---- C:\Windows\system32\ntdll.dll
2010-09-18 15:22:34 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2010-09-18 15:22:34 ----A---- C:\Windows\SYSWOW64\secproc.dll
2010-09-18 15:22:34 ----A---- C:\Windows\system32\secproc_isv.dll
2010-09-18 15:22:33 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2010-09-18 15:22:33 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2010-09-18 15:22:33 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2010-09-18 15:22:33 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2010-09-18 15:22:33 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-09-18 15:22:33 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-09-18 15:22:33 ----A---- C:\Windows\system32\secproc.dll
2010-09-18 15:22:33 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-09-18 15:22:33 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-09-18 15:22:33 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-09-18 15:22:33 ----A---- C:\Windows\system32\RMActivate.exe
2010-09-18 15:22:32 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2010-09-18 15:22:32 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2010-09-18 15:22:31 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-09-18 15:22:30 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-09-18 15:22:30 ----A---- C:\Windows\system32\cdd.dll
2010-09-18 15:22:27 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-18 15:22:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2010-09-18 15:22:25 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-09-18 15:22:25 ----A---- C:\Windows\system32\msxml3.dll
2010-09-18 15:22:24 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-18 15:22:23 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2010-09-18 15:22:23 ----A---- C:\Windows\system32\oleaut32.dll
2010-09-18 15:22:22 ----A---- C:\Windows\SYSWOW64\setup16.exe
2010-09-18 15:22:22 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2010-09-18 15:22:22 ----A---- C:\Windows\system32\wow64.dll
2010-09-18 15:22:21 ----A---- C:\Windows\SYSWOW64\wow32.dll
2010-09-18 15:22:21 ----A---- C:\Windows\SYSWOW64\user.exe
2010-09-18 15:22:21 ----A---- C:\Windows\SYSWOW64\instnm.exe
2010-09-18 15:22:21 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-09-18 15:22:21 ----A---- C:\Windows\system32\atmlib.dll
2010-09-18 15:22:21 ----A---- C:\Windows\system32\atmfd.dll
2010-09-18 15:22:20 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-09-18 15:22:13 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2010-09-18 15:22:13 ----A---- C:\Windows\system32\vbscript.dll
2010-09-18 15:22:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2010-09-18 15:22:12 ----A---- C:\Windows\system32\asycfilt.dll
2010-09-18 15:22:11 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-09-18 15:22:11 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-09-18 15:22:11 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-09-18 15:19:15 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2010-09-18 15:19:15 ----A---- C:\Windows\system32\wintrust.dll
2010-09-18 15:11:00 ----D---- C:\Windows\SYSWOW64\spool
2010-09-18 15:10:36 ----A---- C:\Windows\system32\cabview.dll
2010-09-18 15:10:35 ----A---- C:\Windows\SYSWOW64\cabview.dll
2010-09-18 15:10:12 ----D---- C:\Program Files (x86)\Adobe Media Player
2010-09-18 15:01:58 ----D---- C:\Program Files\Common Files\Adobe
2010-09-18 14:38:17 ----D---- C:\Users\Maťo\AppData\Roaming\Tific
2010-09-18 14:37:50 ----A---- C:\Windows\system32\drivers\SYMEVENT64x86.SYS
2010-09-18 14:37:49 ----D---- C:\Program Files\Symantec
2010-09-18 14:37:49 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-09-18 14:37:28 ----D---- C:\Windows\system32\drivers\NISx64
2010-09-18 14:37:26 ----D---- C:\Program Files (x86)\Norton Internet Security
2010-09-18 14:37:24 ----D---- C:\ProgramData\Norton
2010-09-18 14:37:13 ----D---- C:\ProgramData\NortonInstaller
2010-09-18 14:37:13 ----D---- C:\Program Files (x86)\NortonInstaller
2010-09-18 14:36:38 ----D---- C:\Users\Maťo\AppData\Roaming\Skype
2010-09-18 14:36:13 ----RD---- C:\Program Files (x86)\Skype
2010-09-18 14:36:09 ----D---- C:\ProgramData\Skype
2010-09-18 13:50:38 ----D---- C:\Program Files (x86)\totalcmd
2010-09-18 13:41:48 ----D---- C:\Program Files\WinRAR
2010-09-18 13:39:54 ----D---- C:\ProgramData\Adobe
2010-09-18 13:39:50 ----D---- C:\Program Files (x86)\Adobe
2010-09-18 13:36:54 ----D---- C:\ProgramData\ESTsoft
2010-09-18 13:36:49 ----D---- C:\Users\Maťo\AppData\Roaming\ESTsoft
2010-09-18 13:36:49 ----D---- C:\Program Files (x86)\ESTsoft
2010-09-18 13:33:25 ----D---- C:\Users\Maťo\AppData\Roaming\WinRAR
2010-09-18 13:28:13 ----D---- C:\Program Files (x86)\CCleaner
2010-09-18 13:26:58 ----D---- C:\Windows\Panther
2010-09-18 13:26:46 ----RASHC---- C:\BOOTSECT.BAK
2010-09-18 13:26:45 ----SHDC---- C:\Boot
2010-09-18 13:23:52 ----D---- C:\Program Files (x86)\JDownloader
2010-09-18 13:23:43 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-09-18 13:23:43 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-09-18 13:23:43 ----A---- C:\Windows\SYSWOW64\java.exe
2010-09-18 13:23:43 ----A---- C:\Windows\SYSWOW64\deploytk.dll
2010-09-18 13:23:30 ----D---- C:\Program Files (x86)\Java
2010-09-18 13:19:36 ----D---- C:\Users\Maťo\AppData\Roaming\Macromedia
2010-09-18 13:19:36 ----D---- C:\Users\Maťo\AppData\Roaming\Adobe
2010-09-18 13:04:26 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2010-09-18 13:04:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-09-18 13:04:23 ----D---- C:\ProgramData\ICQ
2010-09-18 13:03:30 ----D---- C:\Program Files (x86)\Microsoft Works
2010-09-18 13:03:17 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-09-18 13:02:56 ----D---- C:\Windows\PCHEALTH
2010-09-18 13:02:56 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-09-18 13:02:22 ----D---- C:\Windows\SYSWOW64\Macromed
2010-09-18 13:01:20 ----A---- C:\Windows\SYSWOW64\unrar.dll
2010-09-18 13:01:20 ----A---- C:\Windows\avisplitter.ini
2010-09-18 13:01:19 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2010-09-18 13:01:18 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2010-09-18 13:01:18 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2010-09-18 13:01:18 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll.manifest
2010-09-18 13:01:18 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2010-09-18 13:01:14 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2010-09-18 13:00:35 ----N---- C:\Windows\system32\MpSigStub.exe
2010-09-18 13:00:10 ----D---- C:\Users\Maťo\AppData\Roaming\Mozilla
2010-09-18 12:58:45 ----D---- C:\Program Files\Microsoft Office
2010-09-18 12:58:38 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-09-18 12:58:05 ----D---- C:\ProgramData\Microsoft Help
2010-09-18 12:58:05 ----D---- C:\Program Files (x86)\Microsoft Office
2010-09-18 12:57:47 ----D---- C:\Users\Maťo\AppData\Roaming\GHISLER
2010-09-18 12:57:47 ----A---- C:\Windows\UC.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\RAR.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\PKZIP.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\PKUNZIP.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\NOCLOSE.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\LHA.PIF
2010-09-18 12:57:47 ----A---- C:\Windows\ARJ.PIF
2010-09-18 12:57:23 ----D---- C:\ProgramData\InstallShield
2010-09-18 12:57:01 ----RHDC---- C:\MSOCache
2010-09-18 12:56:24 ----D---- C:\Program Files (x86)\Corel
2010-09-18 12:54:12 ----D---- C:\ProgramData\ACD Systems
2010-09-18 12:54:06 ----D---- C:\Program Files (x86)\ACD Systems
2010-09-18 12:52:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-09-18 12:41:53 ----D---- C:\Users\Maťo\AppData\Roaming\Acronis
2010-09-18 12:41:22 ----D---- C:\ProgramData\Acronis
2010-09-18 12:39:33 ----A---- C:\Windows\system32\drivers\afcdp.sys
2010-09-18 12:39:32 ----A---- C:\Windows\system32\drivers\tdrpm258.sys
2010-09-18 12:39:30 ----A---- C:\Windows\system32\drivers\timntr.sys
2010-09-18 12:39:27 ----A---- C:\Windows\system32\drivers\snapman.sys
2010-09-18 12:39:20 ----D---- C:\Program Files (x86)\Acronis
2010-09-18 12:38:18 ----SHD---- C:\Windows\Installer
2010-09-18 12:36:44 ----D---- C:\Users\Maťo\AppData\Roaming\Identities
2010-09-18 12:36:31 ----SD---- C:\Users\Maťo\AppData\Roaming\Microsoft
2010-09-18 12:36:31 ----D---- C:\Users\Maťo\AppData\Roaming\Media Center Programs
2010-09-18 12:36:15 ----SHD---- C:\Recovery
2010-09-18 12:31:51 ----D---- C:\Windows\SoftwareDistribution
2010-09-18 12:28:10 ----D---- C:\Windows\Prefetch
2010-09-18 12:27:55 ----SHD---- C:\System Volume Information
2010-09-18 12:27:55 ----ASH---- C:\pagefile.sys
2010-09-18 12:27:55 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2010-10-17 10:22:14 ----RDC---- C:\Program Files
2010-10-17 10:22:11 ----D---- C:\Windows\Temp
2010-10-17 10:20:20 ----D---- C:\Windows\system32\config
2010-10-17 10:09:21 ----D---- C:\Windows\system32\LogFiles
2010-10-17 10:06:57 ----D---- C:\Windows
2010-10-16 18:21:42 ----D---- C:\Windows\winsxs
2010-10-16 18:21:37 ----D---- C:\Windows\system32\drivers
2010-10-16 18:21:37 ----D---- C:\Windows\system32\catroot
2010-10-16 18:21:37 ----D---- C:\Windows\System32
2010-10-16 18:21:28 ----D---- C:\Windows\inf
2010-10-16 18:21:28 ----D---- C:\Windows\Help
2010-10-16 18:21:26 ----D---- C:\Program Files\Common Files
2010-10-16 18:21:25 ----HD---- C:\ProgramData
2010-10-16 12:45:51 ----D---- C:\Windows\debug
2010-10-15 10:14:34 ----D---- C:\Windows\SYSWOW64\drivers
2010-10-15 10:14:31 ----RD---- C:\Program Files (x86)
2010-10-14 16:49:46 ----D---- C:\Windows\Microsoft.NET
2010-10-14 16:27:10 ----RSD---- C:\Windows\assembly
2010-10-14 16:19:02 ----D---- C:\Windows\Tasks
2010-10-14 16:19:02 ----D---- C:\Windows\system32\Tasks
2010-10-14 16:15:14 ----D---- C:\Windows\SysWOW64
2010-10-14 16:14:53 ----D---- C:\Windows\ShellNew
2010-10-14 16:14:22 ----A---- C:\Windows\win.ini
2010-10-14 16:06:31 ----D---- C:\Program Files (x86)\MSBuild
2010-10-14 16:06:17 ----RSD---- C:\Windows\Fonts
2010-10-14 16:00:36 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-14 16:00:33 ----SD---- C:\ProgramData\Microsoft
2010-10-13 22:36:33 ----D---- C:\Windows\SYSWOW64\migration
2010-10-13 22:36:33 ----D---- C:\Program Files\Internet Explorer
2010-10-13 22:36:33 ----D---- C:\Program Files (x86)\Internet Explorer
2010-10-13 22:36:32 ----D---- C:\Windows\system32\migration
2010-10-13 22:36:32 ----D---- C:\Program Files\Windows Media Player
2010-10-13 22:36:32 ----D---- C:\Program Files (x86)\Windows Media Player
2010-10-13 21:50:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-13 18:29:59 ----D---- C:\Windows\system32\catroot2
2010-10-04 20:15:47 ----D---- C:\Windows\system32\DriverStore
2010-09-30 17:25:39 ----D---- C:\Program Files (x86)\Common Files
2010-09-29 16:02:02 ----D---- C:\Windows\rescache
2010-09-29 10:10:30 ----D---- C:\Windows\SYSWOW64\sk-SK
2010-09-29 10:10:30 ----D---- C:\Windows\system32\sk-SK
2010-09-24 11:38:19 ----D---- C:\Windows\system32\NDF
2010-09-23 21:04:26 ----D---- C:\Windows\system32\wdi
2010-09-20 21:20:19 ----RD---- C:\Users
2010-09-19 19:42:32 ----D---- C:\Windows\Downloaded Program Files
2010-09-19 17:32:09 ----D---- C:\Windows\system32\drivers\UMDF
2010-09-18 17:27:52 ----D---- C:\Windows\Logs
2010-09-18 16:25:35 ----A---- C:\Windows\SYSWOW64\slwga.dll
2010-09-18 16:25:35 ----A---- C:\Windows\system32\slwga.dll
2010-09-18 16:25:34 ----A---- C:\Windows\system32\systemcpl.dll
2010-09-18 16:25:30 ----A---- C:\Windows\system32\user32.dll
2010-09-18 16:25:29 ----A---- C:\Windows\SYSWOW64\user32.dll
2010-09-18 16:15:27 ----D---- C:\Program Files\Windows Mail
2010-09-18 16:15:27 ----D---- C:\Program Files (x86)\Windows Mail
2010-09-18 16:15:23 ----D---- C:\Windows\AppPatch
2010-09-18 16:11:27 ----D---- C:\Windows\system32\oobe
2010-09-18 15:55:54 ----D---- C:\Windows\SYSWOW64\en-US
2010-09-18 15:55:54 ----D---- C:\Windows\system32\en-US
2010-09-18 15:45:45 ----D---- C:\Windows\ehome
2010-09-18 13:36:49 ----D---- C:\Windows\Resources
2010-09-18 12:50:50 ----D---- C:\Windows\system32\CodeIntegrity
2010-09-18 12:38:50 ----D---- C:\Windows\system32\restore
2010-09-18 12:36:41 ----SHDC---- C:\$Recycle.Bin
2010-09-18 12:30:21 ----D---- C:\Windows\system32\sysprep
2010-09-18 12:28:33 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-09-18 257120]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-14 828912]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS [2009-08-30 433200]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS [2010-04-22 221232]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258); C:\Windows\system32\DRIVERS\tdrpm258.sys [2010-09-18 1477728]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-09-18 943712]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20101001.001\BHDrvx64.sys [2010-09-01 954928]
R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys [2010-02-26 615040]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2010-09-18 475696]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-18 34472]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20101015.003\IDSvia64.sys [2010-10-13 476720]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1108000.005\SRTSPX64.SYS [2010-04-22 32304]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS [2010-04-29 150064]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\NISx64\1108000.005\SYMTDIV.SYS [2010-05-06 451120]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2010-09-18 251488]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-09-18 132656]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-04-29 24664]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20101016.003\ENG64.SYS [2010-09-29 117808]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20101016.003\EX64.SYS [2010-09-29 1804336]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1108000.005\SRTSP64.SYS [2010-04-22 505392]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2010-09-18 173104]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352]
S3 asy1980t;asy1980t; C:\Windows\system32\drivers\asy1980t.sys []
S3 DKRtWrt;DKRtWrt; C:\Windows\system32\DRIVERS\DKRtWrt.sys [2010-03-10 52144]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-11-12 894136]
R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-09-18 2480048]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Diskeeper;Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2010-04-15 2430304]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe [2010-02-26 126392]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 159336]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2010-10-14 570880]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-08 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;[img]@%SystemRoot%\system32\Wat\WatUX.exe,-601;%20C:\Wind[/img]ows\system32\Wat\WatAdminSvc.exe [2010-09-10 1255736]
[img]
http://img87.imageshack.us/img87/948/beznzvuvp.jpg[/img] tu je to co mi vyhadzuje

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 4052

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

17. 10. 2010 16:46:25
mbam-log-2010-10-17 (16-46-25).txt

Typ kontroly: Úplná kontrola (C:\|D:\|E:\|F:\|)
Objektov kontrolovaných: 250135
Uplynulý čas: 1 hod, 29 min, 37 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)


podla toho tam nic neni ale aj tak to vyskakuje pri zapnuti pc alebo restarte

Při otevření je tam domovská stránka, nebo něco jiného?

hore pod logom je aj obrazok co to presne vyhadzuje

Nainstalujte SuperAntispyware: http://www.stahuj.centrum.cz/utility_a_ ... tispyware/ , updatujte, proveďte sken a smažte vše, co najde.

nepomohlo to

Zkuste toto:

Stáhněte OTL: http://oldtimer.geekstogo.com/OTL.exe . Uložte na plochu, klikněte prvým myšítkem a zadejte "spustit jako správce". Zaškrtněte "pro 64b systém", "pro všechny uživatele", "kontrola na havěť LOP" a "PURITY". Do spodního okna vložte:

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT

Klikněte na "Prohledat" a vložte logy OTL.txt. a Extras.txt.

OTL logfile created on: 21. 10. 2010 20:21:54 - Run 1
OTL by OldTimer - Version 3.2.16.0 Folder = C:\Users\Maťo\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 56,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 48,83 Gb Total Space | 17,81 Gb Free Space | 36,48% Space Free | Partition Type: NTFS
Drive D: | 107,42 Gb Total Space | 18,09 Gb Free Space | 16,84% Space Free | Partition Type: NTFS
Drive E: | 87,89 Gb Total Space | 31,74 Gb Free Space | 36,12% Space Free | Partition Type: NTFS
Drive F: | 128,47 Gb Total Space | 26,30 Gb Free Space | 20,47% Space Free | Partition Type: NTFS

Computer Name: MAŤO-PC | User Name: Maťo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/10/21 20:19:50 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Maťo\Desktop\OTL.exe
PRC - [2010/10/20 23:57:04 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010/10/20 23:57:03 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/10/14 11:25:51 | 000,570,880 | ---- | M] (Crawler.com) -- C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
PRC - [2010/09/18 12:39:32 | 002,480,048 | ---- | M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
PRC - [2010/08/22 13:02:26 | 000,133,432 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.1\ICQ.exe
PRC - [2010/07/25 12:12:45 | 000,311,795 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\services.exe
PRC - [2010/04/29 15:39:34 | 000,304,464 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2010/04/15 10:17:14 | 000,427,328 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
PRC - [2010/04/15 10:16:48 | 000,288,064 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
PRC - [2010/02/26 02:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccsvchst.exe
PRC - [2009/11/24 11:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe
PRC - [2009/05/15 07:35:52 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe


========== Modules (SafeList) ==========

MOD - [2010/10/21 20:19:50 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Maťo\Desktop\OTL.exe
MOD - [2010/08/21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/06/29 19:49:27 | 000,128,752 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2010/04/15 19:02:06 | 002,430,304 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010/10/14 11:25:51 | 000,570,880 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2010/09/18 12:39:32 | 002,480,048 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2010/04/29 15:39:34 | 000,304,464 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/26 02:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe -- (NIS)
SRV - [2009/11/12 03:50:24 | 000,894,136 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/05/15 07:35:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010/10/14 20:43:05 | 000,828,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010/09/18 14:37:49 | 000,173,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2010/09/18 12:39:33 | 000,251,488 | ---- | M] (Acronis) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp)
DRV:64bit: - [2010/09/18 12:39:32 | 001,477,728 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpm258.sys -- (tdrpman258) Acronis Try&Decide and Restore Points filter (build 258)
DRV:64bit: - [2010/09/18 12:39:30 | 000,943,712 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2010/09/18 12:39:27 | 000,257,120 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2010/05/06 06:01:59 | 000,451,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symtdiv.sys -- (SYMTDIv)
DRV:64bit: - [2010/04/29 15:39:28 | 000,024,664 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2010/04/29 07:03:51 | 000,150,064 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\ironx64.sys -- (SymIRON)
DRV:64bit: - [2010/04/22 05:02:20 | 000,221,232 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symefa64.sys -- (SymEFA)
DRV:64bit: - [2010/04/22 04:29:51 | 000,505,392 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2010/04/22 04:29:51 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2010/03/10 11:29:28 | 000,052,144 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DKRtWrt.sys -- (DKRtWrt)
DRV:64bit: - [2010/02/26 02:22:52 | 000,615,040 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\cchpx64.sys -- (ccHP)
DRV:64bit: - [2010/02/17 20:23:05 | 000,014,920 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:64bit: - [2010/02/17 20:23:05 | 000,012,360 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:64bit: - [2009/12/18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009/08/30 02:17:18 | 000,433,200 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symds64.sys -- (SymDS)
DRV:64bit: - [2009/08/09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2010/10/19 22:36:20 | 000,476,720 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20101020.001\IDSviA64.sys -- (IDSVia64)
DRV - [2010/09/29 08:13:07 | 001,804,336 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20101020.055\EX64.SYS -- (NAVEX15)
DRV - [2010/09/29 08:13:06 | 000,117,808 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20101020.055\ENG64.SYS -- (NAVENG)
DRV - [2010/09/18 14:44:46 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2010/09/18 14:44:46 | 000,132,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/09/01 21:39:20 | 000,954,928 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20101001.001\BHDrvx64.sys -- (BHDrvx64)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\..\URLSearchHook: {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://cs.start3.mozilla.com/firefox?cl ... s:official"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.2
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... 2.0.0.2&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ [2010/09/19 04:01:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn\ [2010/09/18 22:54:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/10/20 23:57:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/10/20 23:57:06 | 000,000,000 | ---D | M]

[2010/09/18 13:00:46 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\mozilla\Extensions
[2010/10/21 19:36:22 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions
[2010/09/20 18:01:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
[2010/09/20 21:20:19 | 000,000,000 | ---D | M] (Mario Forever Toolbar) -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions\{707db484-2428-402d-afb5-d85b387544c7}
[2010/09/18 13:04:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010/10/04 15:40:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions\{DDABDBA1-2377-4A30-A027-25697B99E254}
[2010/10/21 19:36:43 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\mozilla\Firefox\Profiles\ucw6272y.default\extensions\staged-xpis
[2010/09/18 13:04:24 | 000,000,168 | ---- | M] () -- C:\Users\Maťo\AppData\Roaming\Mozilla\FireFox\Profiles\ucw6272y.default\searchplugins\icqplugin.gif
[2010/09/18 13:04:24 | 000,000,618 | ---- | M] () -- C:\Users\Maťo\AppData\Roaming\Mozilla\FireFox\Profiles\ucw6272y.default\searchplugins\icqplugin.src
[2010/10/17 17:20:12 | 000,000,947 | ---- | M] () -- C:\Users\Maťo\AppData\Roaming\Mozilla\FireFox\Profiles\ucw6272y.default\searchplugins\icqplugin.xml
[2010/09/18 14:36:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/09/18 14:36:26 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/09/14 23:10:37 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010/09/14 23:10:37 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2010/09/14 23:10:37 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010/09/14 23:10:37 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010/09/14 23:10:37 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Mario Forever Toolbar) - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll (Conduit Ltd.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Mario Forever Toolbar) - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (WebTranslator) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Mario Forever Toolbar) - {707DB484-2428-402D-AFB5-D85B387544C7} - C:\Program Files (x86)\Mario_Forever\tbMari.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKCU..\Run: [DAEMON Tools Pro Agent] C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKCU..\Run: [Nektra OEAPI] File not found
O4 - HKCU..\Run: [OEXPRESS] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files (x86)\pc translator\WebIE.dll ()
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{8ee50367-d82f-11df-8756-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{8ee50367-d82f-11df-8756-806e6f6e6963}\Shell\AutoRun\command - "" = I:\Autorun.exe -- File not found
O33 - MountPoints2\{993ebabc-cf92-11df-8c34-001e8c13dd74}\Shell - "" = AutoRun
O33 - MountPoints2\{993ebabc-cf92-11df-8c34-001e8c13dd74}\Shell\AutoRun\command - "" = H:\House_MD_Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010/10/21 20:19:49 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Maťo\Desktop\OTL.exe
[2010/10/19 21:01:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PdfMerge
[2010/10/19 20:46:30 | 001,417,216 | ---- | C] (SEDTech (Pty) Ltd.) -- C:\Windows\SysWow64\iSED.dll
[2010/10/19 20:46:30 | 000,244,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSFLXGRD.OCX
[2010/10/19 20:46:30 | 000,203,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RICHTX32.OCX
[2010/10/19 20:46:29 | 000,647,939 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX
[2010/10/19 20:46:29 | 000,140,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COMDLG32.OCX
[2010/10/19 20:46:29 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vb6stkit.dll
[2010/10/19 20:46:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adolix
[2010/10/19 20:41:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\pdfsam
[2010/10/18 13:44:38 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Documents\Electronic Arts
[2010/10/18 11:26:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2010/10/17 23:31:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2010/10/17 23:30:34 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Documents\My Games
[2010/10/17 23:26:37 | 017,686,528 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll
[2010/10/17 23:26:36 | 001,380,352 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
[2010/10/17 23:26:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
[2010/10/17 23:26:22 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2010/10/17 23:26:22 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2010/10/17 23:26:22 | 000,122,968 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2010/10/17 23:26:22 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2010/10/17 23:26:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2010/10/17 23:26:06 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
[2010/10/17 23:26:06 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
[2010/10/17 23:26:06 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
[2010/10/17 23:26:06 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
[2010/10/17 23:26:04 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
[2010/10/17 23:26:04 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
[2010/10/17 23:26:00 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
[2010/10/17 23:26:00 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2010/10/17 23:25:57 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
[2010/10/17 23:25:57 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2010/10/17 23:25:55 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
[2010/10/17 23:25:55 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2010/10/17 23:25:53 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
[2010/10/17 23:25:53 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2010/10/17 23:25:50 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
[2010/10/17 23:25:50 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2010/10/17 23:25:44 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
[2010/10/17 23:25:44 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
[2010/10/17 23:25:44 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
[2010/10/17 23:25:44 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
[2010/10/17 23:25:41 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
[2010/10/17 23:25:41 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
[2010/10/17 23:25:39 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
[2010/10/17 23:25:39 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
[2010/10/17 23:25:36 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
[2010/10/17 23:25:36 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
[2010/10/17 23:25:34 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
[2010/10/17 23:25:34 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
[2010/10/17 23:25:31 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
[2010/10/17 23:25:26 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
[2010/10/17 23:25:26 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
[2010/10/17 23:25:23 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
[2010/10/17 23:25:23 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
[2010/10/17 23:25:21 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
[2010/10/17 23:25:18 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
[2010/10/17 23:25:15 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2010/10/17 23:25:15 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2010/10/17 23:25:15 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2010/10/17 23:25:15 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2010/10/17 23:25:13 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2010/10/17 23:25:13 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2010/10/17 23:25:11 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2010/10/17 23:25:11 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2010/10/17 23:25:11 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2010/10/17 23:25:11 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2010/10/17 23:25:09 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2010/10/17 23:25:09 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2010/10/17 23:25:08 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2010/10/17 23:25:08 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2010/10/17 23:25:07 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2010/10/17 23:25:07 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2010/10/17 23:25:07 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2010/10/17 23:25:07 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2010/10/17 23:25:04 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2010/10/17 23:25:02 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2010/10/17 23:25:02 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2010/10/17 23:25:02 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2010/10/17 23:25:02 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2010/10/17 23:25:01 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2010/10/17 23:25:01 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2010/10/17 23:25:00 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2010/10/17 23:25:00 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2010/10/17 23:24:58 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2010/10/17 23:24:58 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2010/10/17 23:24:58 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2010/10/17 23:24:58 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2010/10/17 23:24:56 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2010/10/17 23:24:56 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2010/10/17 23:24:54 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2010/10/17 23:24:54 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2010/10/17 23:24:54 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2010/10/17 23:24:54 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2010/10/17 23:24:53 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2010/10/17 23:24:53 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2010/10/17 23:24:50 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2010/10/17 23:24:50 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2010/10/17 23:24:50 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2010/10/17 23:24:50 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2010/10/17 23:24:49 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2010/10/17 23:24:49 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2010/10/17 23:24:48 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2010/10/17 23:24:48 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2010/10/17 23:24:45 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2010/10/17 23:24:45 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2010/10/17 23:24:45 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2010/10/17 23:24:45 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2010/10/17 23:24:42 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2010/10/17 23:24:42 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2010/10/17 23:24:40 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2010/10/17 23:24:40 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2010/10/17 23:24:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2010/10/17 23:24:38 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2010/10/17 23:24:38 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2010/10/17 23:24:38 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2010/10/17 23:24:36 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2010/10/17 23:24:36 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2010/10/17 23:24:36 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2010/10/17 23:24:36 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2010/10/17 23:24:34 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2010/10/17 23:24:34 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2010/10/17 23:24:31 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2010/10/17 23:24:31 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2010/10/17 23:24:24 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2010/10/17 23:24:24 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2010/10/17 23:24:24 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2010/10/17 23:24:24 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2010/10/17 23:24:20 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2010/10/17 23:24:20 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2010/10/17 23:24:17 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2010/10/17 23:24:17 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2010/10/17 23:24:14 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2010/10/17 23:24:14 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2010/10/17 23:24:14 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2010/10/17 23:24:14 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2010/10/17 23:24:06 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2010/10/17 23:24:03 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2010/10/17 23:24:03 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2010/10/17 23:24:03 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2010/10/17 23:24:03 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2010/10/17 23:24:02 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2010/10/17 23:24:02 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2010/10/17 23:24:01 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2010/10/17 23:24:01 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2010/10/17 23:24:00 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2010/10/17 23:23:58 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2010/10/17 23:23:57 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2010/10/17 23:23:57 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2010/10/17 23:23:56 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2010/10/17 23:23:56 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2010/10/17 23:23:55 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2010/10/17 23:23:55 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2010/10/17 23:23:54 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2010/10/17 23:23:54 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2010/10/17 23:23:52 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2010/10/17 23:23:52 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2010/10/17 23:23:49 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2010/10/17 23:23:49 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2010/10/17 23:23:48 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2010/10/17 23:23:48 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2010/10/17 23:23:43 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2010/10/17 23:23:43 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2010/10/17 23:23:43 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2010/10/17 23:23:43 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2010/10/17 23:23:42 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2010/10/17 23:23:42 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2010/10/17 23:23:40 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2010/10/17 23:23:40 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2010/10/17 23:23:39 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2010/10/17 23:23:39 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2010/10/17 23:23:37 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2010/10/17 23:23:37 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2010/10/17 23:23:35 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2010/10/17 23:23:35 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2010/10/17 23:23:34 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2010/10/17 23:23:34 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2010/10/17 23:23:22 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2010/10/17 23:23:21 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2010/10/17 23:23:21 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2010/10/17 23:23:21 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2010/10/17 23:23:21 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2010/10/17 23:23:19 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2010/10/17 23:23:19 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2010/10/17 23:23:18 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2010/10/17 23:23:18 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2010/10/17 23:23:17 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2010/10/17 23:23:17 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2010/10/17 23:23:15 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2010/10/17 23:23:15 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2010/10/17 23:23:14 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2010/10/17 23:23:14 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2010/10/17 23:23:12 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2010/10/17 23:23:12 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2010/10/17 23:21:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2010/10/17 23:21:31 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2010/10/17 23:20:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2010/10/17 23:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2010/10/17 19:57:47 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\SUPERAntiSpyware.com
[2010/10/17 19:57:47 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2010/10/17 19:57:16 | 000,000,000 | ---D | C] -- C:\ProgramData\!SASCORE
[2010/10/17 19:57:05 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/10/17 10:22:14 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010/10/17 10:22:13 | 000,000,000 | ---D | C] -- C:\rsit
[2010/10/16 18:21:37 | 000,052,144 | ---- | C] (Diskeeper Corporation) -- C:\Windows\SysNative\drivers\DKRtWrt.sys
[2010/10/16 18:21:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2010/10/16 18:21:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Diskeeper Corporation
[2010/10/16 18:21:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Diskeeper Corporation
[2010/10/16 18:21:24 | 000,000,000 | ---D | C] -- C:\Program Files\Diskeeper Corporation
[2010/10/16 13:04:22 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2010/10/15 10:17:41 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images
[2010/10/15 10:14:51 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Malwarebytes
[2010/10/15 10:14:34 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/10/15 10:14:32 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010/10/15 10:14:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/10/15 10:14:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/10/14 20:41:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Pro
[2010/10/14 20:38:42 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\DAEMON Tools Pro
[2010/10/14 20:38:42 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Pro
[2010/10/14 17:30:29 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Local\MediaMonkey
[2010/10/14 17:30:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaMonkey
[2010/10/14 16:05:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services
[2010/10/14 16:05:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Sync Framework
[2010/10/14 15:57:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2010/10/14 11:25:50 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Spyware Terminator
[2010/10/14 11:25:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2010/10/14 11:25:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spyware Terminator
[2010/10/14 10:34:42 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2010/10/13 18:32:34 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2010/10/13 18:32:32 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2010/10/13 18:32:31 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2010/10/13 18:32:30 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2010/10/13 18:32:17 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2010/10/13 18:32:17 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2010/10/13 18:31:46 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2010/10/13 18:31:44 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010/10/13 18:31:44 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010/10/13 18:31:42 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2010/10/13 18:31:25 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2010/10/13 18:31:23 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2010/10/13 18:31:22 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2010/10/13 18:31:16 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010/10/13 18:31:15 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010/10/13 18:31:15 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010/10/13 18:31:15 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010/10/13 18:31:14 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010/10/13 18:31:14 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010/10/13 18:31:14 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010/10/13 18:31:14 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010/10/13 18:31:14 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010/10/13 18:31:14 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010/10/13 18:31:13 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010/10/13 18:31:13 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010/10/13 18:31:13 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010/10/13 18:31:13 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010/10/08 20:24:05 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Local\Google
[2010/10/08 20:24:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010/10/08 20:23:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Veetle
[2010/10/04 20:14:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elaborate Bytes
[2010/09/30 17:42:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2010/09/30 17:29:19 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2010/09/30 17:29:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live SkyDrive
[2010/09/30 17:28:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2010/09/30 17:28:33 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2010/09/30 17:28:33 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2010/09/30 17:27:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2010/09/30 17:25:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
[2010/09/29 20:19:01 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Documents\NeroVision
[2010/09/29 20:11:49 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Application Data
[2010/09/29 08:53:03 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Mp3tag
[2010/09/29 08:51:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mp3tag
[2010/09/25 10:44:25 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Nero
[2010/09/25 10:24:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2010/09/24 11:05:59 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Local\Diagnostics
[2010/09/23 21:08:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2010/09/23 18:44:05 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\ACD Systems
[2010/09/23 18:44:05 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Local\ACD Systems
[2010/09/23 17:02:13 | 000,307,200 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn0405.exe
[2010/09/23 14:07:31 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk
[2010/09/22 22:22:00 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Documents\ConvertXToDVD
[2010/09/22 22:20:52 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Vso
[2010/09/22 22:18:38 | 000,273,408 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\Pncrt.dll
[2010/09/22 22:18:38 | 000,217,127 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\drv43260.dll
[2010/09/22 22:18:38 | 000,208,935 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\drv33260.dll
[2010/09/22 22:18:38 | 000,102,439 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\sipr3260.dll
[2010/09/22 22:18:37 | 000,626,688 | ---- | C] (On2.com) -- C:\Windows\SysWow64\vp7vfw.dll
[2010/09/22 22:18:37 | 000,176,165 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\drv23260.dll
[2010/09/22 22:18:37 | 000,065,602 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\cook3260.dll
[2010/09/22 22:18:36 | 001,184,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc1dmod.dll
[2010/09/22 22:18:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VSO
[2010/09/22 19:31:26 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Foxit Software
[2010/09/22 13:56:58 | 000,000,000 | ---D | C] -- C:\Users\Maťo\AppData\Roaming\Media Player Classic
[2010/09/21 22:35:39 | 000,000,000 | ---D | C] -- C:\Users\Maťo\Documents\ICQ
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/21 20:34:07 | 000,001,008 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/21 20:24:14 | 001,145,676 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1108000.005\Cat.DB
[2010/10/21 20:19:50 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Maťo\Desktop\OTL.exe
[2010/10/21 10:09:08 | 000,000,198 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2010/10/21 10:08:09 | 000,001,004 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/21 10:07:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/10/21 10:07:51 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/19 21:01:54 | 000,002,597 | ---- | M] () -- C:\Users\Public\Desktop\PdfMerge.lnk
[2010/10/19 20:42:26 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010/10/19 20:42:26 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010/10/19 20:42:26 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010/10/19 09:41:59 | 003,034,216 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010/10/18 17:45:47 | 000,000,615 | ---- | M] () -- C:\Users\Maťo\Desktop\Virtua Tennis 3.lnk
[2010/10/18 11:24:06 | 000,000,609 | ---- | M] () -- C:\Users\Public\Desktop\The Sims™ 3.lnk
[2010/10/17 23:26:22 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2010/10/17 23:26:22 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2010/10/17 23:26:22 | 000,122,968 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2010/10/17 23:26:22 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2010/10/17 23:19:09 | 000,001,473 | ---- | M] () -- C:\Users\Public\Desktop\F1 2010.lnk
[2010/10/17 19:57:14 | 000,001,808 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/10/17 18:09:40 | 000,001,057 | ---- | M] () -- C:\Users\Maťo\AppData\Roaming\vso_ts_preview.xml
[2010/10/17 11:53:40 | 000,001,005 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/17 00:02:03 | 000,013,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/17 00:02:03 | 000,013,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/16 18:19:23 | 000,001,724 | ---- | M] () -- C:\Users\Maťo\Desktop\Defraggler.lnk
[2010/10/15 10:16:54 | 000,001,084 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
[2010/10/14 20:43:05 | 000,828,912 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010/10/14 17:30:45 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2010/10/14 16:19:01 | 000,614,400 | ---- | M] () -- C:\Windows\AutoKMS.exe
[2010/10/14 16:19:01 | 000,000,135 | ---- | M] () -- C:\Windows\AutoKMS.ini
[2010/10/14 11:25:58 | 000,001,118 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[2010/10/14 11:25:51 | 000,141,312 | ---- | M] () -- C:\Windows\SysWow64\drivers\sp_rsdrv2.sys
[2010/10/11 17:42:19 | 000,000,000 | -H-- | M] () -- C:\Users\Maťo\Documents\Default.rdp
[2010/10/09 18:48:34 | 000,002,538 | ---- | M] () -- C:\Users\Maťo\Desktop\Nero Express.lnk
[2010/10/09 12:46:54 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/08 20:25:31 | 000,002,251 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010/10/04 20:22:07 | 000,000,576 | ---- | M] () -- C:\Users\Maťo\Desktop\House M.D..lnk
[2010/10/04 20:16:16 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2010/09/29 19:26:37 | 000,004,608 | ---- | M] () -- C:\Users\Maťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/29 08:51:29 | 000,000,975 | ---- | M] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010/09/25 13:26:12 | 000,004,767 | ---- | M] () -- C:\Windows\Irremote.ini
[2010/09/23 17:08:35 | 000,001,186 | ---- | M] () -- C:\Users\Maťo\Desktop\Adobe Photoshop 7.0.1 CE.lnk
[2010/09/22 22:19:18 | 000,001,224 | ---- | M] () -- C:\Users\Maťo\Desktop\ConvertXtoDVD 4.lnk
[2010/09/22 11:31:47 | 000,002,480 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/19 21:01:54 | 000,002,597 | ---- | C] () -- C:\Users\Public\Desktop\PdfMerge.lnk
[2010/10/18 17:45:47 | 000,000,615 | ---- | C] () -- C:\Users\Maťo\Desktop\Virtua Tennis 3.lnk
[2010/10/18 11:24:06 | 000,000,609 | ---- | C] () -- C:\Users\Public\Desktop\The Sims™ 3.lnk
[2010/10/17 23:19:09 | 000,001,473 | ---- | C] () -- C:\Users\Public\Desktop\F1 2010.lnk
[2010/10/17 19:57:13 | 000,001,808 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/10/15 10:15:51 | 000,001,084 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
[2010/10/15 10:14:39 | 000,001,005 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/14 20:43:05 | 000,828,912 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010/10/14 17:30:45 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2010/10/14 16:19:02 | 000,000,198 | ---- | C] () -- C:\Windows\tasks\AutoKMS.job
[2010/10/14 16:19:01 | 000,614,400 | ---- | C] () -- C:\Windows\AutoKMS.exe
[2010/10/14 16:19:01 | 000,000,135 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2010/10/14 11:25:58 | 000,001,118 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[2010/10/14 11:25:51 | 000,141,312 | ---- | C] () -- C:\Windows\SysWow64\drivers\sp_rsdrv2.sys
[2010/10/11 17:42:19 | 000,000,000 | -H-- | C] () -- C:\Users\Maťo\Documents\Default.rdp
[2010/10/09 18:48:34 | 000,002,538 | ---- | C] () -- C:\Users\Maťo\Desktop\Nero Express.lnk
[2010/10/09 12:46:54 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/08 20:25:31 | 000,002,251 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010/10/08 20:24:15 | 000,001,008 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/08 20:24:14 | 000,001,004 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/04 20:22:07 | 000,000,576 | ---- | C] () -- C:\Users\Maťo\Desktop\House M.D..lnk
[2010/10/04 20:16:16 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2010/09/29 19:22:56 | 000,004,608 | ---- | C] () -- C:\Users\Maťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/29 08:51:28 | 000,000,975 | ---- | C] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010/09/25 10:33:29 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini
[2010/09/23 17:08:35 | 000,001,186 | ---- | C] () -- C:\Users\Maťo\Desktop\Adobe Photoshop 7.0.1 CE.lnk
[2010/09/22 22:20:54 | 000,001,057 | ---- | C] () -- C:\Users\Maťo\AppData\Roaming\vso_ts_preview.xml
[2010/09/22 22:19:17 | 000,001,224 | ---- | C] () -- C:\Users\Maťo\Desktop\ConvertXtoDVD 4.lnk
[2010/09/20 18:01:01 | 000,002,455 | ---- | C] () -- C:\Windows\TRNCOM.INI
[2010/09/19 03:14:09 | 000,000,040 | ---- | C] () -- C:\Users\Maťo\AppData\Roaming\burnaware.ini
[2010/09/18 23:25:32 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/09/18 13:01:20 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010/09/18 13:01:20 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010/09/18 13:01:18 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010/09/18 13:01:18 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010/09/18 13:01:18 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009/11/06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== LOP Check ==========

[2010/09/23 18:44:05 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\ACD Systems
[2010/09/18 12:41:53 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Acronis
[2010/10/15 10:18:39 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\DAEMON Tools Pro
[2010/09/22 19:31:26 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Foxit Software
[2010/09/18 17:42:46 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\GHISLER
[2010/10/21 10:57:13 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\ICQ
[2010/09/19 02:56:18 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\InfraRecorder
[2010/09/20 18:04:47 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\LangSoft
[2010/09/29 10:03:08 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Mp3tag
[2010/10/16 13:06:08 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Spyware Terminator
[2010/09/18 14:38:17 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Tific
[2010/10/17 18:09:42 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Vso
[2010/10/21 10:09:08 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2009/07/14 07:08:49 | 000,017,210 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Nektra OEAPI" =
"OEXPRESS" =
"ICQ" = "C:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4 -- [2010/08/22 13:02:26 | 000,133,432 | ---- | M] (ICQ, LLC.)
"DAEMON Tools Pro Agent" = "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun -- [2010/04/15 10:17:14 | 000,427,328 | ---- | M] (DT Soft Ltd)
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2009/07/14 03:39:41 | 001,475,072 | ---- | M] (Microsoft Corporation)
"ISUSPM Startup" = C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup -- [2004/06/16 06:03:26 | 000,221,184 | ---- | M] (InstallShield Software Corporation)

< c:\windows\*.* /U >

< %SYSTEMDRIVE%\*.exe >
[2010/07/02 14:49:08 | 001,671,168 | ---- | M] (blackDEV) -- C:\RS.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2010/09/23 18:44:05 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\ACD Systems
[2010/09/18 12:41:53 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Acronis
[2010/09/29 19:21:05 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Adobe
[2010/09/18 17:51:38 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Corel
[2010/10/15 10:18:39 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\DAEMON Tools Pro
[2010/09/22 14:27:08 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\ESTsoft
[2010/09/22 19:31:26 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Foxit Software
[2010/09/18 17:42:46 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\GHISLER
[2010/10/21 10:57:13 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\ICQ
[2010/09/18 12:36:44 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Identities
[2010/09/19 02:56:18 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\InfraRecorder
[2010/09/20 18:04:47 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\LangSoft
[2010/09/18 13:19:36 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Macromedia
[2010/10/15 10:14:51 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Malwarebytes
[2009/07/14 09:54:31 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Media Center Programs
[2010/10/16 13:41:17 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Media Player Classic
[2010/10/19 20:02:32 | 000,000,000 | --SD | M] -- C:\Users\Maťo\AppData\Roaming\Microsoft
[2010/09/18 13:00:46 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Mozilla
[2010/09/29 10:03:08 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Mp3tag
[2010/10/17 00:12:35 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Nero
[2010/10/21 20:26:24 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Skype
[2010/10/21 19:26:33 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\skypePM
[2010/10/16 13:06:08 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Spyware Terminator
[2010/10/17 19:57:47 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\SUPERAntiSpyware.com
[2010/09/18 14:38:17 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Tific
[2010/10/17 18:09:42 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\Vso
[2010/09/18 13:42:20 | 000,000,000 | ---D | M] -- C:\Users\Maťo\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2008/05/29 00:03:08 | 000,037,176 | ---- | M] () -- C:\Users\Maťo\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2010/10/18 11:26:03 | 000,010,134 | R--- | M] () -- C:\Users\Maťo\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe


< MD5 for: AGP440.SYS >
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2009/07/14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009/07/14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\SysWOW64\cryptsvc.dll
[2009/07/14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\SysWOW64\cryptsvc.dll
[2009/07/14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009/08/03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009/10/31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009/08/03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll

< MD5 for: IASTORV.SYS >
[2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys

< MD5 for: LSASS.EXE >
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe

< MD5 for: NDIS.SYS >
[2009/07/14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009/07/14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009/07/14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvraid.sys
[2009/07/14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< MD5 for: SMSS.EXE >
[2009/07/14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010/06/14 08:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2010/06/14 08:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009/07/14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys

< MD5 for: USERINIT.EXE >
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2009/07/14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/07/14 03:14:57 | 000,195,584 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\AudioSes.dll
[2009/07/14 03:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\avrt.dll
[2009/07/14 03:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\d3d8thk.dll
[2009/07/14 03:15:08 | 001,826,816 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\d3d9.dll
[2006/11/29 13:06:18 | 003,426,072 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\d3dx9_32.dll
[2009/07/14 03:15:11 | 000,145,408 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\dinput8.dll
[2009/07/14 03:15:13 | 000,453,632 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\dsound.dll
[2009/07/14 03:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\hid.dll
[2009/07/14 03:15:41 | 000,213,504 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\MMDevAPI.dll
[2010/07/10 05:38:00 | 009,818,728 | ---- | M] (NVIDIA Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\nvd3dum.dll
[2009/07/14 03:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\powrprof.dll
[2009/12/29 08:55:34 | 000,172,032 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\wintrust.dll
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
No captured output from command...

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
No captured output from command...

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
No captured output from command...

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< End of report >

Ani zde nic nebezpečného není vidět. Smažte cache prohlížeče.

to uz som spravil vsetko no ja neviem co to ej zac a vymazat sa internet explorer neda ze by som ho znova nainstaloval

Zkuste ještě vyčistit PC CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .

toto som vsetko skusal do pc sa vyznam takze takto veci ovladam takze problem neviem kde je najradsej by som cely internet explorer vyhodil s pc

Opravdu není zřejmé, co problém způsobuje. Zkuste ještě reinstalovat IE.