VIRY.CZ

Bryy den, muzete mi prosim kouknout na log? Posledni 3-4 dny se zasekavaji videa v prohlizeci a mam pocit, ze se tam nainstalovalo neco, co by tam byt nemelo. Dekujuuu

Logfile of random's system information tool 1.08 (written by random/random)
Run by Laydenka at 2011-01-17 15:31:58
Microsoft Windows 7 Ultimate
System drive C: has 18 GB (37%) free of 50 GB
Total RAM: 3839 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:32:02, on 17.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\DNA\btdna.exe
C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Laydenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~2\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files (x86)\DNA\btdna.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9185 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Windows\system32\Dwm.exe"
C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000714
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\DNA\btdna.exe"
"C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE"
"C:\Program Files\Rainmeter\Rainmeter.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1432.8820600.636925258 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 1432 plugin \\.\pipe\gecko-crash-server-pipe.1432
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Laydenka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
MyWebSearch Search Assistant BHO - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL [2011-01-16 54704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
mwsBar BHO - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL [2011-01-16 796176]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-16 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-03 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{07B18EA9-A523-4961-B6BB-170DE4475CCA} - My Web Search - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL [2011-01-16 796176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-06 11057768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"BitTorrent DNA"=C:\Program Files (x86)\DNA\btdna.exe [2011-01-05 323392]
"MyWebSearch Email Plugin"=C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe [2011-01-16 32849]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2010-11-16 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-16 932288]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2010-12-07 74752]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 98304]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"My Web Search Bar Search Scope Monitor"=C:\PROGRA~2\MYWEBS~1\bar\1.bin\m3SrchMn.exe [2011-01-16 28783]
"MyWebSearch Email Plugin"=C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe [2011-01-16 32849]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2011-01-17 15:31:59 ----D---- C:\Program Files\trend micro
2011-01-17 15:31:58 ----D---- C:\rsit
2011-01-16 19:17:13 ----D---- C:\Program Files (x86)\MyWebSearch
2011-01-16 19:17:09 ----D---- C:\Program Files (x86)\FunWebProducts
2011-01-16 18:17:18 ----D---- C:\Program Files (x86)\Mihov Picture Downloader
2011-01-16 11:43:35 ----D---- C:\ProgramData\ATI
2011-01-16 11:41:36 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-01-16 11:41:35 ----D---- C:\Program Files (x86)\ATI
2011-01-16 11:40:40 ----SHD---- C:\Config.Msi
2011-01-16 11:37:09 ----D---- C:\ATI
2011-01-16 11:29:41 ----D---- C:\Program Files (x86)\Lavalys
2011-01-14 23:26:30 ----D---- C:\Program Files (x86)\PokerStars.NET
2011-01-14 16:32:33 ----D---- C:\Users\Laydenka\AppData\Roaming\AIMP3
2011-01-14 16:32:26 ----D---- C:\Program Files (x86)\AIMP3
2011-01-12 19:21:55 ----D---- C:\Users\Laydenka\AppData\Roaming\BSplayer Pro
2011-01-12 19:21:55 ----D---- C:\Users\Laydenka\AppData\Roaming\BSplayer
2011-01-12 17:31:50 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2011-01-12 17:31:14 ----A---- C:\Windows\SYSWOW64\rewire.dll
2011-01-12 17:31:04 ----D---- C:\Program Files (x86)\VstPlugins
2011-01-12 17:31:03 ----D---- C:\Program Files (x86)\Outsim
2011-01-12 17:30:04 ----D---- C:\Program Files (x86)\Image-Line
2011-01-12 16:03:57 ----A---- C:\Windows\Chytrá angliètina - DEMO Uninstaller.exe
2011-01-12 16:03:55 ----D---- C:\chytra_anglictina_demo
2011-01-12 10:13:28 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-01-12 10:13:28 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-12 10:13:28 ----A---- C:\Windows\system32\d2d1.dll
2011-01-12 10:13:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-01-12 10:13:27 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-01-12 10:13:27 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-01-12 10:13:27 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-01-12 10:13:27 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-12 10:13:27 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-12 10:13:27 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-12 10:13:27 ----A---- C:\Windows\system32\mf.dll
2011-01-12 10:13:27 ----A---- C:\Windows\system32\FntCache.dll
2011-01-12 10:13:27 ----A---- C:\Windows\system32\DWrite.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-01-12 10:13:26 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\mfps.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-12 10:13:26 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-12 10:13:26 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-12 10:13:26 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 10:13:19 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-01-12 10:13:19 ----A---- C:\Windows\system32\odbc32.dll
2011-01-11 12:44:06 ----D---- C:\Users\Laydenka\AppData\Roaming\EuroTalk
2011-01-11 12:44:05 ----D---- C:\Program Files (x86)\EuroTalk
2011-01-10 17:03:51 ----A---- C:\Windows\iun6002.exe
2011-01-10 17:03:49 ----D---- C:\Program Files (x86)\Codec Pack - All In 1
2011-01-10 17:03:21 ----A---- C:\Windows\Codec Pack - All In 1 Setup Log.txt
2011-01-09 23:40:06 ----D---- C:\Users\Laydenka\AppData\Roaming\AnvSoft
2011-01-09 23:40:04 ----D---- C:\Program Files (x86)\AnvSoft
2011-01-08 17:14:30 ----D---- C:\Program Files (x86)\aTube Catcher
2011-01-08 11:13:06 ----D---- C:\Program Files (x86)\Ubisoft
2011-01-05 17:00:01 ----D---- C:\Users\Laydenka\AppData\Roaming\ICQ
2011-01-05 16:59:58 ----D---- C:\Program Files (x86)\ICQ7.2
2011-01-05 16:11:15 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-01-05 16:11:02 ----A---- C:\Windows\system32\WavesGUILib.dll
2011-01-05 16:11:02 ----A---- C:\Windows\system32\SRSWOW64.dll
2011-01-05 16:11:02 ----A---- C:\Windows\system32\SRSTSX64.dll
2011-01-05 16:11:02 ----A---- C:\Windows\system32\SRSTSH64.dll
2011-01-05 16:11:02 ----A---- C:\Windows\system32\SRSHP64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\SFNHK64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\SFCOM64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\SFAPO64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RtPgEx64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RtkCfg64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RtkApi64.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RTEEP64A.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RTEEL64A.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RTEEG64A.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\RTEED64A.dll
2011-01-05 16:11:01 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2011-01-05 16:11:00 ----A---- C:\Windows\system32\RTCOM64.dll
2011-01-05 16:11:00 ----A---- C:\Windows\system32\RP3DHT64.dll
2011-01-05 16:11:00 ----A---- C:\Windows\system32\RP3DAA64.dll
2011-01-05 16:11:00 ----A---- C:\Windows\system32\RCoInst64.dll
2011-01-05 16:10:59 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2011-01-05 16:10:59 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2011-01-05 16:10:59 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2011-01-05 16:10:59 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2011-01-05 16:10:59 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\FMAPO64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2011-01-05 16:10:58 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2011-01-05 16:10:57 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2011-01-05 16:10:57 ----A---- C:\Windows\system32\AERTAR64.dll
2011-01-05 16:10:57 ----A---- C:\Windows\system32\AERTAC64.dll
2011-01-05 16:10:56 ----A---- C:\Windows\RtlExUpd.dll
2011-01-05 15:15:24 ----D---- C:\AV_LOGS
2011-01-05 15:14:22 ----D---- C:\Users\Laydenka\AppData\Roaming\Avnex
2011-01-05 15:14:10 ----A---- C:\Windows\system32\drivers\vcsvad.sys
2011-01-05 15:14:03 ----D---- C:\Program Files (x86)\AV Vcs 7.0 GOLD
2011-01-05 15:13:07 ----D---- C:\vcs5BGEffects
2011-01-05 15:07:28 ----D---- C:\Program Files (x86)\AV Vcs 6.0 DIAMOND
2011-01-05 12:24:26 ----D---- C:\Program Files (x86)\AIMP2
2011-01-05 11:52:23 ----A---- C:\Windows\avisplitter.ini
2011-01-05 11:52:22 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2011-01-05 11:52:22 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-01-05 11:52:22 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-01-05 11:52:21 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll.manifest
2011-01-05 11:52:20 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-01-05 11:52:19 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2011-01-05 11:39:50 ----A---- C:\Windows\system32\RtNicProp64.dll
2011-01-05 11:39:50 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2011-01-05 11:32:35 ----D---- C:\Users\Laydenka\AppData\Roaming\DNA
2011-01-05 11:32:35 ----D---- C:\Program Files (x86)\DNA
2011-01-04 19:12:44 ----D---- C:\Users\Laydenka\AppData\Roaming\Rainmeter
2011-01-04 19:10:27 ----D---- C:\Program Files\Rainmeter
2011-01-04 16:31:40 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-01-04 16:31:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-01-04 16:31:40 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-01-04 16:31:40 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-01-04 16:31:40 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-01-04 16:31:40 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-01-04 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-01-04 16:31:39 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-01-04 16:31:38 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-01-04 16:31:38 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-01-04 13:41:39 ----A---- C:\Windows\system32\unrar.dll
2011-01-04 13:41:38 ----A---- C:\Windows\system32\ff_vfw.dll
2011-01-04 13:41:37 ----D---- C:\Program Files\KLCP64
2011-01-04 13:37:36 ----D---- C:\Program Files (x86)\Webteh
2011-01-04 13:11:03 ----D---- C:\ProgramData\ashampoo
2011-01-04 13:10:26 ----D---- C:\Program Files (x86)\Ashampoo
2011-01-04 13:06:01 ----D---- C:\ProgramData\Electronic Arts
2011-01-04 13:04:32 ----D---- C:\Program Files (x86)\Electronic Arts
2011-01-04 13:00:01 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-01-04 13:00:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-01-04 13:00:01 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-01-04 13:00:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-01-04 13:00:01 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-01-04 13:00:01 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-01-04 13:00:01 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-01-04 13:00:01 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-01-04 13:00:00 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-01-04 13:00:00 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-01-04 13:00:00 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-01-04 13:00:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-01-04 13:00:00 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-01-04 13:00:00 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-01-04 13:00:00 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-01-04 13:00:00 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-01-04 12:59:59 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-01-04 12:59:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-01-04 12:59:59 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-01-04 12:59:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-01-04 12:59:58 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-01-04 12:59:57 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-01-04 12:59:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-01-04 12:59:57 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-01-04 12:59:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-01-04 12:59:57 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-01-04 12:59:57 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-01-04 12:59:57 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-01-04 12:59:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-01-04 12:59:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-01-04 12:59:57 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-01-04 12:59:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-01-04 12:59:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-01-04 12:59:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-01-04 12:59:55 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-01-04 12:59:54 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-01-04 12:59:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-01-04 12:59:54 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-01-04 12:59:54 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-01-04 12:59:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-01-04 12:59:54 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-01-04 12:59:54 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-01-04 12:59:54 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-01-04 12:59:54 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-01-04 12:59:54 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-01-04 12:59:53 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-01-04 12:59:53 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-01-04 12:59:53 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-01-04 12:59:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-01-04 12:59:53 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-01-04 12:59:53 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-01-04 12:59:53 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-01-04 12:59:53 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-01-04 12:59:52 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-01-04 12:59:52 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-01-04 12:59:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-01-04 12:59:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-01-04 12:59:52 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-01-04 12:59:52 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-01-04 12:59:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-01-04 12:59:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-01-04 12:59:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\xinput1_3.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-01-04 12:59:51 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-01-04 12:59:50 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-01-04 12:59:50 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-01-04 12:59:50 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-01-04 12:59:50 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-01-04 12:59:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-01-04 12:59:50 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-01-04 12:59:50 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-01-04 12:59:50 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-01-04 12:59:50 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-01-04 12:59:50 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-01-04 12:59:49 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-01-04 12:59:49 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-01-04 12:59:49 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-01-04 12:59:49 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-01-04 12:59:49 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-01-04 12:59:49 ----A---- C:\Windows\system32\d3dx10.dll
2011-01-04 12:59:48 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-01-04 12:59:48 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-01-04 12:59:48 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-01-04 12:59:48 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-01-04 12:59:48 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-01-04 12:59:48 ----A---- C:\Windows\system32\xinput1_2.dll
2011-01-04 12:59:48 ----A---- C:\Windows\system32\xinput1_1.dll
2011-01-04 12:59:48 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-01-04 12:59:48 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-01-04 12:59:48 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-01-04 12:59:44 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-01-04 12:59:44 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-01-04 12:59:43 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-01-04 12:59:43 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-01-04 12:59:43 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-01-04 12:59:43 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-01-04 12:59:43 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-01-04 12:59:43 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-01-04 12:59:43 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-01-04 12:59:43 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-01-04 12:59:42 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-01-04 12:59:42 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-01-04 12:59:42 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-01-04 12:59:42 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-01-04 12:59:42 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-01-04 12:59:42 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-01-04 12:59:41 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-01-04 12:59:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-01-04 12:56:58 ----D---- C:\ProgramData\Solidshield
2011-01-04 10:53:05 ----D---- C:\Program Files (x86)\Microsoft Works
2011-01-04 10:52:46 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2011-01-04 10:52:18 ----D---- C:\Windows\PCHEALTH
2011-01-04 10:52:18 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-01-04 10:48:42 ----D---- C:\Program Files\Microsoft Office
2011-01-04 10:48:36 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-01-04 10:47:59 ----D---- C:\ProgramData\Microsoft Help
2011-01-04 10:47:59 ----D---- C:\Program Files (x86)\Microsoft Office
2011-01-04 10:46:18 ----RHD---- C:\MSOCache
2011-01-04 10:45:45 ----D---- C:\ProgramData\Apple Computer
2011-01-04 10:45:42 ----A---- C:\Windows\SYSWOW64\QTCF.dll
2011-01-04 10:45:37 ----D---- C:\Program Files (x86)\QuickTime Alternative
2011-01-04 10:34:54 ----D---- C:\ProgramData\Stardock
2011-01-04 10:30:43 ----A---- C:\Windows\UC.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\RAR.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\PKZIP.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\PKUNZIP.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\NOCLOSE.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\LHA.PIF
2011-01-04 10:30:43 ----A---- C:\Windows\ARJ.PIF
2011-01-04 10:30:40 ----D---- C:\Users\Laydenka\AppData\Roaming\GHISLER
2011-01-04 10:30:40 ----D---- C:\Program Files (x86)\totalcmd
2011-01-04 00:24:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-01-04 00:21:15 ----D---- C:\Users\Laydenka\AppData\Roaming\ATI
2011-01-04 00:19:39 ----RA---- C:\Windows\SYSWOW64\drivers\AsIO.sys
2011-01-04 00:19:39 ----RA---- C:\Windows\SYSWOW64\AsIO.dll
2011-01-04 00:19:38 ----D---- C:\Program Files (x86)\ASUS
2011-01-04 00:19:32 ----A---- C:\Windows\system32\RTNUninst64.dll
2011-01-04 00:18:50 ----D---- C:\Program Files\Realtek
2011-01-04 00:18:39 ----A---- C:\Windows\system32\RtkAPO64.dll
2011-01-04 00:18:33 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-01-04 00:18:33 ----D---- C:\Program Files (x86)\Realtek
2011-01-04 00:18:30 ----HD---- C:\Program Files (x86)\Temp
2011-01-04 00:16:32 ----A---- C:\Windows\system32\drivers\AtiPcie.sys
2011-01-04 00:16:28 ----D---- C:\Program Files (x86)\ATI Technologies
2011-01-04 00:16:13 ----SHD---- C:\Windows\Installer
2011-01-04 00:15:57 ----D---- C:\Program Files\ATI Technologies
2011-01-04 00:15:54 ----D---- C:\Program Files\ATI
2011-01-04 00:14:53 ----A---- C:\Windows\Language_trs.ini
2011-01-04 00:14:50 ----A---- C:\Windows\Ascd_tmp.ini
2011-01-04 00:13:29 ----D---- C:\Users\Laydenka\AppData\Roaming\Identities
2011-01-04 00:13:18 ----SD---- C:\Users\Laydenka\AppData\Roaming\Microsoft
2011-01-04 00:13:18 ----D---- C:\Users\Laydenka\AppData\Roaming\Media Center Programs
2011-01-04 00:13:12 ----SHD---- C:\Recovery
2011-01-04 00:13:09 ----D---- C:\Windows\SoftwareDistribution
2011-01-04 00:08:03 ----D---- C:\Windows\Prefetch
2011-01-04 00:07:38 ----ASH---- C:\pagefile.sys
2011-01-04 00:07:37 ----SHD---- C:\System Volume Information
2011-01-04 00:07:37 ----ASH---- C:\hiberfil.sys
2011-01-04 00:06:35 ----D---- C:\Windows\Panther
2011-01-03 21:37:13 ----D---- C:\Users\Laydenka\AppData\Roaming\QIP
2011-01-03 21:36:10 ----D---- C:\Program Files (x86)\QIP 2010
2011-01-03 19:59:05 ----D---- C:\Windows\Sun
2011-01-03 19:50:57 ----D---- C:\Users\Laydenka\AppData\Roaming\VitySoft
2011-01-03 19:50:53 ----D---- C:\ProgramData\Sun
2011-01-03 19:50:36 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-01-03 19:50:36 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-01-03 19:50:36 ----A---- C:\Windows\SYSWOW64\java.exe
2011-01-03 19:50:36 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-01-03 19:50:29 ----D---- C:\Program Files (x86)\Java
2011-01-03 19:46:01 ----D---- C:\Program Files (x86)\RocketDock
2011-01-03 17:50:31 ----A---- C:\Windows\unvise32.exe
2011-01-03 17:50:27 ----D---- C:\Program Files (x86)\The Logo Creator v5
2011-01-03 17:04:20 ----D---- C:\Windows\SYSWOW64\Wat
2011-01-03 17:04:20 ----D---- C:\Windows\system32\Wat
2011-01-03 17:01:26 ----D---- C:\ProgramData\Avira
2011-01-03 17:01:26 ----D---- C:\Program Files (x86)\Avira
2011-01-03 17:01:26 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-01-03 17:01:26 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-01-03 16:58:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-01-03 16:58:11 ----A---- C:\Windows\system32\tzres.dll
2011-01-03 16:52:38 ----D---- C:\Windows\SYSWOW64\cs
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2011-01-03 16:52:30 ----D---- C:\Windows\cs-CZ
2011-01-03 16:52:29 ----D---- C:\Windows\system32\cs
2011-01-03 16:52:20 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-01-03 16:48:33 ----D---- C:\Users\Laydenka\AppData\Roaming\Thunderbird
2011-01-03 16:48:28 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2011-01-03 16:38:07 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-01-03 16:38:07 ----A---- C:\Windows\system32\msv1_0.dll
2011-01-03 16:27:11 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-01-03 16:27:11 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-01-03 16:27:11 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-01-03 16:27:11 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-01-03 16:27:11 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-01-03 16:27:11 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-01-03 16:27:11 ----A---- C:\Windows\system32\PresentationHost.exe
2011-01-03 16:27:11 ----A---- C:\Windows\system32\netfxperf.dll
2011-01-03 16:27:11 ----A---- C:\Windows\system32\mscoree.dll
2011-01-03 16:27:11 ----A---- C:\Windows\system32\dfshim.dll
2011-01-03 16:26:32 ----A---- C:\Windows\system32\browserchoice.exe
2011-01-03 16:23:39 ----A---- C:\Windows\system32\MRT.exe
2011-01-03 16:15:41 ----A---- C:\Windows\system32\drivers\ks.sys
2011-01-03 16:15:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-01-03 16:15:25 ----A---- C:\Windows\system32\asycfilt.dll
2011-01-03 16:15:23 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-01-03 16:15:23 ----A---- C:\Windows\system32\CertEnroll.dll
2011-01-03 16:15:21 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-01-03 16:15:21 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-01-03 16:15:21 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-01-03 16:15:21 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-01-03 16:15:21 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-01-03 16:15:21 ----A---- C:\Windows\system32\taskschd.dll
2011-01-03 16:15:21 ----A---- C:\Windows\system32\taskeng.exe
2011-01-03 16:15:21 ----A---- C:\Windows\system32\taskcomp.dll
2011-01-03 16:15:21 ----A---- C:\Windows\system32\schtasks.exe
2011-01-03 16:15:21 ----A---- C:\Windows\system32\schedsvc.dll
2011-01-03 16:15:21 ----A---- C:\Windows\system32\ntdll.dll
2011-01-03 16:15:20 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-01-03 16:15:20 ----A---- C:\Windows\system32\ole32.dll
2011-01-03 16:15:19 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-01-03 16:15:19 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-01-03 16:15:19 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-01-03 16:15:19 ----A---- C:\Windows\system32\t2embed.dll
2011-01-03 16:15:19 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-01-03 16:15:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-01-03 16:15:18 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-01-03 16:15:18 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-01-03 16:15:18 ----A---- C:\Windows\system32\vbscript.dll
2011-01-03 16:15:18 ----A---- C:\Windows\system32\atmlib.dll
2011-01-03 16:15:18 ----A---- C:\Windows\system32\atmfd.dll
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-01-03 16:15:17 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-01-03 16:15:17 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-01-03 16:15:17 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-01-03 16:15:17 ----A---- C:\Windows\system32\secproc_isv.dll
2011-01-03 16:15:17 ----A---- C:\Windows\system32\secproc.dll
2011-01-03 16:15:17 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-01-03 16:15:17 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-01-03 16:15:17 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-01-03 16:15:17 ----A---- C:\Windows\system32\RMActivate.exe
2011-01-03 16:15:16 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2011-01-03 16:15:16 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-01-03 16:15:16 ----A---- C:\Windows\system32\psisdecd.dll
2011-01-03 16:15:16 ----A---- C:\Windows\system32\msdri.dll
2011-01-03 16:15:16 ----A---- C:\Windows\system32\CPFilters.dll
2011-01-03 16:15:11 ----A---- C:\Windows\system32\win32k.sys
2011-01-03 16:15:11 ----A---- C:\Windows\system32\shell32.dll
2011-01-03 16:15:10 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-01-03 16:15:09 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-01-03 16:15:09 ----A---- C:\Windows\system32\inetcomm.dll
2011-01-03 16:15:09 ----A---- C:\Windows\system32\fontsub.dll
2011-01-03 16:15:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-01-03 16:15:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-01-03 16:15:08 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-01-03 16:15:08 ----A---- C:\Windows\system32\jscript.dll
2011-01-03 16:14:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-01-03 16:14:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-01-03 16:14:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-01-03 16:14:09 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-01-03 16:14:09 ----A---- C:\Windows\system32\schannel.dll
2011-01-03 16:14:06 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-01-03 16:14:06 ----A---- C:\Windows\explorer.exe
2011-01-03 16:14:05 ----A---- C:\Windows\system32\winlogon.exe
2011-01-03 16:14:03 ----A---- C:\Windows\system32\mshtml.dll
2011-01-03 16:14:02 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-01-03 16:14:02 ----A---- C:\Windows\system32\ieframe.dll
2011-01-03 16:14:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-01-03 16:14:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-01-03 16:14:01 ----A---- C:\Windows\system32\urlmon.dll
2011-01-03 16:14:01 ----A---- C:\Windows\system32\mstime.dll
2011-01-03 16:14:01 ----A---- C:\Windows\system32\msfeeds.dll
2011-01-03 16:14:01 ----A---- C:\Windows\system32\iertutil.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-01-03 16:14:00 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\wininet.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\mshtmled.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\msfeedssync.exe
2011-01-03 16:14:00 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\licmgr10.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\jsproxy.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\ieui.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\iepeers.dll
2011-01-03 16:14:00 ----A---- C:\Windows\system32\iedkcs32.dll
2011-01-03 16:13:59 ----A---- C:\Windows\system32\wmp.dll
2011-01-03 16:13:58 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-01-03 16:13:58 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-01-03 16:13:57 ----A---- C:\Windows\system32\wmploc.DLL
2011-01-03 16:13:19 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-01-03 16:13:19 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-01-03 16:13:19 ----A---- C:\Windows\system32\lsasrv.dll
2011-01-03 16:13:19 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-01-03 16:13:19 ----A---- C:\Windows\system32\comctl32.dll
2011-01-03 16:13:17 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-01-03 16:13:17 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-01-03 16:13:17 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\tsbyuv.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\srvsvc.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\quartz.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\msyuv.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\msvidc32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\msrle32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\iyuv_32.dll
2011-01-03 16:13:16 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-01-03 16:13:16 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-01-03 16:13:16 ----A---- C:\Windows\system32\drivers\srv.sys
2011-01-03 16:13:15 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-01-03 16:13:15 ----A---- C:\Windows\system32\oleaut32.dll
2011-01-03 16:13:14 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-01-03 16:13:14 ----A---- C:\Windows\system32\rtutils.dll
2011-01-03 16:13:13 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-01-03 16:13:13 ----A---- C:\Windows\system32\wow64.dll
2011-01-03 16:13:13 ----A---- C:\Windows\system32\msxml3.dll
2011-01-03 16:13:13 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\user.exe
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-01-03 16:13:12 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-01-03 16:13:12 ----A---- C:\Windows\system32\webio.dll
2011-01-03 16:13:12 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-01-03 16:13:12 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-01-03 16:13:12 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-01-03 16:13:11 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-01-03 16:13:11 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-01-03 16:13:11 ----A---- C:\Windows\system32\wmpmde.dll
2011-01-03 16:13:11 ----A---- C:\Windows\system32\spoolsv.exe
2011-01-03 16:13:10 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-01-03 16:13:10 ----A---- C:\Windows\system32\msasn1.dll
2011-01-03 16:13:10 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-01-03 16:13:09 ----A---- C:\Windows\system32\consent.exe
2011-01-03 16:11:19 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-01-03 16:11:19 ----A---- C:\Windows\system32\cabview.dll
2011-01-03 16:11:15 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-01-03 16:11:15 ----A---- C:\Windows\system32\wintrust.dll
2011-01-03 15:58:39 ----D---- C:\Program Files (x86)\WinRAR
2011-01-03 15:54:07 ----D---- C:\Program Files (x86)\uTorrent
2011-01-03 15:53:48 ----D---- C:\Users\Laydenka\AppData\Roaming\uTorrent
2011-01-03 15:52:22 ----D---- C:\Program Files (x86)\7-Zip
2011-01-03 15:47:51 ----N---- C:\Windows\system32\MpSigStub.exe
2011-01-03 15:39:40 ----D---- C:\Users\Laydenka\AppData\Roaming\Mozilla
2011-01-03 15:37:43 ----D---- C:\Users\Laydenka\AppData\Roaming\Macromedia
2011-01-03 15:37:43 ----D---- C:\Users\Laydenka\AppData\Roaming\Adobe
2011-01-03 15:37:38 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-01-03 15:37:37 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-01-03 15:37:22 ----D---- C:\Users\Laydenka\AppData\Roaming\Winamp
2011-01-03 15:37:22 ----D---- C:\Program Files (x86)\Winamp
2011-01-03 15:36:48 ----D---- C:\Program Files (x86)\The KMPlayer
2011-01-03 15:36:19 ----D---- C:\Windows\SYSWOW64\Macromed
2011-01-03 15:36:15 ----A---- C:\Windows\system32\drivers\sptd.sys
2011-01-03 15:36:05 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-01-03 15:35:37 ----D---- C:\Program Files (x86)\Adobe
2011-01-03 15:35:33 ----D---- C:\Users\Laydenka\AppData\Roaming\DAEMON Tools Lite
2011-01-03 15:35:31 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-01-03 15:34:55 ----D---- C:\ProgramData\Adobe
2011-01-03 15:33:51 ----D---- C:\Program Files\CCleaner
2011-01-03 15:25:15 ----A---- C:\Windows\system32\drivers\AtiHdmi.sys
2011-01-03 15:25:07 ----A---- C:\Windows\system32\coinst.dll

======List of files/folders modified in the last 1 months======

2011-01-17 15:31:59 ----RD---- C:\Program Files
2011-01-17 15:31:59 ----D---- C:\Windows\Temp
2011-01-17 15:26:50 ----D---- C:\Windows\System32
2011-01-17 15:26:50 ----D---- C:\Windows\inf
2011-01-17 15:26:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-17 15:22:50 ----D---- C:\Windows\system32\config
2011-01-16 19:17:13 ----RD---- C:\Program Files (x86)
2011-01-16 19:17:13 ----D---- C:\Windows\SysWOW64
2011-01-16 19:17:09 ----D---- C:\Windows\Downloaded Program Files
2011-01-16 12:07:48 ----RSD---- C:\Windows\assembly
2011-01-16 12:07:48 ----D---- C:\Windows\Microsoft.NET
2011-01-16 11:43:51 ----D---- C:\Windows
2011-01-16 11:43:35 ----HD---- C:\ProgramData
2011-01-16 11:42:16 ----D---- C:\Windows\system32\catroot
2011-01-16 11:41:36 ----D---- C:\Program Files\Common Files
2011-01-16 11:41:36 ----D---- C:\Program Files (x86)\Common Files
2011-01-16 11:40:36 ----D---- C:\Windows\system32\drivers
2011-01-16 11:40:35 ----D---- C:\Windows\system32\DriverStore
2011-01-16 11:40:13 ----D---- C:\Windows\system32\catroot2
2011-01-15 21:55:44 ----D---- C:\Windows\SYSWOW64\en-US
2011-01-15 21:55:44 ----D---- C:\Windows\system32\en-US
2011-01-15 21:46:50 ----D---- C:\Windows\winsxs
2011-01-15 20:40:15 ----D---- C:\Windows\SYSWOW64\oobe
2011-01-12 17:32:15 ----SD---- C:\ProgramData\Microsoft
2011-01-12 10:52:33 ----D---- C:\Windows\system32\LogFiles
2011-01-11 17:20:30 ----SHD---- C:\$Recycle.Bin
2011-01-05 11:54:29 ----D---- C:\Windows\system32\wdi
2011-01-05 11:44:13 ----D---- C:\Windows\system32\Tasks
2011-01-05 11:13:35 ----D---- C:\Windows\system32\drivers\UMDF
2011-01-04 19:10:29 ----RSD---- C:\Windows\Fonts
2011-01-04 16:30:21 ----D---- C:\Windows\Logs
2011-01-04 14:36:18 ----D---- C:\Windows\rescache
2011-01-04 10:52:56 ----D---- C:\Program Files (x86)\MSBuild
2011-01-04 10:52:45 ----D---- C:\Windows\ShellNew
2011-01-04 10:51:05 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-01-04 10:48:22 ----A---- C:\Windows\win.ini
2011-01-04 00:19:06 ----D---- C:\Windows\system32\restore
2011-01-04 00:13:18 ----RD---- C:\Users
2011-01-04 00:08:00 ----D---- C:\Windows\CSC
2011-01-03 17:35:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-01-03 17:35:35 ----D---- C:\Windows\system32\cs-CZ
2011-01-03 16:52:52 ----D---- C:\Program Files\Internet Explorer
2011-01-03 16:52:52 ----D---- C:\Program Files (x86)\Internet Explorer
2011-01-03 16:52:50 ----D---- C:\Windows\ehome
2011-01-03 16:52:50 ----D---- C:\Program Files\Windows Mail
2011-01-03 16:52:50 ----D---- C:\Program Files (x86)\Windows Mail
2011-01-03 16:52:48 ----D---- C:\Windows\AppPatch
2011-01-03 16:52:41 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-01-03 16:52:41 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-01-03 16:52:41 ----D---- C:\Program Files (x86)\Windows Media Player
2011-01-03 16:52:40 ----D---- C:\Program Files\Windows Sidebar
2011-01-03 16:52:40 ----D---- C:\Program Files\Windows Photo Viewer
2011-01-03 16:52:40 ----D---- C:\Program Files\Windows Media Player
2011-01-03 16:52:40 ----D---- C:\Program Files\DVD Maker
2011-01-03 16:52:40 ----D---- C:\Program Files (x86)\Windows Defender
2011-01-03 16:52:39 ----D---- C:\Windows\servicing
2011-01-03 16:52:39 ----D---- C:\Program Files\Windows Journal
2011-01-03 16:52:39 ----D---- C:\Program Files\Windows Defender
2011-01-03 16:52:39 ----D---- C:\Program Files\Common Files\System
2011-01-03 16:52:38 ----D---- C:\Windows\SYSWOW64\winrm
2011-01-03 16:52:38 ----D---- C:\Windows\SYSWOW64\slmgr
2011-01-03 16:52:38 ----D---- C:\Windows\SYSWOW64\migwiz
2011-01-03 16:52:38 ----D---- C:\Windows\SYSWOW64\migration
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\WCN
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\wbem
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\MUI
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\DriverStore
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\drivers
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\Dism
2011-01-03 16:52:30 ----D---- C:\Windows\SYSWOW64\com
2011-01-03 16:52:30 ----D---- C:\Windows\IME
2011-01-03 16:52:29 ----D---- C:\Windows\system32\winrm
2011-01-03 16:52:29 ----D---- C:\Windows\system32\sysprep
2011-01-03 16:52:29 ----D---- C:\Windows\system32\slmgr
2011-01-03 16:52:29 ----D---- C:\Windows\system32\oobe
2011-01-03 16:52:29 ----D---- C:\Windows\system32\migwiz
2011-01-03 16:52:29 ----D---- C:\Windows\system32\migration
2011-01-03 16:52:29 ----D---- C:\Windows\system32\Boot
2011-01-03 16:52:29 ----D---- C:\Windows\PolicyDefinitions
2011-01-03 16:52:20 ----D---- C:\Windows\system32\MUI
2011-01-03 16:52:19 ----D---- C:\Windows\system32\WCN
2011-01-03 16:52:19 ----D---- C:\Windows\system32\Dism
2011-01-03 16:52:16 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2011-01-03 16:52:15 ----D---- C:\Windows\system32\wbem
2011-01-03 16:52:15 ----D---- C:\Windows\system32\com
2011-01-03 16:23:40 ----D---- C:\Windows\debug
2011-01-03 15:39:57 ----D---- C:\Windows\system32\CodeIntegrity

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-03 834544]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-07-06 13368]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 116568]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 83120]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-06 2419176]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-22 347680]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 116736]
S3 au7ftbp6;au7ftbp6; C:\Windows\system32\drivers\au7ftbp6.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-11-26 203776]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-12-13 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MyWebSearchService;My Web Search Service; C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe [2011-01-16 28762]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-01-03 403240]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-03 1255736]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.08 2011-01-17 15:32:03

======Uninstall list======

µTorrent-->"C:\Program Files (x86)\uTorrent\uTorrent.exe" /UNINSTALL
7-Zip 9.20-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin
Adobe Reader X - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA0000000001}
AIMP2-->C:\Program Files (x86)\AIMP2\Uninstall.exe
AIMP3-->C:\Program Files (x86)\AIMP3\Uninstall.exe
AMD Drag and Drop Transcoding-->MsiExec.exe /X{B95653AB-0E7F-204A-3226-17E9F38E6951}
Any Video Converter Professional 3.0.1-->"C:\Program Files (x86)\AnvSoft\Any Video Converter Professional\unins000.exe"
Ashampoo Burning Studio 10.0.1-->"C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 10\unins000.exe"
ASIO4ALL-->C:\Program Files (x86)\ASIO4ALL v2\uninstall.exe
ASUSUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x9
ATI Catalyst Install Manager-->msiexec /q/x{54A0FF28-05C4-81E3-3CC1-13D0C2519EFF} REBOOT=ReallySuppress
ATI Catalyst Registration-->MsiExec.exe /X{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}
aTube Catcher-->C:\Program Files (x86)\aTube Catcher\uninstall.exe
AV Voice Changer Software DIAMOND 6.0-->C:\PROGRA~2\AVVCS6~1.0DI\UNWISE.EXE C:\PROGRA~2\AVVCS6~1.0DI\INSTALL.LOG
AV Voice Changer Software GOLD 7.0-->C:\PROGRA~2\AVVCS7~1.0GO\UNWISE.EXE C:\PROGRA~2\AVVCS7~1.0GO\INSTALL.LOG
Avira AntiVir Personal - Free Antivirus-->C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe /REMOVE
BS.Player FREE-->"C:\Program Files (x86)\Webteh\BSplayer\uninstall.exe"
BSPlayer-->"C:\Program Files (x86)\Webteh\BSplayer\uninstall.exe"
Call of Duty: Black Ops-->"F:\Games\Call of Duty - Black Ops\unins000.exe"
Catalyst Control Center - Branding-->MsiExec.exe /I{6AB57823-3580-4CE0-9CF0-072E2A39460C}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Codec Pack - All In 1 6.0.3.0-->C:\Windows\iun6002.exe "C:\Program Files (x86)\Codec Pack - All In 1\irunin.ini"
Counter-Strike-->"F:\Games\CS\steam.exe" steam://uninstall/10
EA Download Manager UI-->msiexec /qb /x {E17141A6-211D-5854-61D9-69827A430D82}
EA Download Manager UI-->MsiExec.exe /I{E17141A6-211D-5854-61D9-69827A430D82}
EA Download Manager-->C:\Program Files (x86)\Electronic Arts\EADownloadManager\EADMUninstall.exe
EuroTalk Talk Now Multi-Language-->C:\PROGRA~2\EuroTalk\TALKNO~1\UNWISE.EXE C:\PROGRA~2\EuroTalk\TALKNO~1\INSTALL.LOG
EVEREST Ultimate Edition v5.01-->"C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\unins000.exe"
FL Studio 9-->C:\Program Files (x86)\Image-Line\FL Studio 9\uninstall.exe
Hardcore-->C:\Program Files (x86)\Image-Line\Hardcore\uninstall.exe
Chytrá angliètina - DEMO-->C:\Windows\Chytrá angliètina - DEMO Uninstaller.exe
ICQ7.2-->"C:\Program Files (x86)\InstallShield Installation Information\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly
IL Download Manager-->C:\Program Files (x86)\Image-Line\Downloader\uninstall.exe
Java(TM) 6 Update 23-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216023FF}
K-Lite Codec Pack (64-bit) v4.2.0-->"C:\Program Files\KLCP64\unins000.exe"
K-Lite Codec Pack 5.9.0 (Full)-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Mihov Picture Downloader 1.4 (remove only)-->"C:\Program Files (x86)\Mihov Picture Downloader\uninst.exe"
Mozilla Firefox (3.6.13)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (3.1.7)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
My Web Search (Smiley Central)-->rundll32 C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsbar.dll,O
Need for Speed(TM) Hot Pursuit-->MsiExec.exe /X{83A606F5-BF6F-42ED-9F33-B9F74297CDED}
PoiZone-->C:\Program Files (x86)\Image-Line\PoiZone\uninstall.exe
PokerStars.net-->"C:\Program Files (x86)\PokerStars.NET\PokerStarsUninstall.exe" /u:PokerStars.net
QuickTime Alternative 3.2.2-->"C:\Program Files (x86)\QuickTime Alternative\unins000.exe"
Rainmeter (remove only)-->"C:\Program Files\Rainmeter\uninst.exe"
Realtek Ethernet Controller Driver For Windows 7-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
RocketDock 1.3.5-->"C:\Program Files (x86)\RocketDock\unins000.exe"
Sawer-->C:\Program Files (x86)\Image-Line\Sawer\uninstall.exe
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The KMPlayer (remove only)-->"C:\Program Files (x86)\The KMPlayer\uninstall.exe"
The Logo Creator v5-->C:\Windows\unvise32.exe C:\Program Files (x86)\The Logo Creator v5\uninstal.log
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
Tom Clancy's H.A.W.X. 2-->"C:\Program Files (x86)\InstallShield Installation Information\{76A232AF-B7D6-41A4-B795-6B355E6D32B1}\setup.exe" -runfromtemp -l0x0009 -removeonly
Total Commander (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcuninst.exe
Toxic Biohazard-->C:\Program Files (x86)\Image-Line\Toxic Biohazard\uninstall.exe
Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {A45DD0BE-3CD9-3F1E-B233-B90C6983AE77} /parameterfolder Client
Winamp-->"C:\Program Files (x86)\Winamp\UninstWA.exe"
WinRAR archiver-->C:\Program Files (x86)\WinRAR\uninstall.exe
WMV9/VC-1 Video Playback-->MsiExec.exe /X{B3012F41-D8C7-5ABD-05D1-3EF39D9ACC22}

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Cryptographic Services byl zmenen na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Modules Installer byl zmenen na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Software Protection byl zmenen na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Event Log byl zmenen na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl zmenen na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPDriverNotFound
Reakce: Not available
ID souboru CAB: 0

Podpis problému:
P1: x64
P2: PCI\VEN_1033&DEV_0194&SUBSYS_84131043&REV_03
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Pripojené soubory:
C:\Windows\Temp\DMI736A.tmp.log.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_8ed79d30855f2f5c26da85f156b174a2e4a71b1_cab_06c973d7

Symbol analýzy:
Opetovné hledání rešení: 0
ID hlášení: 6e2dcf02-178e-11e0-95ba-fe44c2e78ee6
Stav hlášení: 6
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20110103230853.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20110103230804.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20110103230803.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspešne spuštena.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20110103230800.652871-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabranuje vytvárení duplicitních záznamu v protokolu událostí po dobu 86400 sekund. Tuto dobu lze zmenit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíci registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20110103230800.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla zmenena zabezpecená místní skupina.

Predmet:
ID zabezpecení: S-1-5-18
Název úctu: 37L4247E29-32$
Doména úctu: WORKGROUP
ID prihlášení: 0x3e7

Skupina:
ID zabezpecení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Zmenené atributy:
Název úctu SAM: -
Historie identifikátoru zabezpecení: -

Další informace:
Oprávnení: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110103230750.185253-000
Event Type: Úspešný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvorena zabezpecená místní skupina.

Predmet:
ID zabezpecení: S-1-5-18
Název úctu: 37L4247E29-32$
Doména úctu: WORKGROUP
ID prihlášení: 0x3e7

Nová skupina:
ID zabezpecení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název úctu SAM: Backup Operators
Historie identifikátoru zabezpecení: -

Další informace:
Oprávnení: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110103230750.185253-000
Event Type: Úspešný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvorena.

Pocet prvku: 0
ID zásady: 0x32c03
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110103230749.998053-000
Event Type: Úspešný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Úcet byl úspešne prihlášen.

Predmet:
ID zabezpecení: S-1-0-0
Název úctu: -
Doména úctu: -
ID prihlášení: 0x0

Typ prihlášení: 0

Nové prihlášení:
ID zabezpecení: S-1-5-18
Název úctu: SYSTEM
Doména úctu: NT AUTHORITY
ID prihlášení: 0x3e7
GUID prihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové síte -
Zdrojový port: -

Podrobné informace o overení:
Proces prihlášení: -
Balícek overení: -
Prenosové služby: -
Název balícku (pouze NTLM): -
Délka klíce: 0

Tato událost je generována po vytvorení relace prihlášení. Je generována v pocítaci, ke kterému byl získán prístup.

Pole s predmetem oznacují úcet v místním systému, který požadoval prihlášení. Jedná se nejcasteji o službu, napríklad službu serveru nebo místní proces, napríklad Winlogon.exe nebo Services.exe.

Pole Typ prihlášení oznacuje, k jakému typu prihlášení došlo. Nejbežnejší typy jsou 2 (interaktivní) a 3 (sít).

Pole Nové prihlášení oznacují úcet, pro který bylo nové prihlášení vytvoreno, tj. úcet, který byl prihlášen.

Pole Sít oznacují puvod požadavku na vzdálené prihlášení. Název pracovní stanice není vždy k dispozici a v nekterých prípadech muže být toto pole prázdné.

Pole s informacemi o overení poskytují podrobné informace o tomto konkrétním požadavku na prihlášení.
- GUID prihlášení je jednoznacný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Prenosové služby oznacují, které pomocné služby se podílely na tomto požadavku na prihlášení.
- Název balícku oznacuje, který dílcí protokol z protokolu NTLM byl použit.
- Délka klíce oznacuje délku generovaného klíce relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíc relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110103230748.765651-000
Event Type: Úspešný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána pri spuštení procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20110103230748.734450-000
Event Type: Úspešný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime Alternative\QTSystem
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=16
"PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 5 Stepping 3, AuthenticAMD
"PROCESSOR_REVISION"=0503

-----------------EOF-----------------

Zdravim a pekne odpoledne preji

Havet tam je

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

taaak, mam hotovo tady je log neco vic tam pomazal

ComboFix 11-01-16.04 - Laydenka 17.01.2011 15:45:38.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.3839.2573 [GMT 1:00]
Running from: c:\users\Laydenka\Desktop\ComboFix.exe
AV: AntiVir Desktop *Enabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\progra~2\MYWEBS~1\bar\1.bin\mwsoemon.exe
c:\program files (x86)\FunWebProducts
c:\program files (x86)\MyWebSearch
c:\program files (x86)\MyWebSearch\bar\1.bin\F3BKGERR.JPG
c:\program files (x86)\MyWebSearch\bar\1.bin\F3CJPEG.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3DTACTL.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3HISTSW.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3HKSTUB.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3HTmlmu.dll
c:\program files (x86)\MyWebSearch\bar\1.bin\F3HTtpct.dll
c:\program files (x86)\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3POPSWT.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
c:\program files (x86)\MyWebSearch\bar\1.bin\F3REGHK.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3REPROX.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3RESTUB.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\F3SCHMON.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\F3SPACER.WMV
c:\program files (x86)\MyWebSearch\bar\1.bin\F3WALLPP.DAT
c:\program files (x86)\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\FWPBUDDY.PNG
c:\program files (x86)\MyWebSearch\bar\1.bin\CHROME.MANIFEST
c:\program files (x86)\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files (x86)\MyWebSearch\bar\1.bin\INSTALL.RDF
c:\program files (x86)\MyWebSearch\bar\1.bin\M3AUXSTB.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3DLGHK.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3HTML.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3IDLE.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3MEDINT.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3MSG.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3SKIN.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\M3TPINST.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSMLBTN.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSOESTB.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSSVC.EXE
c:\program files (x86)\MyWebSearch\bar\1.bin\MWSUABTN.DLL
c:\program files (x86)\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
c:\program files (x86)\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files (x86)\MyWebSearch\bar\Game\CHESS.F3S
c:\program files (x86)\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files (x86)\MyWebSearch\bar\icons\CM.ICO
c:\program files (x86)\MyWebSearch\bar\icons\MFC.ICO
c:\program files (x86)\MyWebSearch\bar\icons\PSS.ICO
c:\program files (x86)\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files (x86)\MyWebSearch\bar\icons\WB.ICO
c:\program files (x86)\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files (x86)\MyWebSearch\bar\Message\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files (x86)\MyWebSearch\bar\Overlay\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Settings\s_pid.dat
c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf
c:\windows\system32\f3PSSavr.scr
c:\windows\SysWow64\f3PSSavr.scr

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_MyWebSearchService


((((((((((((((((((((((((( Files Created from 2010-12-17 to 2011-01-17 )))))))))))))))))))))))))))))))
.

2011-01-17 14:48 . 2011-01-17 14:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-17 14:31 . 2011-01-17 14:32 -------- d-----w- c:\program files\trend micro
2011-01-17 14:31 . 2011-01-17 14:32 -------- d-----w- C:\rsit
2011-01-16 17:17 . 2011-01-16 17:19 -------- d-----w- c:\program files (x86)\Mihov Picture Downloader
2011-01-16 10:43 . 2011-01-16 10:43 -------- d-----w- c:\programdata\ATI
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files (x86)\ATI
2011-01-16 10:37 . 2011-01-16 10:37 -------- d-----w- C:\ATI
2011-01-16 10:29 . 2011-01-16 10:29 -------- d-----w- c:\program files (x86)\Lavalys
2011-01-14 22:26 . 2011-01-14 22:27 -------- d-----w- c:\program files (x86)\PokerStars.NET
2011-01-14 15:32 . 2011-01-14 15:32 -------- d-----w- c:\program files (x86)\AIMP3
2011-01-14 09:32 . 2010-11-16 20:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F3579F1C-3EC6-4DB0-863C-6C8D5C8EAA67}\mpengine.dll
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\ASIO4ALL v2
2011-01-12 16:31 . 2006-06-20 08:56 225280 ----a-w- c:\windows\SysWow64\rewire.dll
2011-01-12 16:31 . 2009-08-02 20:09 1554944 ----a-w- c:\windows\SysWow64\vorbis.acm
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\VstPlugins
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\Outsim
2011-01-12 16:30 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\Image-Line
2011-01-12 15:03 . 2011-01-12 15:03 167236 ----a-w- c:\windows\Chytrá angliètina - DEMO Uninstaller.exe
2011-01-12 15:03 . 2011-01-12 15:03 -------- d-----w- C:\chytra_anglictina_demo
2011-01-11 11:44 . 2011-01-11 11:44 -------- d-----w- c:\program files (x86)\EuroTalk
2011-01-10 16:03 . 2011-01-10 16:03 737280 ----a-w- c:\windows\iun6002.exe
2011-01-10 16:03 . 2011-01-10 16:03 -------- d-----w- c:\program files (x86)\Codec Pack - All In 1
2011-01-09 22:40 . 2011-01-09 22:40 -------- d-----w- c:\program files (x86)\AnvSoft
2011-01-08 16:14 . 2011-01-08 16:14 -------- d-----w- c:\program files (x86)\aTube Catcher
2011-01-08 10:13 . 2011-01-08 10:13 -------- d-----w- c:\program files (x86)\Ubisoft
2011-01-05 15:59 . 2011-01-05 16:03 -------- d-----w- c:\program files (x86)\ICQ7.2
2011-01-05 15:10 . 2010-05-06 16:34 335192 ----a-w- c:\windows\system32\MaxxAudioAPO30.dll
2011-01-05 14:15 . 2011-01-05 14:15 -------- d-----w- C:\AV_LOGS
2011-01-05 14:14 . 2008-12-26 11:56 21504 ----a-w- c:\windows\system32\drivers\vcsvad.sys
2011-01-05 14:14 . 2011-01-16 14:06 -------- d-----w- c:\program files (x86)\AV Vcs 7.0 GOLD
2011-01-05 14:13 . 2011-01-16 14:07 -------- d-----w- C:\vcs5BGEffects
2011-01-05 14:07 . 2011-01-16 14:07 -------- d-----w- c:\program files (x86)\AV Vcs 6.0 DIAMOND
2011-01-05 11:24 . 2011-01-05 11:24 -------- d-----w- c:\program files (x86)\AIMP2
2011-01-05 10:52 . 2010-01-17 15:18 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2011-01-05 10:52 . 2009-05-29 21:37 205824 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2011-01-05 10:52 . 2009-05-29 21:31 881664 ----a-w- c:\windows\SysWow64\xvidcore.dll
2011-01-05 10:52 . 2008-09-24 18:41 839680 ----a-w- c:\windows\SysWow64\lameACM.acm
2011-01-05 10:52 . 2004-01-25 16:18 217088 ----a-w- c:\windows\SysWow64\yv12vfw.dll
2011-01-05 10:52 . 2010-04-16 18:00 85504 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2011-01-05 10:52 . 2011-01-05 10:54 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2011-01-05 10:39 . 2010-03-22 16:57 347680 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-01-05 10:39 . 2009-12-03 16:27 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-01-05 10:32 . 2011-01-17 14:50 -------- d-----w- c:\program files (x86)\DNA
2011-01-04 18:10 . 2011-01-04 18:10 -------- d-----w- c:\program files\Rainmeter
2011-01-04 12:41 . 2010-03-15 10:31 191488 ----a-w- c:\windows\system32\unrar.dll
2011-01-04 12:41 . 2010-12-27 18:00 92672 ----a-w- c:\windows\system32\ff_vfw.dll
2011-01-04 12:41 . 2011-01-04 12:41 -------- d-----w- c:\program files\KLCP64
2011-01-04 12:37 . 2011-01-04 12:37 -------- d-----w- c:\program files (x86)\Webteh
2011-01-04 12:11 . 2011-01-04 12:11 -------- d-----w- c:\programdata\ashampoo
2011-01-04 12:10 . 2011-01-04 12:10 -------- d-----w- c:\program files (x86)\Ashampoo
2011-01-04 12:06 . 2011-01-04 12:06 -------- d-----w- c:\programdata\Electronic Arts
2011-01-04 12:04 . 2011-01-04 12:06 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2011-01-04 12:04 . 2011-01-04 12:04 -------- d-----w- c:\program files (x86)\Electronic Arts
2011-01-04 11:59 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2011-01-04 11:56 . 2011-01-04 11:56 -------- d-----w- c:\programdata\Solidshield
2011-01-04 10:25 . 2011-01-04 10:25 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2011-01-04 09:53 . 2011-01-04 09:53 -------- d-----w- c:\program files (x86)\Microsoft Works
2011-01-04 09:52 . 2011-01-15 20:55 -------- d-----w- c:\program files (x86)\Microsoft.NET
2011-01-04 09:52 . 2011-01-04 09:52 -------- d-----w- c:\windows\PCHEALTH
2011-01-04 09:48 . 2011-01-04 09:48 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-01-04 09:47 . 2011-01-04 09:54 -------- d-----w- c:\programdata\Microsoft Help
2011-01-04 09:46 . 2011-01-04 09:46 -------- d-----r- C:\MSOCache
2011-01-04 09:45 . 2011-01-04 09:45 -------- d-----w- c:\programdata\Apple Computer
2011-01-04 09:45 . 2010-03-17 20:53 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2011-01-04 09:45 . 2010-03-17 20:53 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2011-01-04 09:45 . 2010-03-17 20:53 180224 ----a-w- c:\windows\SysWow64\QTCF.dll
2011-01-04 09:45 . 2011-01-04 09:46 -------- d-----w- c:\program files (x86)\QuickTime Alternative
2011-01-04 09:34 . 2011-01-04 09:34 -------- d-----w- c:\programdata\Stardock
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2011-01-04 09:30 . 2011-01-04 09:31 -------- d-----w- c:\program files (x86)\totalcmd
2011-01-03 23:19 . 2009-09-30 03:33 24576 ----a-r- c:\windows\SysWow64\AsIO.dll
2011-01-03 23:19 . 2009-08-04 02:28 13440 ----a-r- c:\windows\SysWow64\drivers\AsIO.sys
2011-01-03 23:19 . 2011-01-03 23:19 -------- d-----w- c:\program files (x86)\ASUS
2011-01-03 23:19 . 2010-01-05 23:39 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-01-03 23:18 . 2011-01-03 23:18 -------- d-----w- c:\program files\Realtek
2011-01-03 23:18 . 2010-07-06 10:31 2624616 ----a-w- c:\windows\system32\RtkAPO64.dll
2011-01-03 23:18 . 2011-01-08 10:13 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-01-03 23:18 . 2011-01-05 15:10 -------- d-----w- c:\program files (x86)\Realtek
2011-01-03 23:18 . 2011-01-05 15:11 -------- d--h--w- c:\program files (x86)\Temp
2011-01-03 23:18 . 2011-01-05 15:10 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2011-01-03 23:16 . 2009-08-23 22:55 16440 ----a-w- c:\windows\system32\drivers\AtiPcie.sys
2011-01-03 23:16 . 2011-01-03 23:16 -------- d-----w- c:\program files (x86)\ATI Technologies
2011-01-03 23:16 . 2011-01-16 10:41 -------- d-sh--w- c:\windows\Installer
2011-01-03 23:15 . 2011-01-16 10:41 -------- d-----w- c:\program files\ATI Technologies
2011-01-03 23:15 . 2011-01-03 23:15 -------- d-----w- c:\program files\ATI
2011-01-03 23:13 . 2011-01-03 15:16 -------- d-----w- c:\users\Laydenka
2011-01-03 23:13 . 2011-01-03 23:13 -------- d-----w- C:\Recovery
2011-01-03 23:06 . 2011-01-03 23:13 -------- d-----w- c:\windows\Panther
2011-01-03 20:36 . 2011-01-03 20:36 -------- d-----w- c:\program files (x86)\QIP 2010
2011-01-03 18:59 . 2011-01-03 18:59 -------- d-----w- c:\windows\Sun
2011-01-03 18:50 . 2011-01-03 18:50 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-01-03 18:50 . 2011-01-03 18:50 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-01-03 18:50 . 2011-01-03 18:50 -------- d-----w- c:\program files (x86)\Java
2011-01-03 18:46 . 2011-01-04 09:32 -------- d-----w- c:\program files (x86)\RocketDock
2011-01-03 16:50 . 2004-03-29 14:23 90112 ----a-w- c:\windows\unvise32.exe
2011-01-03 16:50 . 2011-01-03 16:50 -------- d-----w- c:\program files (x86)\The Logo Creator v5
2011-01-03 16:04 . 2011-01-03 16:04 -------- d-----w- c:\windows\SysWow64\Wat
2011-01-03 16:04 . 2011-01-03 16:04 -------- d-----w- c:\windows\system32\Wat
2011-01-03 16:01 . 2011-01-03 16:01 -------- d-----w- c:\programdata\Avira
2011-01-03 16:01 . 2011-01-03 16:01 -------- d-----w- c:\program files (x86)\Avira
2011-01-03 16:01 . 2010-12-13 16:40 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-01-03 16:01 . 2010-12-13 16:40 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-01-03 15:58 . 2010-10-27 04:32 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-01-03 15:58 . 2010-10-27 05:06 2048 ----a-w- c:\windows\system32\tzres.dll
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\cs
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\cs
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-01-03 15:48 . 2011-01-03 15:48 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2011-01-03 15:38 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2011-01-03 15:38 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2011-01-03 15:27 . 2009-11-25 20:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-12 15:03 . 2011-01-12 15:03 167236 ----a-w- c:\windows\Chytrá angliètina - DEMO Uninstaller.exe
2010-11-26 04:20 . 2010-11-26 04:20 8120320 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-11-26 03:19 . 2010-11-26 03:19 21610496 ----a-w- c:\windows\system32\atio6axx.dll
2010-11-26 03:02 . 2010-02-11 02:48 16702976 ----a-w- c:\windows\SysWow64\atioglxx.dll
2010-11-26 02:58 . 2010-11-26 02:58 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-11-26 02:58 . 2010-11-26 02:58 550400 ----a-w- c:\windows\SysWow64\aticfx32.dll
2010-11-26 02:57 . 2010-02-11 03:08 648704 ----a-w- c:\windows\system32\aticfx64.dll
2010-11-26 02:54 . 2010-11-26 02:54 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-11-26 02:54 . 2010-11-26 02:54 478720 ----a-w- c:\windows\system32\atieclxx.exe
2010-11-26 02:54 . 2010-11-26 02:54 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2010-11-26 02:53 . 2010-11-26 02:53 120320 ----a-w- c:\windows\system32\atitmm64.dll
2010-11-26 02:52 . 2010-11-26 02:52 423424 ----a-w- c:\windows\system32\atipdl64.dll
2010-11-26 02:52 . 2010-02-11 03:03 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2010-11-26 02:52 . 2010-11-26 02:52 16384 ----a-w- c:\windows\system32\atimuixx.dll
2010-11-26 02:52 . 2010-11-26 02:52 59392 ----a-w- c:\windows\system32\atiedu64.dll
2010-11-26 02:52 . 2010-11-26 02:52 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2010-11-26 02:49 . 2010-11-26 02:49 4066816 ----a-w- c:\windows\SysWow64\atidxx32.dll
2010-11-26 02:40 . 2010-02-11 02:52 4794368 ----a-w- c:\windows\system32\atidxx64.dll
2010-11-26 02:30 . 2010-11-26 02:30 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2010-11-26 02:30 . 2010-11-26 02:30 4122624 ----a-w- c:\windows\SysWow64\atiumdag.dll
2010-11-26 02:30 . 2010-11-26 02:30 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2010-11-26 02:30 . 2010-11-26 02:30 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2010-11-26 02:30 . 2010-11-26 02:30 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2010-11-26 02:29 . 2010-11-26 02:29 6815232 ----a-w- c:\windows\system32\aticaldd64.dll
2010-11-26 02:29 . 2010-11-26 02:29 3217408 ----a-w- c:\windows\system32\atiumd6a.dll
2010-11-26 02:28 . 2010-02-11 02:23 5441024 ----a-w- c:\windows\SysWow64\aticaldd.dll
2010-11-26 02:24 . 2010-11-26 02:24 5258240 ----a-w- c:\windows\system32\atiumd64.dll
2010-11-26 02:22 . 2010-11-26 02:22 3460096 ----a-w- c:\windows\SysWow64\atiumdva.dll
2010-11-26 02:17 . 2010-11-26 02:17 351232 ----a-w- c:\windows\system32\atiadlxx.dll
2010-11-26 02:17 . 2010-02-11 02:11 249856 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2010-11-26 02:17 . 2010-11-26 02:17 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-11-26 02:17 . 2010-02-11 02:11 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 31744 ----a-w- c:\windows\system32\atig6txx.dll
2010-11-26 02:16 . 2010-02-11 02:11 27136 ----a-w- c:\windows\SysWow64\atigktxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 289792 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-11-26 02:16 . 2010-02-11 02:10 39936 ----a-w- c:\windows\system32\atiuxp64.dll
2010-11-26 02:15 . 2010-11-26 02:15 30720 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2010-11-26 02:15 . 2010-11-26 02:15 37888 ----a-w- c:\windows\system32\atiu9p64.dll
2010-11-26 02:15 . 2010-11-26 02:15 28672 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2010-11-26 02:15 . 2010-11-26 02:15 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-11-26 02:09 . 2010-11-26 02:09 53760 ----a-w- c:\windows\system32\atimpc64.dll
2010-11-26 02:09 . 2010-11-26 02:09 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2010-11-17 12:04 . 2010-11-17 12:04 115216 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2010-11-02 05:16 . 2011-01-03 15:15 1114624 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 05:10 . 2011-01-03 15:15 285696 ----a-w- c:\windows\system32\schtasks.exe
2010-11-02 04:34 . 2011-01-03 15:15 179712 ----a-w- c:\windows\SysWow64\schtasks.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"BitTorrent DNA"="c:\program files (x86)\DNA\btdna.exe" [2011-01-05 323392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-16 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-16 932288]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2010-12-07 74752]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 98304]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2010-10-10 117248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-03 1255736]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-01-03 834544]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 203776]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-03-22 347680]
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]

.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\combofix\CF190.cfxxe" [X]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-06 11057768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files (x86)\PokerStars.NET\PokerStarsUpdate.exe
FF - ProfilePath - c:\users\Laydenka\AppData\Roaming\Mozilla\Firefox\Profiles\rg8jz4d0.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)


.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
.
**************************************************************************
.
Completion time: 2011-01-17 15:52:36 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-17 14:52

Pre-Run: Volných bajtu: 19 221 565 440
Post-Run: Volných bajtu: 19 740 598 272

- - End Of File - - 7824D437392D20E9A90E48E1DFF66BFF

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  RegLock::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Registry::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "WinampAgent"=-
  "SunJavaUpdateSched"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "combofix"=-

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 11-01-16.04 - Laydenka 17.01.2011 16:08:57.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.3839.2582 [GMT 1:00]
Running from: c:\users\Laydenka\Desktop\ComboFix.exe
Command switches used :: c:\users\Laydenka\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Created from 2010-12-17 to 2011-01-17 )))))))))))))))))))))))))))))))
.

2011-01-17 15:11 . 2011-01-17 15:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-17 14:31 . 2011-01-17 14:32 -------- d-----w- c:\program files\trend micro
2011-01-17 14:31 . 2011-01-17 14:32 -------- d-----w- C:\rsit
2011-01-16 17:17 . 2011-01-16 17:19 -------- d-----w- c:\program files (x86)\Mihov Picture Downloader
2011-01-16 10:43 . 2011-01-16 10:43 -------- d-----w- c:\programdata\ATI
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2011-01-16 10:41 . 2011-01-16 10:41 -------- d-----w- c:\program files (x86)\ATI
2011-01-16 10:37 . 2011-01-16 10:37 -------- d-----w- C:\ATI
2011-01-16 10:29 . 2011-01-16 10:29 -------- d-----w- c:\program files (x86)\Lavalys
2011-01-14 22:26 . 2011-01-14 22:27 -------- d-----w- c:\program files (x86)\PokerStars.NET
2011-01-14 15:32 . 2011-01-14 15:32 -------- d-----w- c:\program files (x86)\AIMP3
2011-01-14 09:32 . 2010-11-16 20:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F3579F1C-3EC6-4DB0-863C-6C8D5C8EAA67}\mpengine.dll
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\ASIO4ALL v2
2011-01-12 16:31 . 2006-06-20 08:56 225280 ----a-w- c:\windows\SysWow64\rewire.dll
2011-01-12 16:31 . 2009-08-02 20:09 1554944 ----a-w- c:\windows\SysWow64\vorbis.acm
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\VstPlugins
2011-01-12 16:31 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\Outsim
2011-01-12 16:30 . 2011-01-12 16:31 -------- d-----w- c:\program files (x86)\Image-Line
2011-01-12 15:03 . 2011-01-12 15:03 167236 ----a-w- c:\windows\Chytrá angliètina - DEMO Uninstaller.exe
2011-01-12 15:03 . 2011-01-12 15:03 -------- d-----w- C:\chytra_anglictina_demo
2011-01-11 11:44 . 2011-01-11 11:44 -------- d-----w- c:\program files (x86)\EuroTalk
2011-01-10 16:03 . 2011-01-10 16:03 737280 ----a-w- c:\windows\iun6002.exe
2011-01-10 16:03 . 2011-01-10 16:03 -------- d-----w- c:\program files (x86)\Codec Pack - All In 1
2011-01-09 22:40 . 2011-01-09 22:40 -------- d-----w- c:\program files (x86)\AnvSoft
2011-01-08 16:14 . 2011-01-08 16:14 -------- d-----w- c:\program files (x86)\aTube Catcher
2011-01-08 10:13 . 2011-01-08 10:13 -------- d-----w- c:\program files (x86)\Ubisoft
2011-01-05 15:59 . 2011-01-05 16:03 -------- d-----w- c:\program files (x86)\ICQ7.2
2011-01-05 15:10 . 2010-05-06 16:34 335192 ----a-w- c:\windows\system32\MaxxAudioAPO30.dll
2011-01-05 14:15 . 2011-01-05 14:15 -------- d-----w- C:\AV_LOGS
2011-01-05 14:14 . 2008-12-26 11:56 21504 ----a-w- c:\windows\system32\drivers\vcsvad.sys
2011-01-05 14:14 . 2011-01-16 14:06 -------- d-----w- c:\program files (x86)\AV Vcs 7.0 GOLD
2011-01-05 14:13 . 2011-01-16 14:07 -------- d-----w- C:\vcs5BGEffects
2011-01-05 14:07 . 2011-01-16 14:07 -------- d-----w- c:\program files (x86)\AV Vcs 6.0 DIAMOND
2011-01-05 11:24 . 2011-01-05 11:24 -------- d-----w- c:\program files (x86)\AIMP2
2011-01-05 10:52 . 2010-01-17 15:18 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2011-01-05 10:52 . 2009-05-29 21:37 205824 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2011-01-05 10:52 . 2009-05-29 21:31 881664 ----a-w- c:\windows\SysWow64\xvidcore.dll
2011-01-05 10:52 . 2008-09-24 18:41 839680 ----a-w- c:\windows\SysWow64\lameACM.acm
2011-01-05 10:52 . 2004-01-25 16:18 217088 ----a-w- c:\windows\SysWow64\yv12vfw.dll
2011-01-05 10:52 . 2010-04-16 18:00 85504 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2011-01-05 10:52 . 2011-01-05 10:54 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2011-01-05 10:39 . 2010-03-22 16:57 347680 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-01-05 10:39 . 2009-12-03 16:27 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-01-05 10:32 . 2011-01-17 14:50 -------- d-----w- c:\program files (x86)\DNA
2011-01-04 18:10 . 2011-01-04 18:10 -------- d-----w- c:\program files\Rainmeter
2011-01-04 12:41 . 2010-03-15 10:31 191488 ----a-w- c:\windows\system32\unrar.dll
2011-01-04 12:41 . 2010-12-27 18:00 92672 ----a-w- c:\windows\system32\ff_vfw.dll
2011-01-04 12:41 . 2011-01-04 12:41 -------- d-----w- c:\program files\KLCP64
2011-01-04 12:37 . 2011-01-04 12:37 -------- d-----w- c:\program files (x86)\Webteh
2011-01-04 12:11 . 2011-01-04 12:11 -------- d-----w- c:\programdata\ashampoo
2011-01-04 12:10 . 2011-01-04 12:10 -------- d-----w- c:\program files (x86)\Ashampoo
2011-01-04 12:06 . 2011-01-04 12:06 -------- d-----w- c:\programdata\Electronic Arts
2011-01-04 12:04 . 2011-01-04 12:06 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2011-01-04 12:04 . 2011-01-04 12:04 -------- d-----w- c:\program files (x86)\Electronic Arts
2011-01-04 11:59 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2011-01-04 11:56 . 2011-01-04 11:56 -------- d-----w- c:\programdata\Solidshield
2011-01-04 10:25 . 2011-01-04 10:25 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2011-01-04 09:53 . 2011-01-04 09:53 -------- d-----w- c:\program files (x86)\Microsoft Works
2011-01-04 09:52 . 2011-01-15 20:55 -------- d-----w- c:\program files (x86)\Microsoft.NET
2011-01-04 09:52 . 2011-01-04 09:52 -------- d-----w- c:\windows\PCHEALTH
2011-01-04 09:48 . 2011-01-04 09:48 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-01-04 09:47 . 2011-01-04 09:54 -------- d-----w- c:\programdata\Microsoft Help
2011-01-04 09:46 . 2011-01-04 09:46 -------- d-----r- C:\MSOCache
2011-01-04 09:45 . 2011-01-04 09:45 -------- d-----w- c:\programdata\Apple Computer
2011-01-04 09:45 . 2010-03-17 20:53 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2011-01-04 09:45 . 2010-03-17 20:53 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2011-01-04 09:45 . 2010-03-17 20:53 180224 ----a-w- c:\windows\SysWow64\QTCF.dll
2011-01-04 09:45 . 2011-01-04 09:46 -------- d-----w- c:\program files (x86)\QuickTime Alternative
2011-01-04 09:34 . 2011-01-04 09:34 -------- d-----w- c:\programdata\Stardock
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2011-01-04 09:30 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2011-01-04 09:30 . 2011-01-04 09:31 -------- d-----w- c:\program files (x86)\totalcmd
2011-01-03 23:19 . 2009-09-30 03:33 24576 ----a-r- c:\windows\SysWow64\AsIO.dll
2011-01-03 23:19 . 2009-08-04 02:28 13440 ----a-r- c:\windows\SysWow64\drivers\AsIO.sys
2011-01-03 23:19 . 2011-01-03 23:19 -------- d-----w- c:\program files (x86)\ASUS
2011-01-03 23:19 . 2010-01-05 23:39 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-01-03 23:18 . 2011-01-03 23:18 -------- d-----w- c:\program files\Realtek
2011-01-03 23:18 . 2010-07-06 10:31 2624616 ----a-w- c:\windows\system32\RtkAPO64.dll
2011-01-03 23:18 . 2011-01-08 10:13 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-01-03 23:18 . 2011-01-05 15:10 -------- d-----w- c:\program files (x86)\Realtek
2011-01-03 23:18 . 2011-01-05 15:11 -------- d--h--w- c:\program files (x86)\Temp
2011-01-03 23:18 . 2011-01-05 15:10 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2011-01-03 23:16 . 2009-08-23 22:55 16440 ----a-w- c:\windows\system32\drivers\AtiPcie.sys
2011-01-03 23:16 . 2011-01-03 23:16 -------- d-----w- c:\program files (x86)\ATI Technologies
2011-01-03 23:16 . 2011-01-16 10:41 -------- d-sh--w- c:\windows\Installer
2011-01-03 23:15 . 2011-01-16 10:41 -------- d-----w- c:\program files\ATI Technologies
2011-01-03 23:15 . 2011-01-03 23:15 -------- d-----w- c:\program files\ATI
2011-01-03 23:13 . 2011-01-03 15:16 -------- d-----w- c:\users\Laydenka
2011-01-03 23:13 . 2011-01-03 23:13 -------- d-----w- C:\Recovery
2011-01-03 23:06 . 2011-01-03 23:13 -------- d-----w- c:\windows\Panther
2011-01-03 20:36 . 2011-01-03 20:36 -------- d-----w- c:\program files (x86)\QIP 2010
2011-01-03 18:59 . 2011-01-03 18:59 -------- d-----w- c:\windows\Sun
2011-01-03 18:50 . 2011-01-03 18:50 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-01-03 18:50 . 2011-01-03 18:50 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-01-03 18:50 . 2011-01-03 18:50 -------- d-----w- c:\program files (x86)\Java
2011-01-03 18:46 . 2011-01-04 09:32 -------- d-----w- c:\program files (x86)\RocketDock
2011-01-03 16:50 . 2004-03-29 14:23 90112 ----a-w- c:\windows\unvise32.exe
2011-01-03 16:50 . 2011-01-03 16:50 -------- d-----w- c:\program files (x86)\The Logo Creator v5
2011-01-03 16:04 . 2011-01-03 16:04 -------- d-----w- c:\windows\SysWow64\Wat
2011-01-03 16:04 . 2011-01-03 16:04 -------- d-----w- c:\windows\system32\Wat
2011-01-03 16:01 . 2011-01-03 16:01 -------- d-----w- c:\programdata\Avira
2011-01-03 16:01 . 2011-01-03 16:01 -------- d-----w- c:\program files (x86)\Avira
2011-01-03 16:01 . 2010-12-13 16:40 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-01-03 16:01 . 2010-12-13 16:40 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-01-03 15:58 . 2010-10-27 04:32 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-01-03 15:58 . 2010-10-27 05:06 2048 ----a-w- c:\windows\system32\tzres.dll
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\cs
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\cs
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-01-03 15:52 . 2011-01-03 15:52 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-01-03 15:48 . 2011-01-03 15:48 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2011-01-03 15:38 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2011-01-03 15:38 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2011-01-03 15:27 . 2009-11-25 20:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-12 15:03 . 2011-01-12 15:03 167236 ----a-w- c:\windows\Chytrá angliètina - DEMO Uninstaller.exe
2010-11-26 04:20 . 2010-11-26 04:20 8120320 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-11-26 03:19 . 2010-11-26 03:19 21610496 ----a-w- c:\windows\system32\atio6axx.dll
2010-11-26 03:02 . 2010-02-11 02:48 16702976 ----a-w- c:\windows\SysWow64\atioglxx.dll
2010-11-26 02:58 . 2010-11-26 02:58 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-11-26 02:58 . 2010-11-26 02:58 550400 ----a-w- c:\windows\SysWow64\aticfx32.dll
2010-11-26 02:57 . 2010-02-11 03:08 648704 ----a-w- c:\windows\system32\aticfx64.dll
2010-11-26 02:54 . 2010-11-26 02:54 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-11-26 02:54 . 2010-11-26 02:54 478720 ----a-w- c:\windows\system32\atieclxx.exe
2010-11-26 02:54 . 2010-11-26 02:54 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2010-11-26 02:53 . 2010-11-26 02:53 120320 ----a-w- c:\windows\system32\atitmm64.dll
2010-11-26 02:52 . 2010-11-26 02:52 423424 ----a-w- c:\windows\system32\atipdl64.dll
2010-11-26 02:52 . 2010-02-11 03:03 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2010-11-26 02:52 . 2010-11-26 02:52 16384 ----a-w- c:\windows\system32\atimuixx.dll
2010-11-26 02:52 . 2010-11-26 02:52 59392 ----a-w- c:\windows\system32\atiedu64.dll
2010-11-26 02:52 . 2010-11-26 02:52 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2010-11-26 02:49 . 2010-11-26 02:49 4066816 ----a-w- c:\windows\SysWow64\atidxx32.dll
2010-11-26 02:40 . 2010-02-11 02:52 4794368 ----a-w- c:\windows\system32\atidxx64.dll
2010-11-26 02:30 . 2010-11-26 02:30 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2010-11-26 02:30 . 2010-11-26 02:30 4122624 ----a-w- c:\windows\SysWow64\atiumdag.dll
2010-11-26 02:30 . 2010-11-26 02:30 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2010-11-26 02:30 . 2010-11-26 02:30 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2010-11-26 02:30 . 2010-11-26 02:30 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2010-11-26 02:29 . 2010-11-26 02:29 6815232 ----a-w- c:\windows\system32\aticaldd64.dll
2010-11-26 02:29 . 2010-11-26 02:29 3217408 ----a-w- c:\windows\system32\atiumd6a.dll
2010-11-26 02:28 . 2010-02-11 02:23 5441024 ----a-w- c:\windows\SysWow64\aticaldd.dll
2010-11-26 02:24 . 2010-11-26 02:24 5258240 ----a-w- c:\windows\system32\atiumd64.dll
2010-11-26 02:22 . 2010-11-26 02:22 3460096 ----a-w- c:\windows\SysWow64\atiumdva.dll
2010-11-26 02:17 . 2010-11-26 02:17 351232 ----a-w- c:\windows\system32\atiadlxx.dll
2010-11-26 02:17 . 2010-02-11 02:11 249856 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2010-11-26 02:17 . 2010-11-26 02:17 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-11-26 02:17 . 2010-02-11 02:11 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 31744 ----a-w- c:\windows\system32\atig6txx.dll
2010-11-26 02:16 . 2010-02-11 02:11 27136 ----a-w- c:\windows\SysWow64\atigktxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 289792 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-11-26 02:16 . 2010-02-11 02:10 39936 ----a-w- c:\windows\system32\atiuxp64.dll
2010-11-26 02:15 . 2010-11-26 02:15 30720 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2010-11-26 02:15 . 2010-11-26 02:15 37888 ----a-w- c:\windows\system32\atiu9p64.dll
2010-11-26 02:15 . 2010-11-26 02:15 28672 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2010-11-26 02:15 . 2010-11-26 02:15 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-11-26 02:09 . 2010-11-26 02:09 53760 ----a-w- c:\windows\system32\atimpc64.dll
2010-11-26 02:09 . 2010-11-26 02:09 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2010-11-17 12:04 . 2010-11-17 12:04 115216 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2010-11-02 05:16 . 2011-01-03 15:15 1114624 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 05:10 . 2011-01-03 15:15 285696 ----a-w- c:\windows\system32\schtasks.exe
2010-11-02 04:34 . 2011-01-03 15:15 179712 ----a-w- c:\windows\SysWow64\schtasks.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-01-17_14.50.22 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 05:10 . 2011-01-17 14:24 28920 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-01-17 14:51 28920 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2011-01-10 08:40 . 2011-01-17 14:22 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-01-10 08:40 . 2011-01-17 14:50 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-01-10 08:40 . 2011-01-17 14:50 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-01-10 08:40 . 2011-01-17 14:22 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-01-10 08:40 . 2011-01-17 14:22 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-10 08:40 . 2011-01-17 14:50 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-03 16:26 . 2011-01-17 14:50 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-01-03 16:26 . 2011-01-17 14:22 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-01-03 16:26 . 2011-01-17 14:22 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-03 16:26 . 2011-01-17 14:50 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-03 23:22 . 2011-01-17 14:51 5594 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2109389996-1612675735-3522100098-1000_UserData.bin
+ 2011-01-17 14:50 . 2011-01-17 14:50 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-07-14 02:36 . 2011-01-17 14:26 623940 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-01-17 14:54 623940 c:\windows\system32\perfh009.dat
+ 2011-01-03 15:55 . 2011-01-17 14:54 631076 c:\windows\system32\perfh005.dat
- 2011-01-03 15:55 . 2011-01-17 14:26 631076 c:\windows\system32\perfh005.dat
- 2009-07-14 02:36 . 2011-01-17 14:26 106316 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2011-01-17 14:54 106316 c:\windows\system32\perfc009.dat
- 2011-01-03 15:55 . 2011-01-17 14:26 121716 c:\windows\system32\perfc005.dat
+ 2011-01-03 15:55 . 2011-01-17 14:54 121716 c:\windows\system32\perfc005.dat
- 2009-07-14 02:34 . 2011-01-17 14:32 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-07-14 02:34 . 2011-01-17 15:00 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"BitTorrent DNA"="c:\program files (x86)\DNA\btdna.exe" [2011-01-05 323392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 98304]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2010-10-10 117248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-03 1255736]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-01-03 834544]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 203776]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-03-22 347680]
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]

.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-06 11057768]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files (x86)\PokerStars.NET\PokerStarsUpdate.exe
FF - ProfilePath - c:\users\Laydenka\AppData\Roaming\Mozilla\Firefox\Profiles\rg8jz4d0.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)


.
Completion time: 2011-01-17 16:12:31
ComboFix-quarantined-files.txt 2011-01-17 15:12
ComboFix2.txt 2011-01-17 14:52

Pre-Run: Volných bajtu: 19 785 850 880
Post-Run: Volných bajtu: 19 734 134 784

- - End Of File - - 8F279D5BA4FB4FC3772AF6DB4F19719F

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Dle logu nemate aktualizovanou Aviru, aktualizujte si ji

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)

• Provedte aktualizaci - treti zalozka
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

vsechno hotovo mbam nasel nakych 13 haveti. Co s nema?

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5538

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

17.1.2011 17:14:59
mbam-log-2011-01-17 (17-14-52).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 292611
Uplynulý èas: 26 minut, 8 sekund

Infikované procesy v pamìti: 0
Infikované moduly v pamìti: 0
Infikované klíèe v registru: 10
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v pamìti:
(Žádné škodlivé položky nebyly zjištìny)

Infikované moduly v pamìti:
(Žádné škodlivé položky nebyly zjištìny)

Infikované klíèe v registru:
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\MyWebSearch.ThirdPartyInstaller (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\MyWebSearch.ThirdPartyInstaller.1 (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Value: f3PopularScreensavers -> No action taken.

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištìny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištìny)

Infikované soubory:
c:\$RECYCLE.BIN\s-1-5-21-2109389996-1612675735-3522100098-1000\$R6LN3MH.exe (Backdoor.Bot) -> No action taken.
c:\Users\Laydenka\Desktop\av.voice.changer.5.0.19.diamond.full.version\keygen by team virility\keygen.exe (RiskWare.Tool.CK) -> No action taken.

Vsechno smazte...

Jak se chova PC

vypada to, ze se to chova dobre kdyby nahodou neco, tak bych se ozvala ) dekuju za rychlou pomoc

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

A pokud nejsou problemy ci dotazy, je to z me strany vse