VIRY.CZ

Zdravím, prosím Vás o kontrolu logu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by maph at 2011-01-23 18:43:26
Microsoft Windows 7 Ultimate
System drive C: has 118 GB (82%) free of 144 GB
Total RAM: 2047 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:43:28, on 23.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hamachi\hamachi-2-ui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\RivaTuner\RivaTuner.exe
C:\Program Files\Opera\opera.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\foobar2000\foobar2000.exe
C:\Program Files\Miranda IM\miranda32.exe
C:\Program Files\Foxit Reader\Foxit Reader.exe
C:\Windows\system32\taskeng.exe
C:\Users\maph\AppData\Local\Opera\Opera\temporary_downloads\RSIT.exe
C:\Program Files\trend micro\maph.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot\SDHelper.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\WORDWI~1\QUICKF~1\PlugIns\IEHelp.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [RivaTuner] "C:\Program Files\RivaTuner\RivaTunerWrapper.exe" /T
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner\RivaTunerWrapper.exe" /S
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_S2EDC.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot\SDHelper.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\Hamachi\hamachi-2.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 6218 bytes

======Scheduled tasks folder======

C:\Windows\tasks\FUQROC.job
C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object - C:\PROGRA~1\WORDWI~1\QUICKF~1\PlugIns\IEHelp.dll [2007-02-16 457216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]
"RivaTuner"=C:\Program Files\RivaTuner\RivaTunerWrapper.exe [2009-08-22 24576]
"RivaTunerStartupDaemon"=C:\Program Files\RivaTuner\RivaTunerWrapper.exe [2009-08-22 24576]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus DX4400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files\PSPad\PSPad.exe" "%1"

======List of files/folders created in the last 1 months======

2011-01-23 18:39:43 ----D---- C:\Program Files\trend micro
2011-01-23 18:39:42 ----D---- C:\rsit
2011-01-23 16:30:36 ----A---- C:\Windows\system32\msonpmon.dll
2011-01-23 16:18:52 ----RASH---- C:\Windows\system32\McxDrivq.dll
2011-01-16 16:07:07 ----D---- C:\Program Files\PSPad
2011-01-15 18:09:58 ----D---- C:\Users\maph\AppData\Roaming\Mp3tag
2011-01-13 21:51:27 ----D---- C:\Program Files\Haali
2011-01-13 15:39:53 ----A---- C:\Windows\system32\odbc32.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\mf.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\DWrite.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\d2d1.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-13 15:39:51 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\FntCache.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-13 15:39:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-13 15:39:51 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 14:34:52 ----D---- C:\Users\maph\AppData\Roaming\EPSON
2011-01-10 17:18:32 ----D---- C:\Program Files\CCleaner
2011-01-09 15:49:20 ----D---- C:\Users\maph\AppData\Roaming\Allstar
2011-01-08 23:33:44 ----A---- C:\Windows\system32\drivers\PnkBstrK.sys
2011-01-08 23:33:03 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-01-08 23:32:12 ----A---- C:\Windows\system32\PnkBstrA.exe
2011-01-08 23:23:15 ----D---- C:\Program Files\GamePark
2011-01-08 23:21:45 ----A---- C:\Windows\game.ini
2011-01-08 23:18:53 ----D---- C:\Program Files\Call of Duty 2
2011-01-06 17:04:08 ----D---- C:\Users\maph\AppData\Roaming\dvdcss
2011-01-02 18:50:00 ----D---- C:\Program Files\Lame MP3
2011-01-02 18:49:05 ----D---- C:\Program Files\misc
2011-01-02 18:49:05 ----D---- C:\Program Files\html
2011-01-02 18:49:05 ----D---- C:\Program Files\ACM
2011-01-02 18:37:49 ----D---- C:\Program Files\CDex
2011-01-02 17:28:24 ----D---- C:\Users\maph\AppData\Roaming\wordwise
2010-12-29 00:10:59 ----A---- C:\Windows\system32\browserchoice.exe
2010-12-26 10:14:38 ----D---- C:\ProgramData\ALM
2010-12-25 22:26:36 ----D---- C:\Windows\cs-CZ
2010-12-25 22:26:32 ----D---- C:\Windows\system32\cs
2010-12-25 22:26:12 ----D---- C:\Windows\system32\XPSViewer
2010-12-25 22:26:10 ----D---- C:\Windows\system32\drivers\cs-CZ
2010-12-25 22:25:52 ----D---- C:\Windows\system32\Wat
2010-12-25 22:09:13 ----D---- C:\Windows\Panther
2010-12-25 19:53:06 ----D---- C:\ProgramData\InstallShield
2010-12-25 18:23:08 ----D---- C:\Users\maph\AppData\Roaming\Foxit Software
2010-12-25 18:07:48 ----D---- C:\Windows\system32\Adobe
2010-12-25 17:09:42 ----A---- C:\Windows\system32\tzres.dll
2010-12-25 16:58:27 ----A---- C:\Windows\system32\msv1_0.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\PresentationHost.exe
2010-12-25 16:56:01 ----A---- C:\Windows\system32\netfxperf.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\mscoree.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\dfshim.dll
2010-12-25 16:51:57 ----D---- C:\Program Files\Microsoft Silverlight
2010-12-25 16:32:08 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-12-25 16:32:04 ----A---- C:\Windows\system32\drivers\ks.sys
2010-12-25 15:59:24 ----D---- C:\Cambridge
2010-12-25 15:58:08 ----D---- C:\Program Files\EGU
2010-12-25 15:51:48 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-12-25 15:51:47 ----A---- C:\Windows\system32\spoolsv.exe
2010-12-25 15:51:47 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-12-25 15:51:41 ----A---- C:\Windows\system32\winlogon.exe
2010-12-25 15:51:41 ----A---- C:\Windows\system32\ir32_32.dll
2010-12-25 15:51:41 ----A---- C:\Windows\system32\iccvid.dll
2010-12-25 15:51:41 ----A---- C:\Windows\explorer.exe
2010-12-25 15:51:40 ----A---- C:\Windows\system32\t2embed.dll
2010-12-25 15:51:32 ----A---- C:\Windows\system32\CPFilters.dll
2010-12-25 15:51:31 ----A---- C:\Windows\system32\psisdecd.dll
2010-12-25 15:51:25 ----A---- C:\Windows\system32\schannel.dll
2010-12-25 15:51:25 ----A---- C:\Windows\system32\msasn1.dll
2010-12-25 15:51:23 ----A---- C:\Windows\system32\lsasrv.dll
2010-12-25 15:51:23 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-12-25 15:51:21 ----A---- C:\Windows\system32\inetcomm.dll
2010-12-25 15:51:20 ----A---- C:\Windows\system32\ntdll.dll
2010-12-25 15:51:18 ----A---- C:\Windows\system32\CertEnroll.dll
2010-12-25 15:51:17 ----A---- C:\Windows\system32\winresume.exe
2010-12-25 15:51:17 ----A---- C:\Windows\system32\winload.exe
2010-12-25 15:51:09 ----A---- C:\Windows\system32\asycfilt.dll
2010-12-25 15:51:07 ----A---- C:\Windows\system32\ROBOEX32.DLL
2010-12-25 15:51:07 ----A---- C:\Windows\system32\Inetwh32.dll
2010-12-25 15:51:07 ----A---- C:\Windows\system32\comctl32.dll
2010-12-25 15:51:06 ----A---- C:\Windows\system32\vbar332.dll
2010-12-25 15:51:05 ----A---- C:\Windows\system32\mfc40u.dll
2010-12-25 15:51:05 ----A---- C:\Windows\system32\mfc40.dll
2010-12-25 15:51:00 ----A---- C:\Windows\system32\wmp.dll
2010-12-25 15:50:59 ----A---- C:\Windows\system32\wmploc.DLL
2010-12-25 15:50:58 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-12-25 15:50:56 ----A---- C:\Windows\system32\kernel32.dll
2010-12-25 15:50:56 ----A---- C:\Windows\system32\apphelp.dll
2010-12-25 15:50:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-12-25 15:50:54 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-12-25 15:50:53 ----A---- C:\Windows\system32\ole32.dll
2010-12-25 15:49:06 ----A---- C:\Windows\system32\mshtml.dll
2010-12-25 15:49:06 ----A---- C:\Windows\system32\iertutil.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\wininet.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\urlmon.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\mstime.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\iepeers.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\ieframe.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-25 15:49:04 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\ieui.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskschd.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskeng.exe
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\schtasks.exe
2010-12-25 15:49:03 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-25 15:48:41 ----A---- C:\Windows\system32\msxml3.dll
2010-12-25 15:47:49 ----A---- C:\Windows\system32\jscript.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\fontsub.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\atmlib.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\atmfd.dll
2010-12-25 15:47:18 ----D---- C:\ProgramData\EPSON
2010-12-25 15:46:54 ----A---- C:\Windows\system32\shell32.dll
2010-12-25 15:46:45 ----A---- C:\Windows\system32\srvsvc.dll
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srv.sys
2010-12-25 15:46:44 ----A---- C:\Windows\system32\wmpmde.dll
2010-12-25 15:46:39 ----A---- C:\Windows\system32\consent.exe
2010-12-25 15:46:38 ----A---- C:\Windows\system32\secproc_isv.dll
2010-12-25 15:46:38 ----A---- C:\Windows\system32\secproc.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate.exe
2010-12-25 15:46:36 ----A---- C:\Windows\system32\vbscript.dll
2010-12-25 15:46:36 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-12-25 15:46:35 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-12-25 15:46:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-12-25 15:46:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-12-25 15:46:12 ----A---- C:\Windows\system32\E_DCINST.DLL
2010-12-25 15:46:10 ----A---- C:\Windows\system32\E_FLBCAE.DLL
2010-12-25 15:46:09 ----A---- C:\Windows\system32\E_FD4BCAE.DLL
2010-12-25 15:45:40 ----A---- C:\Windows\system32\tsbyuv.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\quartz.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msyuv.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msvidc32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msrle32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\mciavi32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\iyuv_32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\avifil32.dll
2010-12-25 15:45:28 ----D---- C:\Program Files\epson
2010-12-25 15:45:27 ----A---- C:\Windows\system32\eswiaml.dll
2010-12-25 15:45:27 ----A---- C:\Windows\system32\eswia7e.dll
2010-12-25 15:45:27 ----A---- C:\Windows\system32\esint7e.dll
2010-12-25 15:45:12 ----A---- C:\Windows\system32\webio.dll
2010-12-25 15:37:29 ----A---- C:\Windows\system32\rtutils.dll
2010-12-25 15:37:27 ----A---- C:\Windows\system32\oleaut32.dll
2010-12-25 15:37:26 ----A---- C:\Windows\system32\win32k.sys
2010-12-25 15:35:15 ----D---- C:\Program Files\WordWise Dictionary
2010-12-25 15:34:11 ----A---- C:\Windows\system32\wintrust.dll
2010-12-25 15:34:11 ----A---- C:\Windows\system32\cabview.dll
2010-12-25 15:33:51 ----D---- C:\Program Files\RivaTuner
2010-12-25 15:31:10 ----D---- C:\Program Files\Microsoft Security Client
2010-12-25 15:31:01 ----A---- C:\Windows\system32\drivers\netio.sys
2010-12-25 14:40:28 ----D---- C:\Program Files\Common Files\Lingea Shared
2010-12-25 14:40:23 ----D---- C:\Program Files\Pravidla CZ
2010-12-25 14:28:02 ----D---- C:\Users\maph\AppData\Roaming\Media Player Classic
2010-12-25 14:27:31 ----D---- C:\Users\maph\AppData\Roaming\vlc
2010-12-25 14:16:31 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-12-25 14:15:43 ----D---- C:\Program Files\Foxit Reader
2010-12-25 14:14:57 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xinput1_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-12-25 14:12:04 ----RASH---- C:\MSDOS.SYS
2010-12-25 14:12:04 ----RASH---- C:\IO.SYS
2010-12-25 14:10:10 ----D---- C:\Program Files\foobar2000
2010-12-25 13:59:04 ----D---- C:\Program Files\Adobe Media Player
2010-12-25 13:58:11 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-12-25 13:58:10 ----D---- C:\Program Files\Adobe
2010-12-25 13:57:44 ----D---- C:\ProgramData\Adobe
2010-12-25 13:56:57 ----D---- C:\Program Files\Common Files\Adobe
2010-12-25 13:55:32 ----D---- C:\Users\maph\AppData\Roaming\Macromedia
2010-12-25 13:55:29 ----D---- C:\Users\maph\AppData\Roaming\Adobe
2010-12-25 13:51:54 ----D---- C:\Program Files\Miranda IM
2010-12-25 13:48:28 ----D---- C:\Program Files\Microsoft Works
2010-12-25 13:48:20 ----D---- C:\Program Files\Microsoft Visual Studio
2010-12-25 13:48:20 ----D---- C:\Program Files\Common Files\DESIGNER
2010-12-25 13:48:14 ----D---- C:\Windows\PCHEALTH
2010-12-25 13:48:14 ----D---- C:\Program Files\Microsoft.NET
2010-12-25 13:46:53 ----D---- C:\ProgramData\Microsoft Help
2010-12-25 13:46:53 ----D---- C:\Program Files\Microsoft Office
2010-12-25 13:45:52 ----RHD---- C:\MSOCache
2010-12-25 13:41:28 ----D---- C:\Program Files\uTorrent
2010-12-25 13:40:45 ----D---- C:\Users\maph\AppData\Roaming\uTorrent
2010-12-25 13:40:27 ----D---- C:\Program Files\VLC
2010-12-25 13:39:30 ----D---- C:\Users\maph\AppData\Roaming\Mozilla
2010-12-25 13:39:29 ----D---- C:\Users\maph\AppData\Roaming\Thunderbird
2010-12-25 13:39:25 ----D---- C:\Program Files\Mozilla Thunderbird
2010-12-25 13:38:31 ----D---- C:\Program Files\TS3
2010-12-25 13:38:00 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-12-25 13:38:00 ----D---- C:\Program Files\Spybot
2010-12-25 13:36:16 ----RD---- C:\Program Files\Skype
2010-12-25 13:36:16 ----D---- C:\Users\maph\AppData\Roaming\Skype
2010-12-25 13:36:16 ----D---- C:\Program Files\Common Files\Skype
2010-12-25 13:36:00 ----D---- C:\Users\maph\AppData\Roaming\PC Suite
2010-12-25 13:35:59 ----D---- C:\Users\maph\AppData\Roaming\Nokia
2010-12-25 13:35:59 ----D---- C:\ProgramData\PC Suite
2010-12-25 13:35:52 ----D---- C:\Program Files\Common Files\PCSuite
2010-12-25 13:35:51 ----D---- C:\Program Files\Common Files\Nokia
2010-12-25 13:35:45 ----D---- C:\Program Files\DIFX
2010-12-25 13:35:44 ----A---- C:\Windows\system32\drivers\pccsmcfd.sys
2010-12-25 13:35:43 ----DC---- C:\Windows\system32\DRVSTORE
2010-12-25 13:35:39 ----D---- C:\Program Files\PC Connectivity Solution
2010-12-25 13:35:27 ----D---- C:\ProgramData\Skype
2010-12-25 13:35:26 ----A---- C:\Windows\system32\nmwcdcls.dll
2010-12-25 13:35:25 ----D---- C:\Program Files\Nokia
2010-12-25 13:35:17 ----N---- C:\Windows\system32\MpSigStub.exe
2010-12-25 13:35:17 ----D---- C:\Program Files\Total Commander
2010-12-25 13:35:17 ----A---- C:\Windows\UC.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\RAR.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\PKZIP.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\PKUNZIP.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\NOCLOSE.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\LHA.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\ARJ.PIF
2010-12-25 13:34:10 ----D---- C:\ProgramData\Installations
2010-12-25 13:33:55 ----D---- C:\Program Files\MPC HC
2010-12-25 13:33:07 ----D---- C:\Program Files\Mp3Tag
2010-12-25 13:32:35 ----D---- C:\Windows\system32\Macromed
2010-12-25 13:32:34 ----D---- C:\Program Files\iRiver Plus3
2010-12-25 13:31:42 ----D---- C:\Users\maph\AppData\Roaming\Opera
2010-12-25 13:31:40 ----D---- C:\Program Files\Opera
2010-12-25 13:30:11 ----D---- C:\Program Files\SpeedFan
2010-12-25 13:28:31 ----D---- C:\Program Files\Hamachi
2010-12-25 13:27:38 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-12-25 13:27:38 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-12-25 13:27:23 ----D---- C:\Program Files\DAEMON Tools Lite
2010-12-25 13:26:58 ----D---- C:\Users\maph\AppData\Roaming\DAEMON Tools Lite
2010-12-25 13:26:56 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-12-25 13:26:51 ----D---- C:\ProgramData\ashampoo
2010-12-25 13:26:48 ----D---- C:\Program Files\Ashampoo BS6
2010-12-25 13:25:27 ----D---- C:\ProgramData\ConeXware
2010-12-25 13:25:11 ----D---- C:\Program Files\PatchBeam
2010-12-25 13:25:09 ----D---- C:\Program Files\PowerArchiver
2010-12-25 13:24:09 ----N---- C:\Windows\system32\adi_oal.dll
2010-12-25 13:24:09 ----D---- C:\Program Files\Creative
2010-12-25 13:24:09 ----A---- C:\Windows\system32\wrap_oal.dll
2010-12-25 13:24:09 ----A---- C:\Windows\system32\OpenAL32.dll
2010-12-25 13:23:58 ----D---- C:\Program Files\Common Files\InstallShield
2010-12-25 13:23:51 ----D---- C:\ProgramData\SonicFocus
2010-12-25 13:23:45 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-25 13:23:45 ----D---- C:\Program Files\Analog Devices
2010-12-25 13:23:31 ----D---- C:\Users\maph\AppData\Roaming\InstallShield
2010-12-25 13:23:30 ----A---- C:\Windows\Language_trs.ini
2010-12-25 13:22:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-25 13:22:04 ----D---- C:\ProgramData\NVIDIA
2010-12-25 13:21:49 ----SHD---- C:\Windows\Installer
2010-12-25 13:21:42 ----D---- C:\ProgramData\NVIDIA Corporation
2010-12-25 13:21:32 ----A---- C:\Windows\system32\OpenCL.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvoglv32.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvgenco322030.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvdispco322050.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvd3dum.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuvid.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuda.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcompiler.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvapi.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-12-25 13:21:07 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-25 13:20:55 ----D---- C:\Program Files\nVidia
2010-12-25 13:18:10 ----D---- C:\Users\maph\AppData\Roaming\Identities
2010-12-25 13:18:01 ----SD---- C:\Users\maph\AppData\Roaming\Microsoft
2010-12-25 13:18:01 ----D---- C:\Users\maph\AppData\Roaming\Media Center Programs
2010-12-25 13:17:49 ----SHD---- C:\Recovery
2010-12-25 13:13:18 ----D---- C:\Windows\SoftwareDistribution
2010-12-25 13:11:09 ----D---- C:\Windows\Prefetch
2010-12-25 13:10:33 ----SHD---- C:\System Volume Information
2010-12-25 13:10:33 ----ASH---- C:\pagefile.sys
2010-12-25 13:10:33 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2011-01-23 18:41:15 ----D---- C:\Windows
2011-01-23 18:39:43 ----RD---- C:\Program Files
2011-01-23 17:01:03 ----D---- C:\Windows\system32\Tasks
2011-01-23 17:01:02 ----D---- C:\Windows\Tasks
2011-01-23 16:36:12 ----D---- C:\Windows\System32
2011-01-23 16:36:12 ----D---- C:\Windows\inf
2011-01-23 16:31:06 ----D---- C:\Windows\Temp
2011-01-23 16:30:39 ----RSD---- C:\Windows\assembly
2011-01-23 16:30:15 ----RSD---- C:\Windows\Fonts
2011-01-23 16:29:31 ----A---- C:\Windows\win.ini
2011-01-23 16:29:30 ----D---- C:\Program Files\Common Files\System
2011-01-23 08:53:32 ----D---- C:\Windows\system32\config
2011-01-22 19:13:55 ----D---- C:\Windows\system32\drivers
2011-01-22 19:13:53 ----D---- C:\Windows\system32\drivers\UMDF
2011-01-21 14:22:10 ----D---- C:\Windows\system32\catroot2
2011-01-13 21:46:12 ----D---- C:\Windows\winsxs
2011-01-13 15:39:45 ----D---- C:\Windows\system32\catroot
2011-01-10 17:20:21 ----D---- C:\Windows\debug
2011-01-08 23:32:13 ----D---- C:\Windows\system32\LogFiles
2011-01-05 15:57:58 ----D---- C:\Windows\system32\wdi
2011-01-01 19:02:44 ----D---- C:\Windows\LiveKernelReports
2011-01-01 11:50:27 ----D---- C:\Windows\Microsoft.NET
2010-12-31 21:20:44 ----D---- C:\Windows\system32\en-US
2010-12-31 15:26:22 ----D---- C:\Windows\rescache
2010-12-31 00:21:17 ----D---- C:\Windows\system32\cs-CZ
2010-12-29 11:22:44 ----D---- C:\Windows\system32\NDF
2010-12-28 10:38:36 ----A---- C:\Windows\system32\user32.dll
2010-12-26 17:17:02 ----D---- C:\Windows\Logs
2010-12-26 10:14:38 ----HD---- C:\ProgramData
2010-12-25 22:34:01 ----D---- C:\Windows\AppPatch
2010-12-25 22:30:34 ----D---- C:\Windows\Downloaded Program Files
2010-12-25 22:26:53 ----D---- C:\Program Files\Windows Mail
2010-12-25 22:26:52 ----D---- C:\Windows\system32\migration
2010-12-25 22:26:52 ----D---- C:\Program Files\Internet Explorer
2010-12-25 22:26:50 ----D---- C:\Windows\system32\Boot
2010-12-25 22:26:45 ----D---- C:\Program Files\Windows Media Player
2010-12-25 22:26:41 ----D---- C:\Program Files\Windows Sidebar
2010-12-25 22:26:40 ----D---- C:\Program Files\DVD Maker
2010-12-25 22:26:39 ----D---- C:\Windows\servicing
2010-12-25 22:26:39 ----D---- C:\Program Files\Windows Photo Viewer
2010-12-25 22:26:39 ----D---- C:\Program Files\Windows Defender
2010-12-25 22:26:36 ----D---- C:\Windows\IME
2010-12-25 22:26:33 ----D---- C:\Windows\system32\winrm
2010-12-25 22:26:33 ----D---- C:\Windows\system32\oobe
2010-12-25 22:26:33 ----D---- C:\Windows\system32\migwiz
2010-12-25 22:26:33 ----D---- C:\Windows\PolicyDefinitions
2010-12-25 22:26:32 ----D---- C:\Windows\system32\sysprep
2010-12-25 22:26:32 ----D---- C:\Windows\system32\slmgr
2010-12-25 22:26:10 ----D---- C:\Windows\system32\WCN
2010-12-25 22:26:10 ----D---- C:\Windows\system32\MUI
2010-12-25 22:26:10 ----D---- C:\Windows\system32\Dism
2010-12-25 22:26:06 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2010-12-25 22:26:06 ----D---- C:\Windows\system32\DriverStore
2010-12-25 22:26:04 ----D---- C:\Windows\system32\wbem
2010-12-25 22:26:04 ----D---- C:\Windows\system32\com
2010-12-25 16:52:15 ----SD---- C:\ProgramData\Microsoft
2010-12-25 15:45:27 ----D---- C:\Windows\twain_32
2010-12-25 15:20:07 ----D---- C:\Windows\ShellNew
2010-12-25 14:40:28 ----D---- C:\Program Files\Common Files
2010-12-25 13:52:42 ----D---- C:\Program Files\Common Files\microsoft shared
2010-12-25 13:25:58 ----D---- C:\Windows\system32\CodeIntegrity
2010-12-25 13:23:36 ----D---- C:\Windows\system32\restore
2010-12-25 13:22:00 ----D---- C:\Windows\Help
2010-12-25 13:18:09 ----SHD---- C:\$Recycle.Bin
2010-12-25 13:17:58 ----RD---- C:\Users
2010-12-25 13:17:49 ----D---- C:\Windows\system32\Recovery
2010-12-25 13:11:05 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-25 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 Razerlow;Razerlow USB Filter Driver; C:\Windows\System32\Drivers\Razerlow.sys [2005-04-24 13225]
R3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner\RivaTuner32.sys [2009-08-22 9088]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S1 MpKslf1c17e14;MpKslf1c17e14; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D0538AE8-9E59-4AF6-91DA-8628AC38C976}\MpKslf1c17e14.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 aikzmavx;aikzmavx; C:\Windows\system32\drivers\aikzmavx.sys []
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\Hamachi\hamachi-2.exe [2010-12-06 1238408]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 600680]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-01-08 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2011-01-09 214520]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]
S4 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]

-----------------EOF-----------------

Zdravim a pekny vecer preji

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Postupuji podle návodu, ale nemůžu ukončit rezidentní štít Microsoft Security Essentials, protože nelze spustit (=při poklikání na ikonku počítač nic nespustí)

Nechte jej tedy bezet...

ComboFix 11-01-22.03 - maph 23.01.2011 19:16:15.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.2047.1467 [GMT 1:00]
Spuštěný z: c:\users\maph\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\maph\AppData\Local\Temp\sfamcc00001.dll
c:\users\maph\AppData\Local\Temp\sfareca00001.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-23 do 2011-01-23 )))))))))))))))))))))))))))))))
.

2011-01-23 18:20 . 2011-01-23 18:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-23 17:39 . 2011-01-23 17:43 -------- d-----w- c:\program files\trend micro
2011-01-23 17:39 . 2011-01-23 17:43 -------- d-----w- C:\rsit
2011-01-23 15:30 . 2008-11-10 10:41 32656 ----a-w- c:\windows\system32\msonpmon.dll
2011-01-23 15:30 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2011-01-23 15:18 . 2011-01-23 15:18 79360 --sha-r- c:\windows\system32\McxDrivq.dll
2011-01-23 07:43 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{FB230388-E63B-4FC6-9791-784EE01F6E8E}\mpengine.dll
2011-01-16 15:07 . 2011-01-16 15:32 -------- d-----w- c:\program files\PSPad
2011-01-13 20:51 . 2011-01-13 20:51 -------- d-----w- c:\program files\Haali
2011-01-10 16:18 . 2011-01-10 16:18 -------- d-----w- c:\program files\CCleaner
2011-01-08 22:33 . 2011-01-09 18:44 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-08 22:33 . 2011-01-09 18:44 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-08 22:32 . 2011-01-09 18:44 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-08 22:32 . 2011-01-08 22:32 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-08 22:23 . 2011-01-08 22:23 -------- d-----w- c:\program files\GamePark
2011-01-08 22:18 . 2011-01-09 19:06 -------- d-----w- c:\program files\Call of Duty 2
2011-01-02 17:50 . 2011-01-02 17:50 -------- d-----w- c:\program files\Lame MP3
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\misc
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\html
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\ACM
2011-01-02 17:37 . 2011-01-02 17:38 -------- d-----w- c:\program files\CDex
2010-12-28 23:10 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-12-26 23:05 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-12-26 09:14 . 2010-12-26 09:14 -------- d-----w- c:\programdata\ALM
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\cs
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\XPSViewer
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2010-12-25 21:25 . 2010-12-25 21:25 -------- d-----w- c:\windows\system32\Wat
2010-12-25 21:09 . 2010-12-25 12:17 -------- d-----w- c:\windows\Panther
2010-12-25 18:53 . 2010-12-25 18:53 -------- d-----w- c:\programdata\InstallShield
2010-12-25 17:07 . 2010-12-25 17:08 -------- d-----w- c:\windows\system32\Adobe
2010-12-25 16:09 . 2010-10-27 04:32 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-25 15:58 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2010-12-25 15:56 . 2009-11-25 11:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-12-25 15:56 . 2009-11-25 11:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-12-25 15:56 . 2009-11-25 11:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-12-25 15:56 . 2009-11-25 11:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-12-25 15:56 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-12-25 15:51 . 2010-12-31 09:23 -------- d-----w- c:\program files\Microsoft Silverlight
2010-12-25 15:34 . 2009-07-13 17:43 3584 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\cs-CZ\LXKPTPRC.DLL.mui
2010-12-25 15:32 . 2009-10-10 02:57 12800 ----a-w- c:\windows\system32\drivers\sffp_sd.sys
2010-12-25 15:32 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2010-12-25 14:59 . 2010-12-25 14:59 -------- d-----w- C:\Cambridge
2010-12-25 14:58 . 1999-02-08 00:00 326656 ----a-w- c:\windows\system32\temp.00B
2010-12-25 14:58 . 2000-08-20 20:00 1388544 ----a-w- c:\windows\system32\temp.00A
2010-12-25 14:58 . 2000-04-11 23:00 598288 ----a-w- c:\windows\system32\temp.006
2010-12-25 14:58 . 1999-06-02 23:00 17920 ----a-w- c:\windows\system32\temp.009
2010-12-25 14:58 . 1999-03-07 23:00 164112 ----a-w- c:\windows\system32\temp.007
2010-12-25 14:58 . 1999-03-07 23:00 147728 ----a-w- c:\windows\system32\temp.008
2010-12-25 14:58 . 2010-12-25 14:59 -------- d-----w- c:\program files\EGU
2010-12-25 14:50 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2010-12-25 14:50 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2010-12-25 14:50 . 2009-12-08 11:32 292864 ----a-w- c:\windows\system32\apphelp.dll
2010-12-25 14:50 . 2010-06-19 06:33 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-25 14:50 . 2010-06-19 06:33 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-25 14:50 . 2010-06-29 05:02 1413632 ----a-w- c:\windows\system32\ole32.dll
2010-12-25 14:50 . 2010-06-29 04:57 4247040 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2010-12-25 14:48 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2010-12-25 14:47 . 2010-10-20 04:54 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-12-25 14:47 . 2010-10-20 02:58 294400 ----a-w- c:\windows\system32\atmfd.dll
2010-12-25 14:47 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-12-25 14:47 . 2010-12-25 14:47 -------- d-----w- c:\programdata\EPSON
2010-12-25 14:45 . 2009-12-19 09:02 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2010-12-25 14:45 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-12-25 14:45 . 2009-12-19 09:02 22016 ----a-w- c:\windows\system32\msyuv.dll
2010-12-25 14:45 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-12-25 14:45 . 2009-12-19 09:02 13312 ----a-w- c:\windows\system32\msrle32.dll
2010-12-25 14:45 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-12-25 14:45 . 2009-12-19 09:02 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2010-12-25 14:45 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-12-25 14:45 . 2010-12-25 14:45 -------- d-----w- c:\program files\epson
2010-12-25 14:45 . 2006-12-27 23:00 66560 ----a-w- c:\windows\system32\eswia7e.dll
2010-12-25 14:45 . 2006-12-27 23:00 208896 ----a-w- c:\windows\system32\esint7e.dll
2010-12-25 14:45 . 2006-03-09 23:00 3584 ----a-w- c:\windows\system32\eswiaml.dll
2010-12-25 14:45 . 2010-10-16 04:36 314368 ----a-w- c:\windows\system32\webio.dll
2010-12-25 14:37 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2010-12-25 14:37 . 2010-04-07 07:10 571904 ----a-w- c:\windows\system32\oleaut32.dll
2010-12-25 14:37 . 2010-10-20 03:00 2327552 ----a-w- c:\windows\system32\win32k.sys
2010-12-25 14:35 . 2010-12-25 14:35 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6706C873-32BA-443F-956E-DBEFEA9EE67D}\gapaengine.dll
2010-12-25 14:35 . 2010-12-25 14:40 -------- d-----w- c:\program files\WordWise Dictionary
2010-12-25 14:34 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2010-12-25 14:34 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-12-25 14:33 . 2010-12-25 14:34 -------- d-----w- c:\program files\RivaTuner
2010-12-25 14:31 . 2010-12-25 14:31 -------- d-----w- c:\program files\Microsoft Security Client
2010-12-25 14:31 . 2010-04-09 07:24 240008 ----a-w- c:\windows\system32\drivers\netio.sys
2010-12-25 13:40 . 2010-12-25 13:40 -------- d-----w- c:\program files\Common Files\Lingea Shared
2010-12-25 13:40 . 2010-12-25 13:40 -------- d-----w- c:\program files\Pravidla CZ
2010-12-25 13:16 . 2010-12-26 09:15 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-12-25 13:15 . 2011-01-16 13:52 -------- d-----w- c:\program files\Foxit Reader
2010-12-25 13:10 . 2011-01-23 17:53 -------- d-----w- c:\program files\foobar2000
2010-12-25 12:59 . 2010-12-25 12:59 -------- d-----w- c:\program files\Adobe Media Player
2010-12-25 12:58 . 2010-12-25 12:58 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-12-25 12:56 . 2010-12-26 09:15 -------- d-----w- c:\program files\Common Files\Adobe
2010-12-25 12:51 . 2010-12-25 12:52 -------- d-----w- c:\program files\Miranda IM
2010-12-25 12:48 . 2010-12-25 12:52 -------- d-----w- c:\program files\Microsoft Works
2010-12-25 12:48 . 2010-12-31 20:20 -------- d-----w- c:\program files\Microsoft.NET
2010-12-25 12:48 . 2010-12-25 12:48 -------- d-----w- c:\windows\PCHEALTH
2010-12-25 12:46 . 2011-01-23 15:30 -------- d-----w- c:\programdata\Microsoft Help
2010-12-25 12:45 . 2010-12-25 12:45 -------- d-----r- C:\MSOCache
2010-12-25 12:41 . 2010-12-25 13:09 -------- d-----w- c:\program files\uTorrent
2010-12-25 12:40 . 2010-12-25 12:40 -------- d-----w- c:\program files\VLC
2010-12-25 12:39 . 2010-12-25 12:39 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-12-25 12:38 . 2010-12-25 12:38 -------- d-----w- c:\program files\TS3
2010-12-25 12:38 . 2011-01-23 17:53 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-12-25 12:38 . 2011-01-23 17:50 -------- d-----w- c:\program files\Spybot
2010-12-25 12:36 . 2010-12-25 12:36 -------- d-----r- c:\program files\Skype
2010-12-25 12:36 . 2010-12-25 12:36 -------- d-----w- c:\program files\Common Files\Skype
2010-12-25 12:34 . 2010-12-25 12:34 -------- d-----w- c:\programdata\Installations
2010-12-25 12:33 . 2010-12-25 12:33 -------- d-----w- c:\program files\MPC HC
2010-12-25 12:33 . 2010-12-25 12:33 -------- d-----w- c:\program files\Mp3Tag
2010-12-25 12:32 . 2010-12-25 12:32 -------- d-----w- c:\windows\system32\Macromed
2010-12-25 12:32 . 2010-12-25 12:32 -------- d-----w- c:\program files\iRiver Plus3
2010-12-25 12:31 . 2010-12-25 12:31 -------- d-----w- c:\program files\Opera
2010-12-25 12:30 . 2011-01-23 18:22 -------- d-----w- c:\program files\SpeedFan
2010-12-25 12:28 . 2010-12-25 12:28 -------- d-----w- c:\program files\Hamachi
2010-12-25 12:27 . 2010-12-25 12:27 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-12-25 12:27 . 2010-12-25 12:27 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-25 12:27 . 2010-12-25 12:27 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-12-25 12:26 . 2010-12-25 12:27 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-12-25 12:26 . 2010-12-25 12:26 -------- d-----w- c:\programdata\ashampoo
2010-12-25 12:26 . 2010-12-25 12:26 -------- d-----w- c:\program files\Ashampoo BS6
2010-12-25 12:25 . 2010-12-25 12:25 -------- d-----w- c:\programdata\ConeXware

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-28 09:38 . 2009-07-13 23:24 811520 ----a-w- c:\windows\system32\user32.dll
2010-11-02 04:39 . 2010-12-25 14:49 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2010-12-25 14:49 179712 ----a-w- c:\windows\system32\schtasks.exe
2010-10-27 15:25 . 2010-10-27 15:25 1312120 ----a-w- c:\windows\system32\WBOCX.OCX
.

------- Sigcheck -------

[-] 2010-12-28 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll
[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
"RivaTuner"="c:\program files\RivaTuner\RivaTunerWrapper.exe" [2009-08-22 24576]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner\RivaTunerWrapper.exe" [2009-08-22 24576]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
SpeedFan.lnk - c:\program files\SpeedFan\speedfan.exe [2010-11-3 4360896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

R1 MpKslf1c17e14;MpKslf1c17e14;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D0538AE8-9E59-4AF6-91DA-8628AC38C976}\MpKslf1c17e14.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-25 691696]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\Hamachi\hamachi-2.exe [2010-12-06 1238408]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
S3 Razerlow;Razerlow USB Filter Driver;c:\windows\system32\Drivers\Razerlow.sys [2005-04-24 13225]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
.
------- Asociace souborů -------
.
txtfile="c:\program files\PSPad\PSPad.exe" "%1"
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3044)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AUDIODG.EXE
c:\program files\NVIDIA Corporation\Display\NvXDSync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\windows\system32\taskhost.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-01-23 19:24:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-23 18:24

Před spuštěním: Volných bajtů: 124 228 648 960
Po spuštění: Volných bajtů: 124 088 647 680

- - End Of File - - 043C80B3C3EBA0A377C69F41E2CD9512

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Collect::
  C:\Windows\tasks\FUQROC.job
  C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
  C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
  
  Restore::
  c:\windows\System32\user32.dll
  
  File::
  c:\windows\system32\temp.00B
  c:\windows\system32\temp.00A
  c:\windows\system32\temp.006
  c:\windows\system32\temp.009
  c:\windows\system32\temp.007
  c:\windows\system32\temp.008
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "PC Suite Tray"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{32099AAC-C132-4136-9E9A-4E364A424E17}"=-
  
  Folder::
  C:\Program Files\DAEMON Tools Toolbar
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 11-01-22.03 - maph 23.01.2011 20:15:39.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.2047.1385 [GMT 1:00]
Spuštěný z: c:\users\maph\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\maph\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\system32\temp.006"
"c:\windows\system32\temp.007"
"c:\windows\system32\temp.008"
"c:\windows\system32\temp.009"
"c:\windows\system32\temp.00A"
"c:\windows\system32\temp.00B"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\program files\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files\DAEMON Tools Toolbar\Resources\about.ico
c:\program files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files\DAEMON Tools Toolbar\Resources\accept.ico
c:\program files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.png
c:\program files\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_download.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_home.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_lite.ico
c:\program files\DAEMON Tools Toolbar\Resources\astroburn_site.ico
c:\program files\DAEMON Tools Toolbar\Resources\astroLite_16.ico
c:\program files\DAEMON Tools Toolbar\Resources\az.ico
c:\program files\DAEMON Tools Toolbar\Resources\b1.png
c:\program files\DAEMON Tools Toolbar\Resources\burn_files.ico
c:\program files\DAEMON Tools Toolbar\Resources\burn_image.ico
c:\program files\DAEMON Tools Toolbar\Resources\burn_imgs.ico
c:\program files\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files\DAEMON Tools Toolbar\Resources\d.ico
c:\program files\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
c:\program files\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
c:\program files\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
c:\program files\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
c:\program files\DAEMON Tools Toolbar\Resources\download.ico
c:\program files\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt-home.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_about.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_download.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_faq.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_line.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_lite.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_manual.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_pro.ico
c:\program files\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files\DAEMON Tools Toolbar\Resources\dtt16.ico
c:\program files\DAEMON Tools Toolbar\Resources\dtt32.ico
c:\program files\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files\DAEMON Tools Toolbar\Resources\faq.ico
c:\program files\DAEMON Tools Toolbar\Resources\favicon.ico
c:\program files\DAEMON Tools Toolbar\Resources\features.ico
c:\program files\DAEMON Tools Toolbar\Resources\feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameS.ico
c:\program files\DAEMON Tools Toolbar\Resources\games_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\games_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameSA.ico
c:\program files\DAEMON Tools Toolbar\Resources\gct16.ico
c:\program files\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files\DAEMON Tools Toolbar\Resources\help.ico
c:\program files\DAEMON Tools Toolbar\Resources\hide.ico
c:\program files\DAEMON Tools Toolbar\Resources\home.ico
c:\program files\DAEMON Tools Toolbar\Resources\image_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\image_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\ImageS.ico
c:\program files\DAEMON Tools Toolbar\Resources\ImageSA.ico
c:\program files\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files\DAEMON Tools Toolbar\Resources\m.ico
c:\program files\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\manual.ico
c:\program files\DAEMON Tools Toolbar\Resources\map.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files\DAEMON Tools Toolbar\Resources\mount.ico
c:\program files\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
c:\program files\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\op.ico
c:\program files\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play.ico
c:\program files\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioE.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioG.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioN.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioW.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rbcheck.ico
c:\program files\DAEMON Tools Toolbar\Resources\rbtxt.ico
c:\program files\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssA.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssA1.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssRefresh.ico
c:\program files\DAEMON Tools Toolbar\Resources\s2.ico
c:\program files\DAEMON Tools Toolbar\Resources\show.ico
c:\program files\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_lr.ico
c:\program files\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_rl.ico
c:\program files\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files\DAEMON Tools Toolbar\Resources\soft24.ico
c:\program files\DAEMON Tools Toolbar\Resources\soft24_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\style.ico
c:\program files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files\DAEMON Tools Toolbar\Resources\timer.ico
c:\program files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\u.ico
c:\program files\DAEMON Tools Toolbar\Resources\unmount-all.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_mute.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\web_resources.ico
c:\program files\DAEMON Tools Toolbar\Resources\web_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\web_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\WebS.ico
c:\program files\DAEMON Tools Toolbar\Resources\WebSa.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi14.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files\DAEMON Tools Toolbar\uninst.exe
c:\users\maph\AppData\Local\Temp\sfamcc00001.dll
c:\users\maph\AppData\Local\Temp\sfareca00001.dll
c:\windows\system32\temp.006
c:\windows\system32\temp.007
c:\windows\system32\temp.008
c:\windows\system32\temp.009
c:\windows\system32\temp.00A
c:\windows\system32\temp.00B

Nakažená kopie c:\windows\System32\user32.dll byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-23 do 2011-01-23 )))))))))))))))))))))))))))))))
.

2011-01-23 19:19 . 2011-01-23 19:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-23 17:39 . 2011-01-23 17:43 -------- d-----w- c:\program files\trend micro
2011-01-23 17:39 . 2011-01-23 17:43 -------- d-----w- C:\rsit
2011-01-23 15:30 . 2008-11-10 10:41 32656 ----a-w- c:\windows\system32\msonpmon.dll
2011-01-23 15:30 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2011-01-23 15:18 . 2011-01-23 15:18 79360 --sha-r- c:\windows\system32\McxDrivq.dll
2011-01-23 07:43 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{FB230388-E63B-4FC6-9791-784EE01F6E8E}\mpengine.dll
2011-01-16 15:07 . 2011-01-16 15:32 -------- d-----w- c:\program files\PSPad
2011-01-13 20:51 . 2011-01-13 20:51 -------- d-----w- c:\program files\Haali
2011-01-10 16:18 . 2011-01-10 16:18 -------- d-----w- c:\program files\CCleaner
2011-01-08 22:33 . 2011-01-09 18:44 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-08 22:33 . 2011-01-09 18:44 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-08 22:32 . 2011-01-09 18:44 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-08 22:32 . 2011-01-08 22:32 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-08 22:23 . 2011-01-08 22:23 -------- d-----w- c:\program files\GamePark
2011-01-08 22:18 . 2011-01-09 19:06 -------- d-----w- c:\program files\Call of Duty 2
2011-01-02 17:50 . 2011-01-02 17:50 -------- d-----w- c:\program files\Lame MP3
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\misc
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\html
2011-01-02 17:49 . 2011-01-02 17:49 -------- d-----w- c:\program files\ACM
2011-01-02 17:37 . 2011-01-02 17:38 -------- d-----w- c:\program files\CDex
2010-12-28 23:10 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-12-26 23:05 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-12-26 09:14 . 2010-12-26 09:14 -------- d-----w- c:\programdata\ALM
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\cs
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\XPSViewer
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2010-12-25 21:26 . 2010-12-25 21:26 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2010-12-25 21:25 . 2010-12-25 21:25 -------- d-----w- c:\windows\system32\Wat
2010-12-25 21:09 . 2010-12-25 12:17 -------- d-----w- c:\windows\Panther
2010-12-25 18:53 . 2010-12-25 18:53 -------- d-----w- c:\programdata\InstallShield
2010-12-25 17:07 . 2010-12-25 17:08 -------- d-----w- c:\windows\system32\Adobe
2010-12-25 16:09 . 2010-10-27 04:32 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-25 15:58 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2010-12-25 15:56 . 2009-11-25 11:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-12-25 15:56 . 2009-11-25 11:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-12-25 15:56 . 2009-11-25 11:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-12-25 15:56 . 2009-11-25 11:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-12-25 15:56 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-12-25 15:51 . 2010-12-31 09:23 -------- d-----w- c:\program files\Microsoft Silverlight
2010-12-25 15:34 . 2009-07-13 17:43 3584 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\cs-CZ\LXKPTPRC.DLL.mui
2010-12-25 15:32 . 2009-10-10 02:57 12800 ----a-w- c:\windows\system32\drivers\sffp_sd.sys
2010-12-25 15:32 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2010-12-25 14:59 . 2010-12-25 14:59 -------- d-----w- C:\Cambridge
2010-12-25 14:58 . 2010-12-25 14:59 -------- d-----w- c:\program files\EGU
2010-12-25 14:50 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2010-12-25 14:50 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2010-12-25 14:50 . 2009-12-08 11:32 292864 ----a-w- c:\windows\system32\apphelp.dll
2010-12-25 14:50 . 2010-06-19 06:33 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-25 14:50 . 2010-06-19 06:33 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-25 14:50 . 2010-06-29 05:02 1413632 ----a-w- c:\windows\system32\ole32.dll
2010-12-25 14:50 . 2010-06-29 04:57 4247040 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2010-12-25 14:48 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2010-12-25 14:47 . 2010-10-20 04:54 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-12-25 14:47 . 2010-10-20 02:58 294400 ----a-w- c:\windows\system32\atmfd.dll
2010-12-25 14:47 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-12-25 14:47 . 2010-12-25 14:47 -------- d-----w- c:\programdata\EPSON
2010-12-25 14:45 . 2009-12-19 09:02 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2010-12-25 14:45 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-12-25 14:45 . 2009-12-19 09:02 22016 ----a-w- c:\windows\system32\msyuv.dll
2010-12-25 14:45 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-12-25 14:45 . 2009-12-19 09:02 13312 ----a-w- c:\windows\system32\msrle32.dll
2010-12-25 14:45 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-12-25 14:45 . 2009-12-19 09:02 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2010-12-25 14:45 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-12-25 14:45 . 2010-12-25 14:45 -------- d-----w- c:\program files\epson
2010-12-25 14:45 . 2006-12-27 23:00 66560 ----a-w- c:\windows\system32\eswia7e.dll
2010-12-25 14:45 . 2006-12-27 23:00 208896 ----a-w- c:\windows\system32\esint7e.dll
2010-12-25 14:45 . 2006-03-09 23:00 3584 ----a-w- c:\windows\system32\eswiaml.dll
2010-12-25 14:45 . 2010-10-16 04:36 314368 ----a-w- c:\windows\system32\webio.dll
2010-12-25 14:37 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2010-12-25 14:37 . 2010-04-07 07:10 571904 ----a-w- c:\windows\system32\oleaut32.dll
2010-12-25 14:37 . 2010-10-20 03:00 2327552 ----a-w- c:\windows\system32\win32k.sys
2010-12-25 14:35 . 2010-12-25 14:35 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6706C873-32BA-443F-956E-DBEFEA9EE67D}\gapaengine.dll
2010-12-25 14:35 . 2010-12-25 14:40 -------- d-----w- c:\program files\WordWise Dictionary
2010-12-25 14:34 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2010-12-25 14:34 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-12-25 14:33 . 2010-12-25 14:34 -------- d-----w- c:\program files\RivaTuner
2010-12-25 14:31 . 2010-12-25 14:31 -------- d-----w- c:\program files\Microsoft Security Client
2010-12-25 14:31 . 2010-04-09 07:24 240008 ----a-w- c:\windows\system32\drivers\netio.sys
2010-12-25 13:40 . 2010-12-25 13:40 -------- d-----w- c:\program files\Common Files\Lingea Shared
2010-12-25 13:40 . 2010-12-25 13:40 -------- d-----w- c:\program files\Pravidla CZ
2010-12-25 13:16 . 2010-12-26 09:15 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-12-25 13:15 . 2011-01-16 13:52 -------- d-----w- c:\program files\Foxit Reader
2010-12-25 13:10 . 2011-01-23 17:53 -------- d-----w- c:\program files\foobar2000
2010-12-25 12:59 . 2010-12-25 12:59 -------- d-----w- c:\program files\Adobe Media Player
2010-12-25 12:58 . 2010-12-25 12:58 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-12-25 12:56 . 2010-12-26 09:15 -------- d-----w- c:\program files\Common Files\Adobe
2010-12-25 12:51 . 2010-12-25 12:52 -------- d-----w- c:\program files\Miranda IM
2010-12-25 12:48 . 2010-12-25 12:52 -------- d-----w- c:\program files\Microsoft Works
2010-12-25 12:48 . 2010-12-31 20:20 -------- d-----w- c:\program files\Microsoft.NET
2010-12-25 12:48 . 2010-12-25 12:48 -------- d-----w- c:\windows\PCHEALTH
2010-12-25 12:46 . 2011-01-23 15:30 -------- d-----w- c:\programdata\Microsoft Help
2010-12-25 12:45 . 2010-12-25 12:45 -------- d-----r- C:\MSOCache
2010-12-25 12:41 . 2010-12-25 13:09 -------- d-----w- c:\program files\uTorrent
2010-12-25 12:40 . 2010-12-25 12:40 -------- d-----w- c:\program files\VLC
2010-12-25 12:39 . 2010-12-25 12:39 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-12-25 12:38 . 2010-12-25 12:38 -------- d-----w- c:\program files\TS3
2010-12-25 12:38 . 2011-01-23 17:53 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-12-25 12:38 . 2011-01-23 17:50 -------- d-----w- c:\program files\Spybot
2010-12-25 12:36 . 2010-12-25 12:36 -------- d-----r- c:\program files\Skype
2010-12-25 12:36 . 2010-12-25 12:36 -------- d-----w- c:\program files\Common Files\Skype
2010-12-25 12:34 . 2010-12-25 12:34 -------- d-----w- c:\programdata\Installations
2010-12-25 12:33 . 2010-12-25 12:33 -------- d-----w- c:\program files\MPC HC
2010-12-25 12:33 . 2010-12-25 12:33 -------- d-----w- c:\program files\Mp3Tag
2010-12-25 12:32 . 2010-12-25 12:32 -------- d-----w- c:\windows\system32\Macromed
2010-12-25 12:32 . 2010-12-25 12:32 -------- d-----w- c:\program files\iRiver Plus3
2010-12-25 12:31 . 2010-12-25 12:31 -------- d-----w- c:\program files\Opera
2010-12-25 12:30 . 2011-01-23 19:21 -------- d-----w- c:\program files\SpeedFan
2010-12-25 12:28 . 2010-12-25 12:28 -------- d-----w- c:\program files\Hamachi
2010-12-25 12:27 . 2010-12-25 12:27 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-25 12:27 . 2010-12-25 12:27 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-12-25 12:26 . 2010-12-25 12:27 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-12-25 12:26 . 2010-12-25 12:26 -------- d-----w- c:\programdata\ashampoo
2010-12-25 12:26 . 2010-12-25 12:26 -------- d-----w- c:\program files\Ashampoo BS6
2010-12-25 12:25 . 2010-12-25 12:25 -------- d-----w- c:\programdata\ConeXware
2010-12-25 12:25 . 2010-12-25 12:25 -------- d-----w- c:\program files\PatchBeam
2010-12-25 12:25 . 2011-01-22 22:04 -------- d-----w- c:\program files\PowerArchiver
2010-12-25 12:24 . 2010-12-25 12:24 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-12-25 12:24 . 2010-12-25 12:24 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2010-12-25 12:24 . 2010-12-25 12:24 -------- d-----w- c:\program files\Creative
2010-12-25 12:24 . 2008-09-17 14:07 1503232 ------w- c:\windows\system32\adi_oal.dll
2010-12-25 12:23 . 2011-01-08 22:15 -------- d-----w- c:\program files\Common Files\InstallShield

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-02 04:39 . 2010-12-25 14:49 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2010-12-25 14:49 179712 ----a-w- c:\windows\system32\schtasks.exe
2010-10-27 15:25 . 2010-10-27 15:25 1312120 ----a-w- c:\windows\system32\WBOCX.OCX
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
"RivaTuner"="c:\program files\RivaTuner\RivaTunerWrapper.exe" [2009-08-22 24576]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner\RivaTunerWrapper.exe" [2009-08-22 24576]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
SpeedFan.lnk - c:\program files\SpeedFan\speedfan.exe [2010-11-3 4360896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

R1 MpKslf1c17e14;MpKslf1c17e14;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D0538AE8-9E59-4AF6-91DA-8628AC38C976}\MpKslf1c17e14.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-25 691696]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\Hamachi\hamachi-2.exe [2010-12-06 1238408]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
S3 Razerlow;Razerlow USB Filter Driver;c:\windows\system32\Drivers\Razerlow.sys [2005-04-24 13225]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe


.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2196)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\NvXDSync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\taskhost.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Hamachi\hamachi-2-ui.exe
c:\windows\system32\conhost.exe
c:\program files\RivaTuner\RivaTuner.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-01-23 20:23:52 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-23 19:23
ComboFix2.txt 2011-01-23 18:24

Před spuštěním: Volných bajtů: 124 130 611 200
Po spuštění: Volných bajtů: 124 056 244 224

- - End Of File - - 8A30A48D5A02450E423E43FFD3D1652D

Jak se chova PC

MS Security Essentials jiz funguje, vse se zda byt ok )

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Dejte novy log z RSIT a napiste jak se chova PC, ci je vse v poradku

Podle vseho PC funguje spravne.






Logfile of random's system information tool 1.08 (written by random/random)
Run by maph at 2011-01-23 21:03:30
Microsoft Windows 7 Ultimate
System drive C: has 118 GB (82%) free of 144 GB
Total RAM: 2047 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:03:51, on 23.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hamachi\hamachi-2-ui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\RivaTuner\RivaTuner.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Opera\opera.exe
C:\Users\maph\AppData\Local\Opera\Opera\temporary_downloads\RSIT.exe
C:\Program Files\trend micro\maph.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SDHelper.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\WORDWI~1\QUICKF~1\PlugIns\IEHelp.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [RivaTuner] "C:\Program Files\RivaTuner\RivaTunerWrapper.exe" /T
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner\RivaTunerWrapper.exe" /S
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - Global Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot\SDHelper.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\Hamachi\hamachi-2.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 4642 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object - C:\PROGRA~1\WORDWI~1\QUICKF~1\PlugIns\IEHelp.dll [2007-02-16 457216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]
"RivaTuner"=C:\Program Files\RivaTuner\RivaTunerWrapper.exe [2009-08-22 24576]
"RivaTunerStartupDaemon"=C:\Program Files\RivaTuner\RivaTunerWrapper.exe [2009-08-22 24576]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - "C:\Program Files\PSPad\PSPad.exe" "%1"

======List of files/folders created in the last 1 months======

2011-01-23 21:03:30 ----D---- C:\rsit
2011-01-23 20:23:54 ----D---- C:\Windows\temp
2011-01-23 20:21:10 ----D---- C:\$RECYCLE.BIN
2011-01-23 18:39:43 ----D---- C:\Program Files\trend micro
2011-01-23 16:30:36 ----A---- C:\Windows\system32\msonpmon.dll
2011-01-23 16:18:52 ----RASH---- C:\Windows\system32\McxDrivq.dll
2011-01-16 16:07:07 ----D---- C:\Program Files\PSPad
2011-01-15 18:09:58 ----D---- C:\Users\maph\AppData\Roaming\Mp3tag
2011-01-13 21:51:27 ----D---- C:\Program Files\Haali
2011-01-13 15:39:53 ----A---- C:\Windows\system32\odbc32.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\mf.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\DWrite.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-13 15:39:52 ----A---- C:\Windows\system32\d2d1.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-13 15:39:51 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\FntCache.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-13 15:39:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-13 15:39:51 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-13 15:39:51 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 14:34:52 ----D---- C:\Users\maph\AppData\Roaming\EPSON
2011-01-10 17:18:32 ----D---- C:\Program Files\CCleaner
2011-01-09 15:49:20 ----D---- C:\Users\maph\AppData\Roaming\Allstar
2011-01-08 23:33:44 ----A---- C:\Windows\system32\drivers\PnkBstrK.sys
2011-01-08 23:33:03 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-01-08 23:32:12 ----A---- C:\Windows\system32\PnkBstrA.exe
2011-01-08 23:23:15 ----D---- C:\Program Files\GamePark
2011-01-08 23:21:45 ----A---- C:\Windows\game.ini
2011-01-08 23:18:53 ----D---- C:\Program Files\Call of Duty 2
2011-01-06 17:04:08 ----D---- C:\Users\maph\AppData\Roaming\dvdcss
2011-01-02 18:50:00 ----D---- C:\Program Files\Lame MP3
2011-01-02 18:49:05 ----D---- C:\Program Files\misc
2011-01-02 18:49:05 ----D---- C:\Program Files\html
2011-01-02 18:49:05 ----D---- C:\Program Files\ACM
2011-01-02 18:37:49 ----D---- C:\Program Files\CDex
2011-01-02 17:28:24 ----D---- C:\Users\maph\AppData\Roaming\wordwise
2010-12-29 00:10:59 ----A---- C:\Windows\system32\browserchoice.exe
2010-12-26 10:14:38 ----D---- C:\ProgramData\ALM
2010-12-25 22:26:36 ----D---- C:\Windows\cs-CZ
2010-12-25 22:26:32 ----D---- C:\Windows\system32\cs
2010-12-25 22:26:12 ----D---- C:\Windows\system32\XPSViewer
2010-12-25 22:26:10 ----D---- C:\Windows\system32\drivers\cs-CZ
2010-12-25 22:25:52 ----D---- C:\Windows\system32\Wat
2010-12-25 22:09:13 ----D---- C:\Windows\Panther
2010-12-25 19:53:06 ----D---- C:\ProgramData\InstallShield
2010-12-25 18:23:08 ----D---- C:\Users\maph\AppData\Roaming\Foxit Software
2010-12-25 18:07:48 ----D---- C:\Windows\system32\Adobe
2010-12-25 17:09:42 ----A---- C:\Windows\system32\tzres.dll
2010-12-25 16:58:27 ----A---- C:\Windows\system32\msv1_0.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\PresentationHost.exe
2010-12-25 16:56:01 ----A---- C:\Windows\system32\netfxperf.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\mscoree.dll
2010-12-25 16:56:01 ----A---- C:\Windows\system32\dfshim.dll
2010-12-25 16:51:57 ----D---- C:\Program Files\Microsoft Silverlight
2010-12-25 16:32:08 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-12-25 16:32:04 ----A---- C:\Windows\system32\drivers\ks.sys
2010-12-25 15:59:24 ----D---- C:\Cambridge
2010-12-25 15:58:08 ----D---- C:\Program Files\EGU
2010-12-25 15:51:48 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-12-25 15:51:47 ----A---- C:\Windows\system32\spoolsv.exe
2010-12-25 15:51:47 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-12-25 15:51:41 ----A---- C:\Windows\system32\winlogon.exe
2010-12-25 15:51:41 ----A---- C:\Windows\system32\ir32_32.dll
2010-12-25 15:51:41 ----A---- C:\Windows\system32\iccvid.dll
2010-12-25 15:51:41 ----A---- C:\Windows\explorer.exe
2010-12-25 15:51:40 ----A---- C:\Windows\system32\t2embed.dll
2010-12-25 15:51:32 ----A---- C:\Windows\system32\CPFilters.dll
2010-12-25 15:51:31 ----A---- C:\Windows\system32\psisdecd.dll
2010-12-25 15:51:25 ----A---- C:\Windows\system32\schannel.dll
2010-12-25 15:51:25 ----A---- C:\Windows\system32\msasn1.dll
2010-12-25 15:51:23 ----A---- C:\Windows\system32\lsasrv.dll
2010-12-25 15:51:23 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-12-25 15:51:21 ----A---- C:\Windows\system32\inetcomm.dll
2010-12-25 15:51:20 ----A---- C:\Windows\system32\ntdll.dll
2010-12-25 15:51:18 ----A---- C:\Windows\system32\CertEnroll.dll
2010-12-25 15:51:17 ----A---- C:\Windows\system32\winresume.exe
2010-12-25 15:51:17 ----A---- C:\Windows\system32\winload.exe
2010-12-25 15:51:09 ----A---- C:\Windows\system32\asycfilt.dll
2010-12-25 15:51:07 ----A---- C:\Windows\system32\ROBOEX32.DLL
2010-12-25 15:51:07 ----A---- C:\Windows\system32\Inetwh32.dll
2010-12-25 15:51:07 ----A---- C:\Windows\system32\comctl32.dll
2010-12-25 15:51:06 ----A---- C:\Windows\system32\vbar332.dll
2010-12-25 15:51:05 ----A---- C:\Windows\system32\mfc40u.dll
2010-12-25 15:51:05 ----A---- C:\Windows\system32\mfc40.dll
2010-12-25 15:51:00 ----A---- C:\Windows\system32\wmp.dll
2010-12-25 15:50:59 ----A---- C:\Windows\system32\wmploc.DLL
2010-12-25 15:50:58 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-12-25 15:50:56 ----A---- C:\Windows\system32\kernel32.dll
2010-12-25 15:50:56 ----A---- C:\Windows\system32\apphelp.dll
2010-12-25 15:50:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-12-25 15:50:54 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-12-25 15:50:53 ----A---- C:\Windows\system32\ole32.dll
2010-12-25 15:49:06 ----A---- C:\Windows\system32\mshtml.dll
2010-12-25 15:49:06 ----A---- C:\Windows\system32\iertutil.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\wininet.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\urlmon.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\mstime.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\iepeers.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\ieframe.dll
2010-12-25 15:49:05 ----A---- C:\Windows\system32\iedkcs32.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-25 15:49:04 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-25 15:49:04 ----A---- C:\Windows\system32\ieui.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskschd.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskeng.exe
2010-12-25 15:49:03 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-25 15:49:03 ----A---- C:\Windows\system32\schtasks.exe
2010-12-25 15:49:03 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-25 15:48:41 ----A---- C:\Windows\system32\msxml3.dll
2010-12-25 15:47:49 ----A---- C:\Windows\system32\jscript.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\fontsub.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\atmlib.dll
2010-12-25 15:47:26 ----A---- C:\Windows\system32\atmfd.dll
2010-12-25 15:47:18 ----D---- C:\ProgramData\EPSON
2010-12-25 15:46:54 ----A---- C:\Windows\system32\shell32.dll
2010-12-25 15:46:45 ----A---- C:\Windows\system32\srvsvc.dll
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-12-25 15:46:45 ----A---- C:\Windows\system32\drivers\srv.sys
2010-12-25 15:46:44 ----A---- C:\Windows\system32\wmpmde.dll
2010-12-25 15:46:39 ----A---- C:\Windows\system32\consent.exe
2010-12-25 15:46:38 ----A---- C:\Windows\system32\secproc_isv.dll
2010-12-25 15:46:38 ----A---- C:\Windows\system32\secproc.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-12-25 15:46:37 ----A---- C:\Windows\system32\RMActivate.exe
2010-12-25 15:46:36 ----A---- C:\Windows\system32\vbscript.dll
2010-12-25 15:46:36 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-12-25 15:46:35 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-12-25 15:46:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-12-25 15:46:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-12-25 15:46:12 ----A---- C:\Windows\system32\E_DCINST.DLL
2010-12-25 15:46:10 ----A---- C:\Windows\system32\E_FLBCAE.DLL
2010-12-25 15:46:09 ----A---- C:\Windows\system32\E_FD4BCAE.DLL
2010-12-25 15:45:40 ----A---- C:\Windows\system32\tsbyuv.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\quartz.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msyuv.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msvidc32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\msrle32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\mciavi32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\iyuv_32.dll
2010-12-25 15:45:40 ----A---- C:\Windows\system32\avifil32.dll
2010-12-25 15:45:28 ----D---- C:\Program Files\epson
2010-12-25 15:45:27 ----A---- C:\Windows\system32\eswiaml.dll
2010-12-25 15:45:27 ----A---- C:\Windows\system32\eswia7e.dll
2010-12-25 15:45:27 ----A---- C:\Windows\system32\esint7e.dll
2010-12-25 15:45:12 ----A---- C:\Windows\system32\webio.dll
2010-12-25 15:37:29 ----A---- C:\Windows\system32\rtutils.dll
2010-12-25 15:37:27 ----A---- C:\Windows\system32\oleaut32.dll
2010-12-25 15:37:26 ----A---- C:\Windows\system32\win32k.sys
2010-12-25 15:35:15 ----D---- C:\Program Files\WordWise Dictionary
2010-12-25 15:34:11 ----A---- C:\Windows\system32\wintrust.dll
2010-12-25 15:34:11 ----A---- C:\Windows\system32\cabview.dll
2010-12-25 15:33:51 ----D---- C:\Program Files\RivaTuner
2010-12-25 15:31:10 ----D---- C:\Program Files\Microsoft Security Client
2010-12-25 15:31:01 ----A---- C:\Windows\system32\drivers\netio.sys
2010-12-25 14:40:28 ----D---- C:\Program Files\Common Files\Lingea Shared
2010-12-25 14:40:23 ----D---- C:\Program Files\Pravidla CZ
2010-12-25 14:28:02 ----D---- C:\Users\maph\AppData\Roaming\Media Player Classic
2010-12-25 14:27:31 ----D---- C:\Users\maph\AppData\Roaming\vlc
2010-12-25 14:16:31 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-12-25 14:15:43 ----D---- C:\Program Files\Foxit Reader
2010-12-25 14:14:57 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-12-25 14:14:57 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-12-25 14:14:56 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-12-25 14:14:55 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xinput1_3.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-12-25 14:14:54 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xinput1_2.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xinput1_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\d3dx10.dll
2010-12-25 14:14:53 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-12-25 14:14:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-12-25 14:14:50 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-12-25 14:12:04 ----RASH---- C:\MSDOS.SYS
2010-12-25 14:12:04 ----RASH---- C:\IO.SYS
2010-12-25 14:10:10 ----D---- C:\Program Files\foobar2000
2010-12-25 13:59:04 ----D---- C:\Program Files\Adobe Media Player
2010-12-25 13:58:11 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-12-25 13:58:10 ----D---- C:\Program Files\Adobe
2010-12-25 13:57:44 ----D---- C:\ProgramData\Adobe
2010-12-25 13:56:57 ----D---- C:\Program Files\Common Files\Adobe
2010-12-25 13:55:32 ----D---- C:\Users\maph\AppData\Roaming\Macromedia
2010-12-25 13:55:29 ----D---- C:\Users\maph\AppData\Roaming\Adobe
2010-12-25 13:51:54 ----D---- C:\Program Files\Miranda IM
2010-12-25 13:48:28 ----D---- C:\Program Files\Microsoft Works
2010-12-25 13:48:20 ----D---- C:\Program Files\Microsoft Visual Studio
2010-12-25 13:48:20 ----D---- C:\Program Files\Common Files\DESIGNER
2010-12-25 13:48:14 ----D---- C:\Windows\PCHEALTH
2010-12-25 13:48:14 ----D---- C:\Program Files\Microsoft.NET
2010-12-25 13:46:53 ----D---- C:\ProgramData\Microsoft Help
2010-12-25 13:46:53 ----D---- C:\Program Files\Microsoft Office
2010-12-25 13:45:52 ----RD---- C:\MSOCache
2010-12-25 13:41:28 ----D---- C:\Program Files\uTorrent
2010-12-25 13:40:45 ----D---- C:\Users\maph\AppData\Roaming\uTorrent
2010-12-25 13:40:27 ----D---- C:\Program Files\VLC
2010-12-25 13:39:30 ----D---- C:\Users\maph\AppData\Roaming\Mozilla
2010-12-25 13:39:29 ----D---- C:\Users\maph\AppData\Roaming\Thunderbird
2010-12-25 13:39:25 ----D---- C:\Program Files\Mozilla Thunderbird
2010-12-25 13:38:31 ----D---- C:\Program Files\TS3
2010-12-25 13:38:00 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-12-25 13:38:00 ----D---- C:\Program Files\Spybot
2010-12-25 13:36:16 ----RD---- C:\Program Files\Skype
2010-12-25 13:36:16 ----D---- C:\Users\maph\AppData\Roaming\Skype
2010-12-25 13:36:16 ----D---- C:\Program Files\Common Files\Skype
2010-12-25 13:36:00 ----D---- C:\Users\maph\AppData\Roaming\PC Suite
2010-12-25 13:35:59 ----D---- C:\Users\maph\AppData\Roaming\Nokia
2010-12-25 13:35:59 ----D---- C:\ProgramData\PC Suite
2010-12-25 13:35:52 ----D---- C:\Program Files\Common Files\PCSuite
2010-12-25 13:35:51 ----D---- C:\Program Files\Common Files\Nokia
2010-12-25 13:35:45 ----D---- C:\Program Files\DIFX
2010-12-25 13:35:44 ----A---- C:\Windows\system32\drivers\pccsmcfd.sys
2010-12-25 13:35:43 ----DC---- C:\Windows\system32\DRVSTORE
2010-12-25 13:35:39 ----D---- C:\Program Files\PC Connectivity Solution
2010-12-25 13:35:27 ----D---- C:\ProgramData\Skype
2010-12-25 13:35:26 ----A---- C:\Windows\system32\nmwcdcls.dll
2010-12-25 13:35:25 ----D---- C:\Program Files\Nokia
2010-12-25 13:35:17 ----N---- C:\Windows\system32\MpSigStub.exe
2010-12-25 13:35:17 ----D---- C:\Program Files\Total Commander
2010-12-25 13:35:17 ----A---- C:\Windows\UC.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\RAR.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\PKZIP.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\PKUNZIP.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\NOCLOSE.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\LHA.PIF
2010-12-25 13:35:17 ----A---- C:\Windows\ARJ.PIF
2010-12-25 13:34:10 ----D---- C:\ProgramData\Installations
2010-12-25 13:33:55 ----D---- C:\Program Files\MPC HC
2010-12-25 13:33:07 ----D---- C:\Program Files\Mp3Tag
2010-12-25 13:32:35 ----D---- C:\Windows\system32\Macromed
2010-12-25 13:32:34 ----D---- C:\Program Files\iRiver Plus3
2010-12-25 13:31:42 ----D---- C:\Users\maph\AppData\Roaming\Opera
2010-12-25 13:31:40 ----D---- C:\Program Files\Opera
2010-12-25 13:30:11 ----D---- C:\Program Files\SpeedFan
2010-12-25 13:28:31 ----D---- C:\Program Files\Hamachi
2010-12-25 13:27:38 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-12-25 13:27:23 ----D---- C:\Program Files\DAEMON Tools Lite
2010-12-25 13:26:58 ----D---- C:\Users\maph\AppData\Roaming\DAEMON Tools Lite
2010-12-25 13:26:56 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-12-25 13:26:51 ----D---- C:\ProgramData\ashampoo
2010-12-25 13:26:48 ----D---- C:\Program Files\Ashampoo BS6
2010-12-25 13:25:27 ----D---- C:\ProgramData\ConeXware
2010-12-25 13:25:11 ----D---- C:\Program Files\PatchBeam
2010-12-25 13:25:09 ----D---- C:\Program Files\PowerArchiver
2010-12-25 13:24:09 ----N---- C:\Windows\system32\adi_oal.dll
2010-12-25 13:24:09 ----D---- C:\Program Files\Creative
2010-12-25 13:24:09 ----A---- C:\Windows\system32\wrap_oal.dll
2010-12-25 13:24:09 ----A---- C:\Windows\system32\OpenAL32.dll
2010-12-25 13:23:58 ----D---- C:\Program Files\Common Files\InstallShield
2010-12-25 13:23:51 ----D---- C:\ProgramData\SonicFocus
2010-12-25 13:23:45 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-25 13:23:45 ----D---- C:\Program Files\Analog Devices
2010-12-25 13:23:31 ----D---- C:\Users\maph\AppData\Roaming\InstallShield
2010-12-25 13:23:30 ----A---- C:\Windows\Language_trs.ini
2010-12-25 13:22:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-12-25 13:22:04 ----D---- C:\ProgramData\NVIDIA
2010-12-25 13:21:49 ----SHD---- C:\Windows\Installer
2010-12-25 13:21:42 ----D---- C:\ProgramData\NVIDIA Corporation
2010-12-25 13:21:32 ----A---- C:\Windows\system32\OpenCL.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvoglv32.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvgenco322030.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvdispco322050.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvd3dum.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuvid.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcuda.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvcompiler.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\nvapi.dll
2010-12-25 13:21:32 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-12-25 13:21:07 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-25 13:20:55 ----D---- C:\Program Files\nVidia
2010-12-25 13:18:10 ----D---- C:\Users\maph\AppData\Roaming\Identities
2010-12-25 13:18:01 ----SD---- C:\Users\maph\AppData\Roaming\Microsoft
2010-12-25 13:18:01 ----D---- C:\Users\maph\AppData\Roaming\Media Center Programs
2010-12-25 13:17:49 ----D---- C:\Recovery
2010-12-25 13:13:18 ----D---- C:\Windows\SoftwareDistribution
2010-12-25 13:11:09 ----D---- C:\Windows\Prefetch
2010-12-25 13:10:33 ----SHD---- C:\System Volume Information
2010-12-25 13:10:33 ----ASH---- C:\pagefile.sys
2010-12-25 13:10:33 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2011-01-23 21:02:54 ----D---- C:\Windows
2011-01-23 21:01:04 ----D---- C:\Windows\system32\config
2011-01-23 20:55:33 ----SD---- C:\ProgramData\Microsoft
2011-01-23 20:23:54 ----D---- C:\Windows\system32\drivers
2011-01-23 20:21:12 ----A---- C:\Windows\system.ini
2011-01-23 20:21:03 ----D---- C:\Windows\system32\drivers\etc
2011-01-23 20:19:35 ----RD---- C:\Program Files
2011-01-23 20:19:35 ----D---- C:\Windows\System32
2011-01-23 20:17:43 ----D---- C:\Windows\AppPatch
2011-01-23 20:17:42 ----D---- C:\Program Files\Common Files
2011-01-23 19:24:14 ----D---- C:\Windows\system32\Tasks
2011-01-23 19:24:13 ----D---- C:\Windows\Tasks
2011-01-23 16:36:12 ----D---- C:\Windows\inf
2011-01-23 16:30:39 ----RSD---- C:\Windows\assembly
2011-01-23 16:30:15 ----RSD---- C:\Windows\Fonts
2011-01-23 16:29:31 ----A---- C:\Windows\win.ini
2011-01-23 16:29:30 ----D---- C:\Program Files\Common Files\System
2011-01-22 19:13:53 ----D---- C:\Windows\system32\drivers\UMDF
2011-01-21 14:22:10 ----D---- C:\Windows\system32\catroot2
2011-01-13 21:46:12 ----D---- C:\Windows\winsxs
2011-01-13 15:39:45 ----D---- C:\Windows\system32\catroot
2011-01-10 17:20:21 ----D---- C:\Windows\debug
2011-01-08 23:32:13 ----D---- C:\Windows\system32\LogFiles
2011-01-05 15:57:58 ----D---- C:\Windows\system32\wdi
2011-01-01 19:02:44 ----D---- C:\Windows\LiveKernelReports
2011-01-01 11:50:27 ----D---- C:\Windows\Microsoft.NET
2010-12-31 21:20:44 ----D---- C:\Windows\system32\en-US
2010-12-31 15:26:22 ----D---- C:\Windows\rescache
2010-12-31 00:21:17 ----D---- C:\Windows\system32\cs-CZ
2010-12-29 11:22:44 ----D---- C:\Windows\system32\NDF
2010-12-26 17:17:02 ----D---- C:\Windows\Logs
2010-12-26 10:14:38 ----D---- C:\ProgramData
2010-12-25 22:30:34 ----D---- C:\Windows\Downloaded Program Files
2010-12-25 22:26:53 ----D---- C:\Program Files\Windows Mail
2010-12-25 22:26:52 ----D---- C:\Windows\system32\migration
2010-12-25 22:26:52 ----D---- C:\Program Files\Internet Explorer
2010-12-25 22:26:50 ----D---- C:\Windows\system32\Boot
2010-12-25 22:26:45 ----D---- C:\Program Files\Windows Media Player
2010-12-25 22:26:41 ----D---- C:\Program Files\Windows Sidebar
2010-12-25 22:26:40 ----D---- C:\Program Files\DVD Maker
2010-12-25 22:26:39 ----D---- C:\Windows\servicing
2010-12-25 22:26:39 ----D---- C:\Program Files\Windows Photo Viewer
2010-12-25 22:26:39 ----D---- C:\Program Files\Windows Defender
2010-12-25 22:26:36 ----D---- C:\Windows\IME
2010-12-25 22:26:33 ----D---- C:\Windows\system32\winrm
2010-12-25 22:26:33 ----D---- C:\Windows\system32\oobe
2010-12-25 22:26:33 ----D---- C:\Windows\system32\migwiz
2010-12-25 22:26:33 ----D---- C:\Windows\PolicyDefinitions
2010-12-25 22:26:32 ----D---- C:\Windows\system32\sysprep
2010-12-25 22:26:32 ----D---- C:\Windows\system32\slmgr
2010-12-25 22:26:10 ----D---- C:\Windows\system32\WCN
2010-12-25 22:26:10 ----D---- C:\Windows\system32\MUI
2010-12-25 22:26:10 ----D---- C:\Windows\system32\Dism
2010-12-25 22:26:06 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2010-12-25 22:26:06 ----D---- C:\Windows\system32\DriverStore
2010-12-25 22:26:04 ----D---- C:\Windows\system32\wbem
2010-12-25 22:26:04 ----D---- C:\Windows\system32\com
2010-12-25 15:45:27 ----D---- C:\Windows\twain_32
2010-12-25 15:20:07 ----D---- C:\Windows\ShellNew
2010-12-25 13:52:42 ----D---- C:\Program Files\Common Files\microsoft shared
2010-12-25 13:25:58 ----D---- C:\Windows\system32\CodeIntegrity
2010-12-25 13:23:36 ----D---- C:\Windows\system32\restore
2010-12-25 13:22:00 ----D---- C:\Windows\Help
2010-12-25 13:17:58 ----RD---- C:\Users
2010-12-25 13:17:49 ----D---- C:\Windows\system32\Recovery
2010-12-25 13:11:05 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-25 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKslaccb10ec;MpKslaccb10ec; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FB230388-E63B-4FC6-9791-784EE01F6E8E}\MpKslaccb10ec.sys [2011-01-23 28752]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 Razerlow;Razerlow USB Filter Driver; C:\Windows\System32\Drivers\Razerlow.sys [2005-04-24 13225]
R3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner\RivaTuner32.sys [2009-08-22 9088]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S1 MpKslf1c17e14;MpKslf1c17e14; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D0538AE8-9E59-4AF6-91DA-8628AC38C976}\MpKslf1c17e14.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 a6n4w1w7;a6n4w1w7; C:\Windows\system32\drivers\a6n4w1w7.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\Hamachi\hamachi-2.exe [2010-12-06 1238408]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 600680]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-01-08 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2011-01-09 214520]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]

-----------------EOF-----------------

Otevrete si poznamkovy blok

• Start->spustit->notepad
• Vlozte text nize

• Kód: Vybrat vše

  Windows Registry Editor Version 5.00
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

• Soubor ulozte jako oprava.reg
• Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
• 
• Zavrit notepad a spustit dvojklikem oprava.reg
• Pripadny dotaz na zmenu registru potvrdte
• Okno jen problikne a opravi regsitry - soubor muzete smazat

Jinak log vypada v poradku

Mockrát Vám děkuju.

Nemate zac, rad jsem pomohl Zase nekdy