log, problém z vypínáním pc

[David777]

ahojte,
v poslední době se mi dosti často stává že když dam vypnout počítač tak mi asi 20 minut píše vypínání ale nevypne se...
nevíte někdo co s tím?
přikládám log:



Logfile of random's system information tool 1.08 (written by random/random)
Run by David at 2011-04-15 19:27:17
Microsoft Windows 7 Home Premium
System drive C: has 68 GB (57%) free of 119 GB
Total RAM: 4061 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:27:49, on 15.4.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\David\Desktop\uTorrent.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Mousotron\Mousotron.exe
C:\Program Files (x86)\BitComet\BitComet.exe
C:\Users\David\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\TP-LINK\QSS\jswtrayutil.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\David.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{3E6 ... 38A10A0497}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
R3 - URLSearchHook: Zynga Toolbar - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyng.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - (no file)
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.12.6.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Zynga Toolbar - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyng.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: HyperCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Zynga Toolbar - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyng.dll
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [jswtrayutil] "C:\Program Files (x86)\TP-LINK\QSS\jswtrayutil.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [Google Update] "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\David\Desktop\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Mousotron] C:\Program Files (x86)\Mousotron\Mousotron.exe
O4 - HKCU\..\Run: [BitComet] C:\Program Files (x86)\BitComet\BitComet.exe /tray
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.4\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\NOVSLO~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\Microsoft Office\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.12.6.dll/206 (file missing)
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} (SysInfo Class) - http://d1ylr6sba64qi3.cloudfront.net/gl ... 1.71.0.cab
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... 4.13.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files (x86)\iolo\common\lib\ioloServiceManager.exe (file missing)
O23 - Service: JumpStart Push-Button Service (jswpbapi) - Wireless - C:\Program Files (x86)\TP-LINK\QSS\jswpbapi.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - Wireless - C:\Program Files (x86)\TP-LINK\QSS\jswpsapi.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: FrontLine Drivers Auto Removal (v2) (sfrem02) - Unknown owner - C:\Windows\system32\sfrem02.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16981 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
taskeng.exe {E9038B72-8E1B-4090-B8C9-4D188453E069}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe" /startup
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files\P4G\BatteryLife.exe"
Atouch64.exe
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\Google\Update\1.2.183.39\GoogleCrashHandler.exe" /crashhandler
"C:\Program Files (x86)\TP-LINK\QSS\jswpbapi.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe"
"C:\Windows\AsScrPro.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
C:\Windows\system32\svchost.exe -k HPService
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe"
"taskhost.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" MySyncFolder
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Users\David\Desktop\uTorrent.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files (x86)\Mousotron\Mousotron.exe"
"C:\Program Files (x86)\BitComet\BitComet.exe" /tray
"C:\Users\David\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe" /crashhandler
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\BitComet\tools\BitCometService.exe" -service
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\TP-LINK\QSS\jswtrayutil.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
ATKOSD.exe
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Deskjet F4500 series#1301926853" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\rundll32.exe "C:\Users\David\AppData\Local\Google\Chrome\APPLIC~1\10.0.648.205\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\David\AppData\Local\Google\Chrome\Application\10.0.648.205\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\David\AppData\Local\Google\Chrome\User Data\Default" --channel=3748.07039800.176689148 /prefetch:4 --flash-broker=600
C:\Windows\system32\AUDIODG.EXE 0x7b4
"C:\Users\David\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_4/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/WebSocketExperiment/default/ --channel=3748.076AF600.284172293 /prefetch:3

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2239340465-1001483360-3508777747-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2239340465-1001483360-3508777747-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2009-11-25 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F364306-AA45-47B5-9F9D-39A8B94E7EF1}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-23 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.12.6.dll [2010-12-06 765744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
Zynga Toolbar - C:\Program Files (x86)\Zynga\tbZyng.dll [2010-12-01 2735200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-11-23 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll [2010-02-16 2495488]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2009-11-25 444752]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]
{338B4DFE-2E2C-4338-9E41-E176D497299E} - HyperCam Toolbar - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll [2010-02-16 2495488]
{ba14329e-9550-4989-b3f2-9732e92d17cc} - Vuze Remote Toolbar - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll [2010-11-23 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-23 3908192]
{7b13ec3e-999a-4b70-b9cb-2617b8323822} - Zynga Toolbar - C:\Program Files (x86)\Zynga\tbZyng.dll [2010-12-01 2735200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-09-30 621440]
"EeeStorageBackup"=C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2009-11-26 1732608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-09-01 323584]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2916584]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-20 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-20 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-20 415256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-05 136176]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"uTorrent"=C:\Users\David\Desktop\uTorrent.exe [2010-05-04 319280]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"Mousotron"=C:\Program Files (x86)\Mousotron\Mousotron.exe [2011-02-02 525312]
"BitComet"=C:\Program Files (x86)\BitComet\BitComet.exe [2011-01-27 12336432]
"ICQ"=C:\Program Files (x86)\ICQ7.4\ICQ.exe [2011-04-03 119608]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2009-05-28 89600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2010-02-10 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NB Probe]
C:\Program Files\ASUS\NB Probe\NBProbe.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\David\Desktop\uTorrent.exe [2010-05-04 319280]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-09-17 2245120]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
"jswtrayutil"=C:\Program Files (x86)\TP-LINK\QSS\jswtrayutil.exe [2009-09-24 32871]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"Malwarebytes' Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2011-04-15 16:08:43 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-15 16:08:42 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-04-14 21:48:52 ----D---- C:\Users\David\AppData\Roaming\Nvu
2011-04-14 21:46:54 ----D---- C:\Program Files (x86)\Nvu
2011-04-14 21:46:29 ----D---- C:\Program Files (x86)\PSPad editor
2011-04-14 21:28:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-04-14 20:41:39 ----D---- C:\Users\David\AppData\Roaming\BatteryBar
2011-04-14 20:41:38 ----D---- C:\Program Files\BatteryBar
2011-04-14 19:31:33 ----D---- C:\Program Files (x86)\Lavalys
2011-04-12 22:05:55 ----D---- C:\Program Files (x86)\DsNET Corp
2011-04-12 19:18:41 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-12 19:18:40 ----A---- C:\Windows\system32\mfc42.dll
2011-04-12 19:18:39 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-04-12 19:18:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-04-12 19:18:38 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-12 19:18:37 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-04-12 19:18:37 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-04-12 19:18:37 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-12 19:18:37 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-12 19:18:37 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-12 19:18:37 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-12 19:18:36 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-04-12 19:18:36 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-12 19:18:36 ----A---- C:\Windows\system32\atmfd.dll
2011-04-12 19:18:35 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-04-12 19:18:35 ----A---- C:\Windows\system32\atmlib.dll
2011-04-12 19:18:34 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-04-12 19:18:34 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-12 19:18:33 ----A---- C:\Windows\system32\win32k.sys
2011-04-12 19:18:31 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-12 19:18:30 ----A---- C:\Windows\system32\winresume.exe
2011-04-12 19:18:30 ----A---- C:\Windows\system32\winload.exe
2011-04-12 19:18:30 ----A---- C:\Windows\system32\kdusb.dll
2011-04-12 19:18:30 ----A---- C:\Windows\system32\kdcom.dll
2011-04-12 19:18:30 ----A---- C:\Windows\system32\kd1394.dll
2011-04-12 19:17:13 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-12 19:17:13 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-12 19:17:13 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-12 19:17:13 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-10 14:24:32 ----D---- C:\Program Files (x86)\ArcSoft
2011-04-09 14:07:03 ----D---- C:\Users\David\AppData\Roaming\Miranda
2011-04-08 07:46:20 ----D---- C:\Opera
2011-04-08 07:37:00 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-04-08 07:31:59 ----D---- C:\Fraps
2011-04-08 07:26:44 ----D---- C:\Program Files (x86)\GamePark
2011-04-08 07:24:58 ----D---- C:\Program Files (x86)\HyperCam 3
2011-04-08 07:16:39 ----D---- C:\Program Files (x86)\FreeTime
2011-04-08 07:14:20 ----D---- C:\Program Files (x86)\BitComet
2011-04-08 07:08:54 ----D---- C:\Users\David\AppData\Roaming\Convivea
2011-04-08 07:08:54 ----D---- C:\Program Files (x86)\Bit Che
2011-04-07 22:21:36 ----D---- C:\Users\David\AppData\Roaming\.minecraft
2011-04-03 17:23:00 ----D---- C:\Program Files (x86)\ICQ7.4
2011-04-02 12:41:22 ----A---- C:\Windows\SYSWOW64\frapsvid.dll
2011-04-02 12:41:20 ----A---- C:\Windows\system32\frapsv64.dll
2011-03-31 23:25:34 ----D---- C:\Users\David\AppData\Roaming\Mount&Blade
2011-03-31 23:12:27 ----D---- C:\Users\David\AppData\Roaming\EurekaLog
2011-03-31 23:11:13 ----D---- C:\Program Files (x86)\Mousotron
2011-03-31 22:33:17 ----D---- C:\.jagex_cache_32
2011-03-21 16:33:34 ----D---- C:\Program Files\Zrychleni Pocitace
2011-03-21 16:04:14 ----D---- C:\Users\David\AppData\Roaming\Google
2011-03-17 08:58:52 ----D---- C:\Program Files (x86)\Conduit
2011-03-17 08:58:50 ----D---- C:\Program Files (x86)\Zynga
2011-03-16 20:05:59 ----D---- C:\rsit
2011-03-15 19:57:58 ----D---- C:\ProgramData\POPWWPROFILES
2011-03-15 16:52:05 ----D---- C:\Windows\SYSWOW64\ShellExt
2011-03-15 16:52:05 ----D---- C:\Windows\system32\ShellExt
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-03-15 16:45:58 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\url.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-03-15 16:45:57 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\wininet.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\urlmon.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-03-15 16:45:57 ----A---- C:\Windows\system32\msrating.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\msls31.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\jsproxy.dll
2011-03-15 16:45:57 ----A---- C:\Windows\system32\iertutil.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\wextract.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\webcheck.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\vbscript.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\url.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\pngfilt.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\occache.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\mshtmler.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\mshtmled.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\mshtml.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\mshta.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\msfeedssync.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\msfeeds.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\licmgr10.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\jscript9.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\jscript.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\inseng.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\imgutil.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iexpress.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieUnatt.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieui.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iesysprep.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iesetup.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iernonce.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iepeers.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieframe.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\iedkcs32.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieapfltr.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieakui.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieaksie.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ieakeng.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\ie4uinit.exe
2011-03-15 16:45:56 ----A---- C:\Windows\system32\icardie.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\dxtrans.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\dxtmsft.dll
2011-03-15 16:45:56 ----A---- C:\Windows\system32\admparse.dll
2011-03-15 00:44:02 ----A---- C:\Windows\SYSWOW64\GLaux.dll
2011-03-15 00:44:01 ----D---- C:\Program Files\The Matrix Reloaded
2011-03-15 00:38:34 ----D---- C:\Program Files (x86)\UselessCreations
2011-03-14 16:50:03 ----AD---- C:\.Trash-1000
2011-03-09 00:53:27 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-03-09 00:53:27 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-03-09 00:53:27 ----A---- C:\Windows\SYSWOW64\java.exe
2011-03-09 00:42:29 ----A---- C:\Windows\system32\FntCache.dll
2011-03-09 00:42:28 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-03-09 00:42:28 ----A---- C:\Windows\system32\DWrite.dll
2011-03-09 00:42:27 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-03-09 00:42:27 ----A---- C:\Windows\system32\EncDec.dll
2011-03-09 00:42:27 ----A---- C:\Windows\system32\d2d1.dll
2011-03-09 00:42:27 ----A---- C:\Windows\system32\CPFilters.dll
2011-03-09 00:42:26 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-03-09 00:42:26 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-03-09 00:42:25 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-03-09 00:42:25 ----A---- C:\Windows\system32\sbe.dll
2011-03-09 00:42:23 ----A---- C:\Windows\system32\mstscax.dll
2011-03-09 00:42:22 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-03-09 00:42:22 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-03-09 00:42:22 ----A---- C:\Windows\system32\mstsc.exe
2011-03-07 22:19:05 ----D---- C:\Program Files (x86)\winMd5Sum
2011-03-06 12:49:27 ----D---- C:\Program Files (x86)\Ubisoft
2011-03-06 12:47:55 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-03-06 12:47:53 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-03-04 21:28:57 ----D---- C:\Program Files (x86)\RocketDock
2011-03-02 20:49:50 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-03-01 22:33:58 ----D---- C:\Users\David\AppData\Roaming\Rovio
2011-02-26 22:50:51 ----D---- C:\Users\David\AppData\Roaming\SPORE
2011-02-24 00:06:21 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-02-24 00:06:21 ----A---- C:\Windows\system32\wcncsvc.dll
2011-02-23 21:09:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-02-23 21:09:26 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-15 21:54:33 ----D---- C:\ProgramData\BioWare
2011-02-15 21:30:22 ----D---- C:\Windows\1C4551A64743409391E41477CD655043.TMP
2011-02-14 15:44:40 ----D---- C:\Program Files (x86)\Feedback Tool
2011-02-13 00:48:41 ----D---- C:\Downloads
2011-02-09 22:30:09 ----D---- C:\ProgramData\TamoSoft
2011-02-08 20:39:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll_old0
2011-02-08 20:35:53 ----A---- C:\Windows\system32\upnp.dll
2011-02-08 20:35:53 ----A---- C:\Windows\system32\msxml6.dll
2011-02-08 20:35:53 ----A---- C:\Windows\system32\msxml3.dll
2011-02-08 20:35:52 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-02-08 20:35:51 ----A---- C:\Windows\SYSWOW64\urlmon.dll_old0
2011-02-08 20:35:50 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-02-08 20:35:50 ----A---- C:\Windows\system32\winhttp.dll
2011-02-08 20:35:49 ----A---- C:\Windows\SYSWOW64\wininet.dll_old0
2011-02-08 20:35:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-02-08 20:35:49 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-08 20:35:49 ----A---- C:\Windows\system32\davclnt.dll
2011-02-08 20:35:47 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-02-08 20:35:47 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-02-08 20:35:47 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-02-08 20:35:47 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-02-08 20:35:47 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-02-08 20:35:47 ----A---- C:\Windows\system32\wscsvc.dll
2011-02-08 20:35:47 ----A---- C:\Windows\system32\wscapi.dll
2011-02-08 20:35:47 ----A---- C:\Windows\system32\slwga.dll
2011-02-08 20:32:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-02-08 20:32:36 ----A---- C:\Windows\system32\kerberos.dll
2011-02-08 20:32:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-08 20:32:11 ----A---- C:\Windows\system32\ntdll.dll
2011-02-08 20:32:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-02-08 20:32:10 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-02-08 20:32:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-02-08 20:31:50 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-08 20:31:50 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-08 20:31:50 ----A---- C:\Windows\system32\cdd.dll
2011-02-08 20:31:47 ----A---- C:\Windows\system32\winsrv.dll
2011-02-04 11:58:30 ----D---- C:\Windows\Options
2011-02-04 11:50:16 ----A---- C:\Windows\system32\drivers\jswpslwfx.sys
2011-02-04 11:50:11 ----D---- C:\Program Files (x86)\TP-LINK
2011-02-04 11:49:06 ----D---- C:\ProgramData\Atheros
2011-02-03 14:58:58 ----RA---- C:\Windows\system32\athurx.sys
2011-02-03 14:58:58 ----A---- C:\Windows\system32\drivers\athurx.sys
2011-02-03 14:58:41 ----D---- C:\ProgramData\TP-LINK
2011-02-01 22:17:58 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-02-01 22:17:07 ----D---- C:\Windows\SYSWOW64\URTTEMP
2011-02-01 21:17:16 ----A---- C:\Windows\iun6002ev.exe
2011-01-30 21:24:07 ----D---- C:\Program Files (x86)\Microsoft Works
2011-01-30 21:23:55 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2011-01-30 21:23:48 ----D---- C:\Windows\PCHEALTH
2011-01-29 19:25:11 ----D---- C:\Users\David\AppData\Roaming\IObit
2011-01-29 19:25:11 ----D---- C:\Program Files (x86)\IObit
2011-01-22 22:12:38 ----A---- C:\Windows\IsUn0407.exe
2011-01-21 21:48:14 ----D---- C:\ProgramData\Blizzard Entertainment
2011-01-20 21:04:18 ----D---- C:\Program Files (x86)\World of Warcraft
2011-01-19 22:16:30 ----D---- C:\ProgramData\IObit
2011-01-19 20:54:44 ----D---- C:\Users\David\AppData\Roaming\fretsonfire
2011-01-19 18:50:24 ----HD---- C:\Windows\AxInstSV

======List of files/folders modified in the last 3 months======

2011-04-15 19:27:50 ----D---- C:\Windows\Temp
2011-04-15 19:27:33 ----D---- C:\Program Files\trend micro
2011-04-15 19:26:50 ----D---- C:\Windows\system32\config
2011-04-15 19:26:11 ----D---- C:\Users\David\AppData\Roaming\BitComet
2011-04-15 19:20:54 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2011-04-15 19:00:22 ----D---- C:\Windows\system32\Tasks
2011-04-15 18:29:31 ----D---- C:\Windows\SysWOW64
2011-04-15 18:29:31 ----D---- C:\Windows\System32
2011-04-15 18:29:30 ----D---- C:\Windows\winsxs
2011-04-15 18:27:41 ----SHD---- C:\System Volume Information
2011-04-15 18:24:24 ----D---- C:\Windows\Microsoft.NET
2011-04-15 18:24:21 ----RSD---- C:\Windows\assembly
2011-04-15 18:17:33 ----D---- C:\Windows\debug
2011-04-15 18:17:32 ----A---- C:\Windows\system32\MRT.exe
2011-04-15 16:40:13 ----D---- C:\Users\David\AppData\Roaming\Skype
2011-04-15 16:08:20 ----D---- C:\Users\David\AppData\Roaming\skypePM
2011-04-15 06:28:51 ----D---- C:\Windows
2011-04-14 23:51:01 ----D---- C:\Users\David\AppData\Roaming\ICQ
2011-04-14 22:47:25 ----D---- C:\Windows\Tasks
2011-04-14 22:47:25 ----D---- C:\Windows\system32\wfp
2011-04-14 22:47:23 ----D---- C:\Windows\system32\wbem
2011-04-14 22:45:40 ----D---- C:\Windows\system32\DriverStore
2011-04-14 22:45:40 ----D---- C:\Windows\system32\drivers
2011-04-14 22:45:40 ----D---- C:\Windows\system32\catroot2
2011-04-14 22:45:40 ----D---- C:\Windows\inf
2011-04-14 22:45:38 ----D---- C:\Windows\system32\CodeIntegrity
2011-04-14 22:45:38 ----D---- C:\ProgramData\P4G
2011-04-14 22:45:25 ----HD---- C:\ProgramData
2011-04-14 22:45:20 ----D---- C:\Windows\registration
2011-04-14 22:45:03 ----D---- C:\Windows\system32\catroot
2011-04-14 22:44:18 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2011-04-14 22:44:11 ----RD---- C:\Program Files
2011-04-14 22:44:08 ----RD---- C:\Program Files (x86)
2011-04-14 20:58:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-14 20:45:48 ----A---- C:\Windows\system32\AutoRunFilter.ini
2011-04-13 23:28:57 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-04-13 18:20:03 ----SHD---- C:\Windows\Installer
2011-04-13 18:20:03 ----HD---- C:\Config.Msi
2011-04-13 06:45:08 ----D---- C:\Windows\system32\Boot
2011-04-12 19:29:08 ----A---- C:\Windows\win.ini
2011-04-10 16:45:43 ----D---- C:\Windows\system32\NDF
2011-04-08 07:49:20 ----A---- C:\Windows\system32\ServiceFilter.ini
2011-04-08 07:35:21 ----D---- C:\Users\David\AppData\Roaming\esmska
2011-04-08 07:34:43 ----D---- C:\Esmska-0.20.0
2011-04-08 07:25:00 ----D---- C:\Program Files (x86)\Common Files
2011-04-08 07:24:02 ----D---- C:\Scorpions WinCheater
2011-04-07 22:34:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-04-04 16:20:35 ----D---- C:\Windows\twain_32
2011-03-29 21:38:10 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-03-29 13:48:30 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2011-03-29 10:33:25 ----D---- C:\Users\David\AppData\Roaming\Azureus
2011-03-28 19:05:45 ----D---- C:\Windows\rescache
2011-03-18 20:50:27 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-03-18 20:39:29 ----D---- C:\Windows\SYSWOW64\drivers
2011-03-15 21:54:34 ----D---- C:\Program Files\Internet Explorer
2011-03-15 19:13:51 ----D---- C:\Windows\Logs
2011-03-15 16:48:24 ----D---- C:\Program Files (x86)\Internet Explorer
2011-03-15 16:48:22 ----D---- C:\Windows\servicing
2011-03-15 16:47:54 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-03-15 16:47:53 ----D---- C:\Windows\system32\cs-CZ
2011-03-15 16:46:28 ----D---- C:\Windows\SYSWOW64\migration
2011-03-15 16:46:28 ----D---- C:\Windows\SYSWOW64\en-US
2011-03-15 16:46:26 ----D---- C:\Windows\system32\migration
2011-03-15 16:46:26 ----D---- C:\Windows\system32\en-US
2011-03-15 16:46:26 ----D---- C:\Windows\PolicyDefinitions
2011-03-15 16:44:04 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2011-03-15 00:39:53 ----D---- C:\Windows\SYSWOW64\ASUS_Screensaver dir
2011-03-10 00:11:21 ----RD---- C:\Users
2011-03-09 00:53:19 ----D---- C:\Program Files (x86)\Java
2011-03-06 23:51:57 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2011-03-06 13:05:54 ----D---- C:\ProgramData\Ubisoft
2011-03-02 20:21:13 ----D---- C:\Windows\Minidump
2011-03-01 22:12:47 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2011-02-21 19:26:44 ----D---- C:\Windows\system32\wdi
2011-02-17 16:46:59 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-02-15 22:23:33 ----D---- C:\ProgramData\Media Center Programs
2011-02-02 22:40:23 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-02-02 19:11:20 ----N---- C:\Windows\system32\MpSigStub.exe
2011-01-30 21:26:47 ----SD---- C:\ProgramData\Microsoft
2011-01-30 21:26:45 ----A---- C:\Windows\ODBC.INI
2011-01-30 21:25:09 ----RSD---- C:\Windows\Fonts
2011-01-30 21:25:00 ----D---- C:\Windows\IME
2011-01-30 21:24:56 ----D---- C:\Windows\ShellNew
2011-01-30 21:24:13 ----D---- C:\Program Files (x86)\Microsoft Office
2011-01-30 21:23:49 ----D---- C:\Windows\Help
2011-01-30 21:23:48 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-01-30 21:22:46 ----D---- C:\Windows\system
2011-01-22 00:45:54 ----D---- C:\Users\David\AppData\Roaming\HpUpdate
2011-01-19 18:50:38 ----D---- C:\Windows\Downloaded Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2010-02-10 35384]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-08-06 408600]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2009-02-03 75384]
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\Windows\System32\drivers\sfdrv01a.sys [2009-02-03 77432]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2007-02-08 107384]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-04-08 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 JSWPSLWF;JumpStart Wireless Filter Driver; C:\Windows\system32\DRIVERS\jswpslwfx.sys [2009-08-14 26624]
R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2009-09-01 157712]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-07-01 43168]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-10-15 117760]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-12-20 24152]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-07-09 1222144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2006-07-10 22936]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-04-07 310728]
S2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-21 44032]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
S3 ipswuio;ipswuio; C:\Windows\System32\DRIVERS\ipswuio.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2010-10-15 35112]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 jswpbapi;JumpStart Push-Button Service; C:\Program Files (x86)\TP-LINK\QSS\jswpbapi.exe [2009-08-14 265216]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 OberonGameConsoleService;Oberon Media Game Console service; C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [2009-09-15 44312]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-03-29 75064]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 136176]
S2 ioloFileInfoList;iolo FileInfoList Service; C:\Program Files (x86)\iolo\common\lib\ioloServiceManager.exe []
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:\Windows\system32\sfrem02.exe [2006-05-11 607352]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 42360]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 jswpsapi;JumpStart Wi-Fi Protected Setup; C:\Program Files (x86)\TP-LINK\QSS\jswpsapi.exe [2009-08-14 954368]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1255736]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[David777]

ComboFix 11-04-16.01 - David 17.04.2011 11:38:17.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4061.2334 [GMT 2:00]
Spuštěný z: c:\users\David\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\HyperCam Toolbar\tbHElper.dll
c:\programdata\FullRemove.exe
c:\users\David\AppData\Local\Temp\nscB1E8.tmp
c:\users\David\AppData\Local\Temp\nsxB1C7.tmp
c:\users\David\AppData\Roaming\EurekaLog
c:\users\David\AppData\Roaming\EurekaLog\EurekaLog.ini
c:\users\David\AppData\Roaming\inst.exe
c:\windows\SysWow64\CONFIG.exe
c:\windows\SysWow64\configs
c:\windows\SysWow64\configs\p1controll.cfg
c:\windows\SysWow64\configs\p2controll.cfg
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-17 do 2011-04-17 )))))))))))))))))))))))))))))))
.
.
2011-04-17 09:53 . 2011-04-17 09:53 -------- d-----w- c:\users\Guest\AppData\Local\temp
2011-04-17 09:53 . 2011-04-17 09:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-15 15:10 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1B45F29E-F969-4514-8FC6-EA450519F705}\mpengine.dll
2011-04-15 14:08 . 2011-02-24 06:30 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-15 14:08 . 2011-02-24 05:32 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-04-14 19:48 . 2011-04-14 20:45 -------- d-----w- c:\users\David\AppData\Roaming\Nvu
2011-04-14 19:46 . 2011-04-14 20:45 -------- d-----w- c:\program files (x86)\Nvu
2011-04-14 19:46 . 2011-04-14 20:45 -------- d-----w- c:\program files (x86)\PSPad editor
2011-04-14 19:30 . 2011-04-14 20:44 -------- d-----w- c:\users\David\AppData\Local\Mozilla
2011-04-14 18:41 . 2011-04-17 08:51 -------- d-----w- c:\users\David\AppData\Roaming\BatteryBar
2011-04-14 18:41 . 2011-04-17 09:08 -------- d-----w- c:\program files\BatteryBar
2011-04-14 17:31 . 2011-04-14 20:44 -------- d-----w- c:\program files (x86)\Lavalys
2011-04-12 20:06 . 2011-04-12 20:06 -------- d-----w- c:\users\David\AppData\Local\QuickStores
2011-04-12 20:05 . 2011-04-12 20:05 -------- d-----w- c:\program files (x86)\DsNET Corp
2011-04-12 17:17 . 2011-02-23 05:15 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-12 17:17 . 2011-02-23 05:15 286720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-12 17:17 . 2011-02-23 05:15 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-12 17:17 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-10 12:24 . 2011-04-10 12:24 -------- d-----w- c:\program files (x86)\ArcSoft
2011-04-09 12:07 . 2011-04-09 12:07 -------- d-----w- c:\users\David\AppData\Roaming\Miranda
2011-04-08 05:46 . 2011-04-08 05:46 -------- d-----w- C:\Opera
2011-04-08 05:37 . 2011-04-08 05:37 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2011-04-08 05:31 . 2011-04-08 05:32 -------- d-----w- C:\Fraps
2011-04-08 05:26 . 2011-04-08 05:26 -------- d-----w- c:\program files (x86)\GamePark
2011-04-08 05:25 . 2011-04-08 05:25 -------- d-----w- c:\program files (x86)\Common Files\Solveig Multimedia
2011-04-08 05:24 . 2011-04-08 05:25 -------- d-----w- c:\program files (x86)\HyperCam 3
2011-04-08 05:16 . 2011-04-08 05:16 -------- d-----w- c:\program files (x86)\FreeTime
2011-04-08 05:14 . 2011-04-08 05:14 -------- d-----w- c:\program files (x86)\BitComet
2011-04-08 05:08 . 2011-04-08 05:08 -------- d-----w- c:\program files (x86)\Bit Che
2011-04-08 05:08 . 2011-04-08 05:08 -------- d-----w- c:\users\David\AppData\Roaming\Convivea
2011-04-07 20:21 . 2011-04-07 20:22 -------- d-----w- c:\users\David\AppData\Roaming\.minecraft
2011-04-03 15:23 . 2011-04-03 15:26 -------- d-----w- c:\program files (x86)\ICQ7.4
2011-04-02 10:41 . 2011-04-02 10:41 86016 ----a-w- c:\windows\SysWow64\frapsvid.dll
2011-04-02 10:41 . 2011-04-02 10:41 84992 ----a-w- c:\windows\system32\frapsv64.dll
2011-03-31 21:25 . 2011-03-31 21:29 -------- d-----w- c:\users\David\AppData\Roaming\Mount&Blade
2011-03-31 21:11 . 2011-03-31 21:11 -------- d-----w- c:\program files (x86)\Mousotron
2011-03-31 20:33 . 2011-03-31 20:36 -------- d-----w- C:\.jagex_cache_32
2011-03-30 18:14 . 2011-03-30 18:14 1 ----a-w- c:\windows\SysWow64\SI.bin
2011-03-21 14:33 . 2011-03-21 14:40 -------- d-----w- c:\program files\Zrychleni Pocitace
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-16 21:54 . 2010-06-07 12:30 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-04-16 21:54 . 2010-06-07 12:30 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-04-07 20:31 . 2010-07-01 13:35 310728 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-03-29 19:38 . 2010-06-07 12:30 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-03-29 11:48 . 2010-07-31 21:26 669184 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-03-15 14:45 . 2011-03-15 14:45 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-03-15 14:45 . 2011-03-15 14:45 1797632 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-03-15 14:45 . 2011-03-15 14:45 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-03-15 14:45 . 2011-03-15 14:45 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-03-15 14:45 . 2011-03-15 14:45 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-03-15 14:45 . 2011-03-15 14:45 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-03-15 14:45 . 2011-03-15 14:45 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-03-15 14:45 . 2011-03-15 14:45 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-03-15 14:45 . 2011-03-15 14:45 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-03-15 14:45 . 2011-03-15 14:45 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-03-15 14:45 . 2011-03-15 14:45 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-03-15 14:45 . 2011-03-15 14:45 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-03-15 14:45 . 2011-03-15 14:45 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-03-15 14:45 . 2011-03-15 14:45 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-03-15 14:45 . 2011-03-15 14:45 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-03-15 14:45 . 2011-03-15 14:45 222208 ----a-w- c:\windows\system32\msls31.dll
2011-03-15 14:45 . 2011-03-15 14:45 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-03-15 14:45 . 2011-03-15 14:45 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-03-15 14:45 . 2011-03-15 14:45 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-03-15 14:45 . 2011-03-15 14:45 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-03-15 14:45 . 2011-03-15 14:45 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-03-15 14:45 . 2011-03-15 14:45 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-03-15 14:45 . 2011-03-15 14:45 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-03-15 14:45 . 2011-03-15 14:45 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-03-15 14:45 . 2011-03-15 14:45 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-03-15 14:45 . 2011-03-15 14:45 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-03-15 14:45 . 2011-03-15 14:45 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-03-15 14:45 . 2011-03-15 14:45 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-03-15 14:45 . 2011-03-15 14:45 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-03-15 14:45 . 2011-03-15 14:45 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-03-15 14:45 . 2011-03-15 14:45 448512 ----a-w- c:\windows\system32\html.iec
2011-03-15 14:45 . 2011-03-15 14:45 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-03-15 14:45 . 2011-03-15 14:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-03-15 14:45 . 2011-03-15 14:45 2303488 ----a-w- c:\windows\system32\jscript9.dll
2011-03-15 14:45 . 2011-03-15 14:45 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-03-15 14:45 . 2011-03-15 14:45 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-03-15 14:45 . 2011-03-15 14:45 160256 ----a-w- c:\windows\system32\wextract.exe
2011-03-15 14:45 . 2011-03-15 14:45 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-03-15 14:45 . 2011-03-15 14:45 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-03-15 14:45 . 2011-03-15 14:45 12288 ----a-w- c:\windows\system32\mshta.exe
2011-03-15 14:45 . 2011-03-15 14:45 114176 ----a-w- c:\windows\system32\admparse.dll
2011-03-15 14:45 . 2011-03-15 14:45 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-03-14 22:44 . 2011-03-14 22:44 1386496 ----a-w- c:\windows\SysWow64\GLaux.dll
2011-03-14 22:44 . 2011-03-14 22:44 710796 ----a-w- c:\windows\SysWow64\Matrix2Screensaver.scr
2011-02-19 06:37 . 2011-03-08 22:42 1135104 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-08 22:42 1540608 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-08 22:42 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-08 22:42 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-08 22:42 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-02 20:40 . 2010-09-08 19:40 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-02-02 17:11 . 2010-09-26 19:46 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-02-01 19:16 . 2011-02-01 19:17 720896 ----a-w- c:\windows\iun6002ev.exe
2011-01-26 06:53 . 2011-02-08 18:31 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-26 06:53 . 2011-02-08 18:31 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-01-26 06:31 . 2011-02-08 18:31 144384 ----a-w- c:\windows\system32\cdd.dll
2009-04-08 18:31 . 2009-04-08 18:31 106496 ----a-w- c:\program files (x86)\Common Files\CPInstallAction.dll
2008-08-12 05:45 . 2008-08-12 05:45 155648 ----a-w- c:\program files (x86)\Common Files\MSIactionall.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\tbVuze.dll" [2010-11-23 3908192]
"{7b13ec3e-999a-4b70-b9cb-2617b8323822}"= "c:\program files (x86)\Zynga\tbZyng.dll" [2010-12-01 2735200]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CLASSES_ROOT\clsid\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-11-23 17:55 3908192 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
2010-12-01 10:27 2735200 ----a-w- c:\program files (x86)\Zynga\tbZyng.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2010-11-23 17:55 3908192 ----a-w- c:\program files (x86)\Vuze_Remote\tbVuze.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\tbVuze.dll" [2010-11-23 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-11-23 3908192]
"{7b13ec3e-999a-4b70-b9cb-2617b8323822}"= "c:\program files (x86)\Zynga\tbZyng.dll" [2010-12-01 2735200]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 01:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"uTorrent"="c:\users\David\Desktop\uTorrent.exe" [2010-05-04 319280]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Mousotron"="c:\program files (x86)\Mousotron\Mousotron.exe" [2011-02-02 525312]
"BitComet"="c:\program files (x86)\BitComet\BitComet.exe" [2011-01-27 12336432]
"ICQ"="c:\program files (x86)\ICQ7.4\ICQ.exe" [2011-04-03 119608]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"ShowBatteryBar"="c:\program files\BatteryBar\ShowBatteryBar.exe" [2009-05-28 89600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-09-17 2245120]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
"jswtrayutil"="c:\program files (x86)\TP-LINK\QSS\jswtrayutil.exe" [2009-09-24 32871]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-12-20 443728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2010-2-10 12862]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-2-10 156952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 136176]
R2 ioloFileInfoList;iolo FileInfoList Service;c:\program files (x86)\iolo\common\lib\ioloServiceManager.exe [x]
R2 sfrem02;FrontLine Drivers Auto Removal (v2);c:\windows\system32\sfrem02.exe svc [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [x]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;d:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
R3 ipswuio;ipswuio;c:\windows\system32\DRIVERS\ipswuio.sys [x]
R3 jswpsapi;JumpStart Wi-Fi Protected Setup;c:\program files (x86)\TP-LINK\QSS\jswpsapi.exe [2009-08-14 954368]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 JSWPSLWF;JumpStart Wireless Filter Driver;c:\windows\system32\DRIVERS\jswpslwfx.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S2 jswpbapi;JumpStart Push-Button Service;c:\program files (x86)\TP-LINK\QSS\jswpbapi.exe [2009-08-14 265216]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [2009-09-15 44312]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;c:\program files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-17 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files (x86)\IObit\Advanced SystemCare 3\AutoSweep.exe [2011-01-29 13:11]
.
2011-04-17 c:\windows\Tasks\AWC Startup.job
- c:\program files (x86)\IObit\Advanced SystemCare 3\AWC.exe [2011-01-29 12:24]
.
2011-04-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 19:32]
.
2011-04-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 19:32]
.
2011-04-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2239340465-1001483360-3508777747-1000Core.job
- c:\users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-05 19:06]
.
2011-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2239340465-1001483360-3508777747-1000UA.job
- c:\users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-05 19:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
"EeeStorageBackup"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2009-11-26 1732608]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2916584]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-20 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-20 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-20 415256]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://search.qip.ru
mStart Page = hxxp://www.bigseekpro.com/hypercam/{3E64663D-2 ... 38A10A0497}
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - d:\novslo~1\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - c:\program files (x86)\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - c:\program files (x86)\BitComet\BitComet.exe/AddAllLink.htm
IE: ????3?? - c:\users\David\AppData\Roaming\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\users\David\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://d1ylr6sba64qi3.cloudfront.net/global/bin/srldetect_cyri_4.1.71.0.cab
FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\fmonmo24.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
Toolbar-Locked - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{7B13EC3E-999A-4B70-B9CB-2617B8323822} - (no file)
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
AddRemove-Mafia Game - c:\windows\system32\MafiaSetup.exe
AddRemove-Might and Magic IX - d:\hry\Might and Magic IX\Might and Magic IX.isu
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2239340465-1001483360-3508777747-1000\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@Allowed: (Read) (RestrictedCode)
@="c:\\Users\\David\\AppData\\Roaming\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022
.
[HKEY_USERS\S-1-5-21-2239340465-1001483360-3508777747-1000\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@Allowed: (Read) (RestrictedCode)
@="c:\\Users\\David\\AppData\\Roaming\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3
.
[HKEY_USERS\S-1-5-21-2239340465-1001483360-3508777747-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{304F5804-9504-88F6-5949-C74AF24A1F65}*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2239340465-1001483360-3508777747-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:97,c2,1d,2e,f6,ae,cc,3a,5b,7d,d5,c3,77,3d,23,2e,24,2f,da,9d,bc,71,bd,
d5,3f,2a,34,92,77,57,ed,c8,bf,59,c6,0d,67,02,31,c2,90,8a,4f,c3,c8,b7,bc,59,\
"??"=hex:fb,09,2f,39,5b,29,52,8f,5e,51,85,2b,21,78,fd,45
.
[HKEY_USERS\S-1-5-21-2239340465-1001483360-3508777747-1000\Software\SecuROM\License information*]
"datasecu"=hex:ee,44,46,49,cd,3f,6c,4c,cd,26,35,ba,15,7d,07,37,56,da,c1,8d,08,
ff,fc,eb,1a,69,42,99,f4,9c,07,4d,cb,de,08,19,95,b5,31,4f,0b,94,54,38,d0,d6,\
"rkeysecu"=hex:56,b7,27,92,cd,97,f6,10,d1,50,ba,38,3d,a4,3c,80
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-17 12:16:54
ComboFix-quarantined-files.txt 2011-04-17 10:16
.
Před spuštěním: Volných bajtů: 67 472 252 928
Po spuštění: Volných bajtů: 67 624 845 312
.
- - End Of File - - A4D3F9C1110D6784989744F3973C6739

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
c:\program files (x86)\Ask.com

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
[-HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[David777]

a je to díky moc, a ještě bych měl jeden problém, nějak mi blbne baterie... nebo spíše ukazatel baterie v pc... pač mi to ukazuje že mám opotřebení baterie 50% pak 70% před chvíli sem měl 12% a teď mi to píše 54% a pořád to tak skáče, a aj ukazatel nabitosti baterie mi tež blbne, přiládám aj screen z everestu... jestli bys prosím Tě nevěděl co z tím?

[Rudy]

Jak je akumulátor starý?

[David777]

přesně rok... ale ono to podle mě je opotřebované vážně jen na 12%... jen to prostě nějak blbne no (

[Rudy]

Podle mne mohou nastat jen 2 případy. Buď je vadný akumulátor, nebo zkuste reinstalovat zen kontrolní sw (pokud není systémový).

[David777]

k té druhé možnosti... to se dělá jak?

[Rudy]

Pokud software, který kontroluje akumulátor není systémový, lze jej reinstalovat z instal. souboru. Je-li systémový, pomůže jen oprava systému.

[David777]

aha jo už to chápu, no a kde se ten software nachází?

[Rudy]

Především musím vědět, zda máte akumulátor kotrolovaný systémem, nebo na to máte nějakou instalovanou utilitu. V případě, že platí druhá možnost, musíte si opatřit instalační soubor a utilitu reinstalovat.

[David777]

aha no to ja nevim... ale teď se to tváří že se to opravilo... uroveň opotřebení 6% má teď a funguje to docela dobře

[David777]

a už zase to vypadá že to je skažene... x//

[Rudy]

Ještě můžete zkusit obnovu systému k datu, kdy korektně fungoval.