VIRY.CZ

Zdravím, včera mi začal nějak blbnout svchost.exe, když žere až 250MB paměti ... zkusil jsem najít návod na netu, jak se toho zbavit, ale moc mi to nepomohlo :/
RSIT log:


Logfile of random's system information tool 1.09 (written by random/random)
Run by LittleOmig at 2011-08-11 17:51:12
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 255 GB (55%) free of 462 GB
Total RAM: 4091 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:51:15, on 11.8.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\FlashGet\flashget.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\totalcmd\TOTALCMD.EXE
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Program Files\trend micro\LittleOmig.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\LittleOmig\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\LittleOmig\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [QIP Internet Guardian] C:\Users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files (x86)\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files (x86)\FlashGet\jc_link.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12502 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe"
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\Launch Manager\LManager.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\FlashGet\flashget.exe" /min
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
{D54FBCE1-0CB8-460B-AFF2-2300CB6302C9}
{C9B30310-0E71-4CE5-934B-90B4EDDD35BF}
{B0CD88AA-62DA-40E7-A8F6-D98E7D979D3F}
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4796.00A19160.1958562139 --ignored=" --type=renderer " /prefetch:3
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4796.00A192C0.1097598520 --ignored=" --type=renderer " /prefetch:3
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4796.079376E0.787832125 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\LITTLE~1\AppData\Local\Google\Chrome\APPLIC~1\130782~1.112\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\13.0.782.112\gcswf32.dll" --lang=cs --channel=4796.0790E540.541320114 --flash-broker=4980 /prefetch:4
"C:\totalcmd\TOTALCMD.EXE"
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\WLANExt.exe 157955872
\??\C:\Windows\system32\conhost.exe "-5472427111392553923-1201390346-158254388184433358719535333771409184482453253783
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4796.0BF5A840.858468907 /prefetch:3
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Users\LittleOmig\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4796.0B531C60.68792481 /prefetch:3
"C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe"
"C:\Windows\system32\NOTEPAD.EXE" C:\Program Files (x86)\Trend Micro\HijackThis\hijackthis.log
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe13_ Global\UsGthrCtrlFltPipeMssGthrPipe13 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\LittleOmig\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-07-04 978496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2011-07-14 1237240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl - C:\Program Files (x86)\FlashGet\jccatch.dll [2007-08-06 94308]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\LittleOmig\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-09-01 140752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-11 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class - C:\Program Files (x86)\FlashGet\getflash.dll [2007-05-18 163840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-07-04 978496]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-04-21 1535808]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2011-04-21 1000768]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll [2011-03-28 176936]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll [2011-03-28 176936]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2011-07-14 1237240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-15 9644576]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-05-25 585376]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-05-25 354464]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"QIP Internet Guardian"=C:\Users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe [2010-09-01 190928]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"SpywareTerminatorUpdate"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-08-11 3318784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-03-03 1300560]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-05-24 336384]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"SpywareTerminator"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-08-11 2557440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Loki\Loki.exe"="C:\Program Files\Loki\Loki.exe:*:Enabled:Loki"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2011-08-11 17:51:13 ----D---- C:\Program Files\trend micro
2011-08-11 17:51:12 ----D---- C:\rsit
2011-08-11 17:35:17 ----D---- C:\Program Files (x86)\Crawler
2011-08-11 17:35:12 ----D---- C:\Users\LittleOmig\AppData\Roaming\Spyware Terminator
2011-08-11 17:35:10 ----D---- C:\ProgramData\Spyware Terminator
2011-08-11 17:35:09 ----D---- C:\Program Files (x86)\Spyware Terminator
2011-08-11 17:15:24 ----D---- C:\Program Files (x86)\Trend Micro
2011-08-11 16:47:28 ----D---- C:\Windows\system32\catroot2
2011-08-11 16:46:22 ----A---- C:\WindowsXP-KB927891-v3-x86-ENU.exe
2011-08-11 16:46:21 ----A---- C:\windowsupdateagent30-x86.exe
2011-08-11 16:46:16 ----A---- C:\fix_svchost.bat
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-08-11 16:36:03 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\wininet.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\wextract.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\webcheck.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\vbscript.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\urlmon.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\url.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\pngfilt.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\occache.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\msrating.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\msls31.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\mshtmler.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\mshtml.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\mshta.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\msfeedssync.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\licmgr10.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\jscript9.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\jscript.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\inseng.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\imgutil.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iexpress.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieUnatt.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieui.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iesysprep.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iesetup.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iertutil.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iernonce.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iepeers.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieframe.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\iedkcs32.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieapfltr.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieapfltr.dat
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieakui.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieaksie.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ieakeng.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\ie4uinit.exe
2011-08-11 16:36:02 ----A---- C:\Windows\system32\icardie.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\dxtrans.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\dxtmsft.dll
2011-08-11 16:36:02 ----A---- C:\Windows\system32\admparse.dll
2011-08-11 16:27:24 ----SHD---- C:\Config.Msi
2011-08-11 16:17:40 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-08-11 16:17:40 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-08-11 16:17:40 ----A---- C:\Windows\system32\FntCache.dll
2011-08-11 16:17:40 ----A---- C:\Windows\system32\DWrite.dll
2011-08-11 16:17:40 ----A---- C:\Windows\system32\d2d1.dll
2011-08-11 15:51:53 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-08-11 15:51:52 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-08-11 15:51:52 ----A---- C:\Windows\SYSWOW64\java.exe
2011-08-11 15:51:35 ----D---- C:\Program Files (x86)\Java
2011-08-10 17:27:37 ----HD---- C:\60b8c4892ef9c97dd4
2011-08-10 12:55:19 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-10 12:55:19 ----A---- C:\Windows\system32\xmllite.dll
2011-08-10 12:55:18 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-10 12:55:18 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-10 12:55:18 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-10 12:55:18 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-10 12:55:16 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 12:55:09 ----A---- C:\Windows\system32\kernel32.dll
2011-08-10 12:55:09 ----A---- C:\Windows\system32\conhost.exe
2011-08-10 12:55:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-10 12:55:08 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\wow64win.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\wow64.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\winsrv.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-10 12:55:08 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 12:55:07 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-10 12:55:07 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-10 12:55:07 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-10 12:55:06 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-10 12:55:06 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-10 12:55:04 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-10 12:54:52 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-10 12:54:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-10 12:54:51 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-08 12:13:32 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-08-07 04:15:06 ----D---- C:\ProgramData\Symantec
2011-08-07 04:15:00 ----D---- C:\Windows\system32\drivers\NSSx64
2011-08-07 04:15:00 ----D---- C:\Program Files (x86)\Norton Security Scan
2011-08-07 04:14:58 ----D---- C:\ProgramData\Norton
2011-08-07 04:14:56 ----D---- C:\ProgramData\NortonInstaller
2011-08-07 04:14:56 ----D---- C:\Program Files (x86)\NortonInstaller
2011-08-06 14:29:53 ----D---- C:\Program Files (x86)\Alcohol Soft
2011-08-06 13:46:30 ----D---- C:\Users\LittleOmig\AppData\Roaming\ImgBurn
2011-08-06 13:32:31 ----D---- C:\Program Files (x86)\ImgBurn
2011-08-05 21:49:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-08-05 15:37:54 ----D---- C:\Users\LittleOmig\AppData\Roaming\PC Suite
2011-08-05 15:37:54 ----D---- C:\Users\LittleOmig\AppData\Roaming\Nokia
2011-08-05 15:37:54 ----D---- C:\ProgramData\PC Suite
2011-08-05 15:36:01 ----D---- C:\Program Files\DIFX
2011-08-05 15:35:59 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2011-08-05 15:35:57 ----DC---- C:\Windows\system32\DRVSTORE
2011-08-05 15:35:51 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2011-08-05 15:35:29 ----D---- C:\Program Files (x86)\Nokia
2011-08-05 15:34:44 ----D---- C:\ProgramData\Installations
2011-08-04 17:57:37 ----D---- C:\Program Files (x86)\DOSBox-0.74
2011-08-02 20:10:48 ----AH---- C:\Windows\SYSWOW64\mlfcache.dat
2011-08-01 20:05:31 ----D---- C:\Program Files\Loki
2011-08-01 12:09:33 ----D---- C:\Program Files (x86)\Left 4 Dead 2
2011-07-31 22:06:11 ----D---- C:\Program Files (x86)\VALVe
2011-07-31 20:55:57 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-07-31 20:55:53 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-07-31 20:55:53 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2011-07-31 20:50:33 ----D---- C:\Program Files (x86)\Activision
2011-07-31 20:45:46 ----SHD---- C:\Windows\ftpcache
2011-07-30 01:16:54 ----D---- C:\Program Files (x86)\AMP Font Viewer
2011-07-30 00:48:11 ----A---- C:\Windows\AutoKMS.exe
2011-07-30 00:39:00 ----D---- C:\Program Files\Common Files\DESIGNER
2011-07-30 00:38:17 ----D---- C:\Program Files\Microsoft Synchronization Services
2011-07-30 00:37:43 ----D---- C:\Windows\PCHEALTH
2011-07-30 00:37:42 ----D---- C:\Program Files\Microsoft Sync Framework
2011-07-30 00:37:42 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2011-07-30 00:36:08 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-07-30 00:34:44 ----D---- C:\Program Files\Microsoft Analysis Services
2011-07-30 00:34:44 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2011-07-30 00:34:13 ----D---- C:\Program Files (x86)\Microsoft Office
2011-07-30 00:34:06 ----D---- C:\Program Files\Microsoft Office
2011-07-30 00:34:05 ----D---- C:\ProgramData\Microsoft Help
2011-07-30 00:33:50 ----RHD---- C:\MSOCache
2011-07-24 13:24:44 ----D---- C:\Users\LittleOmig\AppData\Roaming\TS3Client
2011-07-24 13:24:32 ----D---- C:\Program Files\TeamSpeak 3 Client
2011-07-24 02:39:21 ----HD---- C:\jpeg
2011-07-20 16:07:49 ----A---- C:\Windows\DIIUnin.dat
2011-07-20 16:07:48 ----A---- C:\Windows\DIIUnin.pif
2011-07-20 16:07:48 ----A---- C:\Windows\DIIUnin.exe
2011-07-20 16:04:15 ----D---- C:\Program Files\Diablo 2 LOD
2011-07-20 15:41:40 ----D---- C:\Program Files\Diablo II
2011-07-20 14:39:35 ----A---- C:\Windows\SYSWOW64\CmdLineExt.dll
2011-07-19 22:48:19 ----D---- C:\Program Files (x86)\MSECache
2011-07-17 22:28:22 ----D---- C:\Users\LittleOmig\AppData\Roaming\LolClient
2011-07-17 21:14:28 ----D---- C:\Program Files (x86)\League of Legends
2011-07-17 21:13:32 ----D---- C:\ProgramData\PMB Files
2011-07-17 21:13:19 ----D---- C:\Program Files (x86)\Pando Networks
2011-07-17 17:51:40 ----D---- C:\ProgramData\TrackMania
2011-07-17 13:22:36 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-07-17 13:22:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-07-17 13:22:36 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-07-17 13:22:36 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-07-17 13:22:34 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-07-17 13:22:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-07-17 13:22:34 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-07-17 13:22:34 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-07-17 13:22:32 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-07-17 13:22:32 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-07-17 13:22:30 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-07-17 13:22:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-07-17 13:22:27 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-07-17 13:22:27 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-07-17 13:22:26 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-07-17 13:22:26 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-07-17 13:21:42 ----HD---- C:\Windows\msdownld.tmp
2011-07-17 13:21:42 ----D---- C:\Windows\SYSWOW64\directx
2011-07-17 12:17:26 ----D---- C:\Program Files (x86)\Atari
2011-07-17 01:58:12 ----D---- C:\Users\LittleOmig\AppData\Roaming\.BitTornado
2011-07-17 01:57:45 ----D---- C:\Program Files (x86)\BitTornado
2011-07-17 01:55:41 ----D---- C:\Program Files (x86)\Conduit
2011-07-17 01:55:39 ----D---- C:\Program Files (x86)\ConduitEngine
2011-07-17 01:55:39 ----A---- C:\Windows\SYSWOW64\ConduitEngine.tmp
2011-07-17 01:55:36 ----D---- C:\Program Files (x86)\uTorrentBar
2011-07-17 01:55:29 ----D---- C:\Program Files (x86)\uTorrent
2011-07-17 01:55:04 ----D---- C:\Users\LittleOmig\AppData\Roaming\uTorrent
2011-07-16 12:30:58 ----D---- C:\Program Files (x86)\Steam
2011-07-16 09:49:58 ----D---- C:\Program Files\CCleaner
2011-07-15 23:06:01 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-07-13 10:40:15 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-07-13 10:40:15 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-07-13 10:40:15 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-07-13 10:40:14 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-07-13 10:40:14 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-07-13 10:40:14 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-07-13 10:40:14 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-07-13 10:40:13 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-07-13 10:40:13 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-07-13 10:40:12 ----A---- C:\Windows\system32\win32k.sys
2011-07-13 10:40:07 ----A---- C:\Windows\system32\fsutil.exe
2011-07-13 10:40:07 ----A---- C:\Windows\system32\esent.dll
2011-07-13 10:40:07 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-07-13 10:40:06 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-07-13 10:40:06 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\storport.sys
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-07-13 10:40:06 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-07-12 20:57:23 ----D---- C:\ProgramData\boost_interprocess
2011-07-10 23:20:22 ----D---- C:\Program Files (x86)\Topaz Labs
2011-07-09 13:32:19 ----D---- C:\Program Files (x86)\EA GAMES
2011-07-08 17:08:14 ----D---- C:\Downloads
2011-07-08 14:19:02 ----D---- C:\Users\LittleOmig\AppData\Roaming\SecuROM
2011-07-08 13:53:44 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-07-08 13:53:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-07-08 13:53:44 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-07-08 13:53:44 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-07-08 13:53:42 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-07-08 13:53:42 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-07-08 13:52:07 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2011-07-08 13:52:07 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2011-07-08 13:52:07 ----A---- C:\Windows\system32\wrap_oal.dll
2011-07-08 13:52:07 ----A---- C:\Windows\system32\OpenAL32.dll
2011-07-08 13:41:14 ----D---- C:\Program Files (x86)\Deep Silver
2011-07-08 13:40:35 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2011-07-07 18:34:25 ----A---- C:\Windows\War3Unin.dat
2011-07-07 18:34:24 ----A---- C:\Windows\War3Unin.pif
2011-07-07 18:34:24 ----A---- C:\Windows\War3Unin.exe
2011-07-07 18:33:09 ----D---- C:\Program Files (x86)\Warcraft III
2011-07-07 12:43:31 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-07-07 02:46:17 ----D---- C:\Windows\Sun
2011-07-06 22:09:45 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-07-06 21:11:54 ----D---- C:\Program Files (x86)\Electronic Arts
2011-07-06 21:03:00 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-07-06 21:03:00 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-07-06 21:03:00 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-07-06 21:03:00 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-07-06 21:02:59 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-07-06 21:02:59 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-07-06 21:02:59 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-07-06 21:02:59 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-07-06 18:51:08 ----D---- C:\Users\LittleOmig\AppData\Roaming\Ubisoft
2011-07-06 18:51:08 ----D---- C:\ProgramData\Ubisoft
2011-07-06 18:44:24 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-07-06 18:44:24 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-07-06 18:44:24 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-07-06 18:44:24 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-07-06 18:44:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-07-06 18:44:23 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-07-06 18:44:19 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-07-06 18:44:18 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-07-06 18:44:18 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-07-06 18:44:15 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-07-06 18:44:15 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-07-06 18:44:09 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-07-06 18:44:09 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-07-06 18:44:09 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-07-06 18:44:09 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-07-06 18:44:08 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-07-06 18:44:08 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-07-06 18:44:08 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-07-06 18:44:08 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-07-06 18:44:07 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-07-06 18:44:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-07-06 18:44:07 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-07-06 18:44:07 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-07-06 18:44:07 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-07-06 18:44:07 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-07-06 18:31:23 ----D---- C:\Program Files (x86)\Ubisoft
2011-07-06 17:59:27 ----D---- C:\Users\LittleOmig\AppData\Roaming\FlashGet
2011-07-06 17:59:08 ----D---- C:\Program Files (x86)\FlashGet
2011-07-06 16:41:30 ----D---- C:\ProgramData\Sun
2011-07-06 16:41:17 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-07-06 15:29:36 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-07-06 15:23:57 ----D---- C:\Program Files\Adobe
2011-07-06 15:20:42 ----D---- C:\Program Files\Common Files\Adobe
2011-07-06 15:19:34 ----D---- C:\Program Files (x86)\Adobe Media Player
2011-07-06 15:17:36 ----D---- C:\Windows\SYSWOW64\Macromed
2011-07-06 15:13:38 ----D---- C:\Program Files (x86)\Adobe
2011-07-06 15:11:54 ----D---- C:\ProgramData\Adobe
2011-07-06 14:56:19 ----D---- C:\Windows\SYSWOW64\Wat
2011-07-06 14:56:19 ----D---- C:\Windows\system32\Wat
2011-07-06 14:54:18 ----A---- C:\Windows\system32\MRT.exe
2011-07-06 14:29:02 ----D---- C:\Komerční banka
2011-07-06 14:22:11 ----D---- C:\Program Files (x86)\The KMPlayer
2011-07-06 14:19:50 ----D---- C:\ProgramData\Blizzard Entertainment
2011-07-06 14:19:50 ----D---- C:\Program Files (x86)\StarCraft II
2011-07-06 14:17:37 ----HD---- C:\totalcmd
2011-07-06 14:17:37 ----D---- C:\Users\LittleOmig\AppData\Roaming\GHISLER
2011-07-06 14:17:37 ----A---- C:\Windows\UC.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\RAR.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\PKZIP.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\PKUNZIP.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\NOCLOSE.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\LHA.PIF
2011-07-06 14:17:37 ----A---- C:\Windows\ARJ.PIF
2011-07-06 14:07:59 ----D---- C:\Users\LittleOmig\AppData\Roaming\Leadertech
2011-07-06 13:37:57 ----D---- C:\Program Files (x86)\EA Sports
2011-07-06 13:37:56 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-07-06 13:37:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-07-06 13:37:56 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-07-06 13:37:56 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-07-06 13:37:55 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-07-06 13:37:55 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-07-06 13:37:55 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-07-06 13:37:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-07-06 13:37:55 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-07-06 13:37:55 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-07-06 13:37:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-07-06 13:37:54 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-07-06 13:37:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-07-06 13:37:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-07-06 13:37:54 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-07-06 13:37:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-07-06 13:37:53 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-07-06 13:37:53 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-07-06 13:37:48 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-07-06 13:37:48 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-07-06 13:37:48 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-07-06 13:37:48 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-07-06 13:37:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-07-06 13:37:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-07-06 13:37:47 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-07-06 13:37:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-07-06 13:37:47 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-07-06 13:37:47 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-07-06 13:37:47 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-07-06 13:37:47 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-07-06 13:37:46 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-07-06 13:37:46 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-07-06 13:37:45 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-07-06 13:37:45 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-07-06 13:37:44 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-07-06 13:37:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-07-06 13:37:44 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-07-06 13:37:44 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-07-06 13:37:43 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-07-06 13:37:43 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-07-06 13:37:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-07-06 13:37:43 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-07-06 13:37:43 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-07-06 13:37:43 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-07-06 13:37:42 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-07-06 13:37:42 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-07-06 13:37:41 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-07-06 13:37:41 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-07-06 13:37:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-07-06 13:37:41 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-07-06 13:37:41 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-07-06 13:37:41 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-07-06 13:37:40 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-07-06 13:37:40 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-07-06 13:37:40 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-07-06 13:37:40 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-07-06 13:37:39 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-07-06 13:37:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-07-06 13:37:39 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-07-06 13:37:39 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-07-06 13:37:38 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-07-06 13:37:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-07-06 13:37:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-07-06 13:37:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-07-06 13:37:38 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-07-06 13:37:38 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-07-06 13:37:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-07-06 13:37:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-07-06 13:37:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-07-06 13:37:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-07-06 13:37:37 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-07-06 13:37:37 ----A---- C:\Windows\system32\xinput1_3.dll
2011-07-06 13:37:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-07-06 13:37:37 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-07-06 13:37:36 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-07-06 13:37:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-07-06 13:37:36 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-07-06 13:37:36 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-07-06 13:37:35 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-07-06 13:37:35 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-07-06 13:37:35 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-07-06 13:37:35 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-07-06 13:37:35 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-07-06 13:37:35 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-07-06 13:37:34 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-07-06 13:37:34 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-07-06 13:37:34 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-07-06 13:37:34 ----A---- C:\Windows\system32\d3dx10.dll
2011-07-06 13:37:33 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-07-06 13:37:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-07-06 13:37:33 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-07-06 13:37:33 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-07-06 13:37:33 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-07-06 13:37:33 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-07-06 13:37:32 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-07-06 13:37:32 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-07-06 13:37:32 ----A---- C:\Windows\system32\xinput1_2.dll
2011-07-06 13:37:32 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-07-06 13:37:31 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-07-06 13:37:31 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-07-06 13:37:31 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-07-06 13:37:31 ----A---- C:\Windows\system32\xinput1_1.dll
2011-07-06 13:37:31 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-07-06 13:37:31 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-07-06 13:37:28 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-07-06 13:37:28 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-07-06 13:37:27 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-07-06 13:37:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-07-06 13:37:27 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-07-06 13:37:27 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-07-06 13:37:27 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-07-06 13:37:27 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-07-06 13:37:26 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-07-06 13:37:26 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-07-06 13:37:26 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-07-06 13:37:26 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-07-06 13:37:25 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-07-06 13:37:25 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-07-06 13:37:24 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-07-06 13:37:24 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-07-06 13:37:24 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-07-06 13:37:24 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-07-06 13:11:48 ----D---- C:\Program Files (x86)\FinalWire
2011-07-06 13:10:13 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-07-06 13:10:02 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2011-07-06 13:09:46 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-07-06 13:09:29 ----D---- C:\Users\LittleOmig\AppData\Roaming\DAEMON Tools Lite
2011-07-06 13:09:29 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-07-06 12:57:14 ----D---- C:\Users\LittleOmig\AppData\Roaming\QipGuard
2011-07-06 12:56:02 ----D---- C:\Program Files (x86)\QIP Infium
2011-07-06 12:02:18 ----D---- C:\Program Files\WinRAR
2011-07-06 12:00:24 ----D---- C:\Users\LittleOmig\AppData\Roaming\WinRAR
2011-07-06 12:00:15 ----D---- C:\Program Files (x86)\WinRAR
2011-07-06 11:40:17 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-07-06 11:40:17 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-07-06 11:40:15 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-07-06 11:40:14 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-07-06 11:40:13 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-07-06 11:40:12 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-07-06 11:40:12 ----A---- C:\Windows\system32\aswBoot.exe
2011-07-06 11:39:18 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-07-06 11:39:18 ----A---- C:\Windows\avastSS.scr
2011-07-06 11:37:32 ----D---- C:\ProgramData\AVAST Software
2011-07-06 11:37:32 ----D---- C:\Program Files\AVAST Software
2011-07-06 11:26:57 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-07-06 11:26:57 ----A---- C:\Windows\system32\kerberos.dll
2011-07-06 11:26:56 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-07-06 11:26:56 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-07-06 11:26:56 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-07-06 11:26:56 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-07-06 11:26:56 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-07-06 11:26:55 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-07-06 11:26:55 ----A---- C:\Windows\system32\poqexec.exe
2011-07-06 11:26:54 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-07-06 11:26:54 ----A---- C:\Windows\explorer.exe
2011-07-06 11:26:53 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-07-06 11:26:53 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-07-06 11:26:53 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-07-06 11:26:53 ----A---- C:\Windows\system32\sbe.dll
2011-07-06 11:26:53 ----A---- C:\Windows\system32\EncDec.dll
2011-07-06 11:26:53 ----A---- C:\Windows\system32\CPFilters.dll
2011-07-06 11:26:52 ----A---- C:\Windows\system32\tquery.dll
2011-07-06 11:26:51 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-07-06 11:26:51 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-07-06 11:26:51 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-07-06 11:26:51 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-07-06 11:26:51 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-07-06 11:26:51 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-07-06 11:26:51 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-07-06 11:26:51 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-07-06 11:26:51 ----A---- C:\Windows\system32\mssvp.dll
2011-07-06 11:26:51 ----A---- C:\Windows\system32\mssrch.dll
2011-07-06 11:26:51 ----A---- C:\Windows\system32\mssphtb.dll
2011-07-06 11:26:51 ----A---- C:\Windows\system32\mssph.dll
2011-07-06 11:26:50 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe

2. část:

2011-07-06 11:26:50 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-07-06 11:26:50 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-07-06 11:26:50 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-07-06 11:26:50 ----A---- C:\Windows\system32\msscntrs.dll
2011-07-06 11:26:50 ----A---- C:\Windows\system32\drivers\afd.sys
2011-07-06 11:26:48 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-07-06 11:26:48 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-07-06 11:26:48 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-07-06 11:26:47 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-07-06 11:26:32 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-07-06 11:26:32 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-07-06 11:26:32 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-07-06 11:26:32 ----A---- C:\Windows\system32\XpsPrint.dll
2011-07-06 11:26:32 ----A---- C:\Windows\system32\mfc42u.dll
2011-07-06 11:26:32 ----A---- C:\Windows\system32\mfc42.dll
2011-07-06 11:26:26 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-07-06 11:26:26 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-07-06 11:26:26 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-07-06 11:26:26 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-07-06 11:26:26 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-07-06 11:26:26 ----A---- C:\Windows\system32\dnsapi.dll
2011-07-06 11:26:25 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-07-06 11:26:25 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-07-06 11:26:25 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-07-06 11:26:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-07-06 11:26:25 ----A---- C:\Windows\system32\fontsub.dll
2011-07-06 11:26:25 ----A---- C:\Windows\system32\d3d10_1.dll
2011-07-06 11:26:25 ----A---- C:\Windows\system32\atmlib.dll
2011-07-06 11:26:25 ----A---- C:\Windows\system32\atmfd.dll
2011-07-06 11:26:24 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-07-06 11:26:24 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-07-06 11:26:24 ----A---- C:\Windows\system32\drivers\srv.sys
2011-07-06 11:26:23 ----A---- C:\Windows\system32\winresume.exe
2011-07-06 11:26:23 ----A---- C:\Windows\system32\winload.exe
2011-07-06 11:26:23 ----A---- C:\Windows\system32\kdusb.dll
2011-07-06 11:26:23 ----A---- C:\Windows\system32\kdcom.dll
2011-07-06 11:26:23 ----A---- C:\Windows\system32\kd1394.dll
2011-07-06 11:26:22 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-07-06 11:26:22 ----A---- C:\Windows\system32\oleaut32.dll
2011-07-06 11:26:12 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-07-06 11:26:12 ----A---- C:\Windows\system32\prevhost.exe
2011-07-06 11:26:12 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-07-06 11:26:11 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-07-06 11:26:11 ----A---- C:\Windows\system32\inetcomm.dll
2011-07-06 11:25:24 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-07-06 02:12:38 ----D---- C:\Windows\Panther
2011-07-06 02:04:40 ----D---- C:\Users\LittleOmig\AppData\Roaming\Macromedia
2011-07-06 02:04:40 ----D---- C:\Users\LittleOmig\AppData\Roaming\Adobe
2011-07-06 02:02:35 ----D---- C:\Users\LittleOmig\AppData\Roaming\ATI
2011-07-06 02:02:35 ----D---- C:\ProgramData\ATI
2011-07-06 02:01:07 ----D---- C:\Program Files (x86)\AMD APP
2011-07-06 02:01:05 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-07-06 02:00:51 ----D---- C:\ProgramData\AMD
2011-07-06 02:00:50 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2011-07-06 02:00:29 ----D---- C:\Program Files (x86)\ATI Technologies
2011-07-06 02:00:18 ----D---- C:\Program Files\ATI Technologies
2011-07-06 02:00:15 ----D---- C:\Program Files\ATI
2011-07-06 01:59:39 ----HD---- C:\ATI
2011-07-06 01:54:53 ----D---- C:\Program Files (x86)\Cisco
2011-07-06 01:53:56 ----A---- C:\Windows\system32\bcmwlrc.dll
2011-07-06 01:53:55 ----A---- C:\Windows\system32\drivers\BCMWL664.SYS
2011-07-06 01:53:55 ----A---- C:\Windows\system32\bcmwlcoi.dll
2011-07-06 01:53:55 ----A---- C:\Windows\system32\bcmihvui64.dll
2011-07-06 01:53:55 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2011-07-06 01:48:29 ----D---- C:\Program Files (x86)\Atheros
2011-07-06 01:48:12 ----HD---- C:\AMD
2011-07-06 01:48:00 ----D---- C:\ProgramData\Atheros
2011-07-06 01:47:59 ----D---- C:\Users\LittleOmig\AppData\Roaming\InstallShield
2011-07-06 01:46:35 ----D---- C:\Program Files\Synaptics
2011-07-06 01:45:55 ----D---- C:\Program Files (x86)\Launch Manager
2011-07-06 01:43:50 ----D---- C:\Program Files\Broadcom
2011-07-06 01:42:49 ----A---- C:\Windows\system32\RTSUSTORicon.dll
2011-07-06 01:42:24 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2011-07-06 01:42:23 ----A---- C:\Windows\SYSWOW64\RtsUStoricon.dll
2011-07-06 01:42:23 ----A---- C:\Windows\system32\RtsUStor.dll
2011-07-06 01:41:48 ----A---- C:\Windows\system32\drivers\btath_rcp.sys
2011-07-06 01:41:47 ----A---- C:\Windows\system32\drivers\btath_lwflt.sys
2011-07-06 01:41:47 ----A---- C:\Windows\system32\drivers\btath_hcrp.sys
2011-07-06 01:41:46 ----A---- C:\Windows\system32\drivers\btath_flt.sys
2011-07-06 01:41:46 ----A---- C:\Windows\system32\drivers\btath_a2dp.sys
2011-07-06 01:41:42 ----A---- C:\Windows\system32\drivers\btath_bus.sys
2011-07-06 01:40:52 ----D---- C:\Program Files (x86)\Bluetooth Suite
2011-07-06 01:39:13 ----SHD---- C:\Windows\Installer
2011-07-06 01:38:30 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-07-06 01:38:20 ----D---- C:\Program Files\Realtek
2011-07-06 01:38:20 ----A---- C:\Windows\system32\drivers\rtkhdaud.dat
2011-07-06 01:38:20 ----A---- C:\Windows\system32\drivers\RtHdatEx.dat
2011-07-06 01:38:20 ----A---- C:\Windows\system32\drivers\RTHDAEQ0.dat
2011-07-06 01:38:19 ----A---- C:\Windows\system32\RtkHDM64.dll
2011-07-06 01:38:19 ----A---- C:\Windows\system32\RHDMEx64.dll
2011-07-06 01:38:19 ----A---- C:\Windows\system32\RHCoInst64.dll
2011-07-06 01:38:19 ----A---- C:\Windows\system32\RH3DHT64.dll
2011-07-06 01:38:19 ----A---- C:\Windows\system32\RH3DAA64.dll
2011-07-06 01:38:19 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys
2011-07-06 01:38:19 ----A---- C:\Windows\system32\drivers\RTConvEQ.dat
2011-07-06 01:38:17 ----A---- C:\Windows\system32\WavesGUILib.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\SRSWOW64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\SRSTSX64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\SRSTSH64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\SRSHP64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\RtPgEx64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2011-07-06 01:38:17 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RtkCfg64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RtkAPO64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RtkApi64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RTEEP64A.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RTEEL64A.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RTEEG64A.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RTEED64A.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RTCOM64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RP3DHT64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RP3DAA64.dll
2011-07-06 01:38:16 ----A---- C:\Windows\system32\RCoInst64.dll
2011-07-06 01:38:15 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2011-07-06 01:38:15 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2011-07-06 01:38:14 ----D---- C:\Program Files (x86)\Realtek
2011-07-06 01:38:14 ----A---- C:\Windows\system32\FMAPO64.dll
2011-07-06 01:38:14 ----A---- C:\Windows\system32\AERTAR64.dll
2011-07-06 01:38:14 ----A---- C:\Windows\system32\AERTAC64.dll
2011-07-06 01:38:13 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-07-06 01:38:09 ----HD---- C:\Program Files (x86)\Temp
2011-07-06 01:38:09 ----A---- C:\Windows\RtlExUpd.dll
2011-07-06 01:36:22 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2011-07-06 01:36:16 ----A---- C:\Windows\SYSWOW64\SynTPCOM.dll
2011-07-06 01:36:15 ----A---- C:\Windows\system32\SynTPCo4.dll
2011-07-06 01:36:14 ----A---- C:\Windows\system32\SynTPAPI.dll
2011-07-06 01:36:14 ----A---- C:\Windows\system32\drivers\SynTP.sys
2011-07-06 01:36:09 ----A---- C:\Windows\SYSWOW64\SynCtrl.dll
2011-07-06 01:36:09 ----A---- C:\Windows\system32\SynCtrl.dll
2011-07-06 01:36:08 ----A---- C:\Windows\SYSWOW64\SynCOM.dll
2011-07-06 01:36:08 ----A---- C:\Windows\system32\SynCOM.dll
2011-07-06 01:35:14 ----A---- C:\Windows\UNINSTLMv4.EXE
2011-07-06 01:24:15 ----D---- C:\Users\LittleOmig\AppData\Roaming\Identities
2011-07-06 01:23:56 ----SD---- C:\Users\LittleOmig\AppData\Roaming\Microsoft
2011-07-06 01:23:56 ----D---- C:\Users\LittleOmig\AppData\Roaming\Media Center Programs
2011-07-06 01:23:44 ----SHD---- C:\Recovery
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Šablony
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Plocha
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Oblíbené položky
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Nabídka Start
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Dokumenty
2011-07-06 01:23:44 ----SHD---- C:\ProgramData\Data aplikací
2011-07-06 01:16:28 ----D---- C:\Windows\SoftwareDistribution
2011-07-06 01:14:20 ----D---- C:\Windows\Prefetch
2011-07-06 01:13:38 ----ASH---- C:\pagefile.sys
2011-07-06 01:13:35 ----SHD---- C:\System Volume Information
2011-07-06 01:13:35 ----ASH---- C:\hiberfil.sys
2011-05-25 06:26:56 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2011-05-25 05:53:28 ----A---- C:\Windows\system32\atio6axx.dll
2011-05-25 05:31:38 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2011-05-25 05:07:58 ----A---- C:\Windows\system32\atiapfxx.exe
2011-05-25 05:07:48 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2011-05-25 05:06:38 ----A---- C:\Windows\system32\aticfx64.dll
2011-05-25 05:04:16 ----A---- C:\Windows\system32\ATIDEMGX.dll
2011-05-25 05:04:10 ----A---- C:\Windows\system32\atieclxx.exe
2011-05-25 05:03:38 ----A---- C:\Windows\system32\atiesrxx.exe
2011-05-25 05:02:30 ----A---- C:\Windows\system32\atitmm64.dll
2011-05-25 05:02:16 ----A---- C:\Windows\system32\atipdl64.dll
2011-05-25 05:02:10 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2011-05-25 05:02:00 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll
2011-05-25 05:01:54 ----A---- C:\Windows\system32\atimuixx.dll
2011-05-25 05:01:50 ----A---- C:\Windows\system32\atiedu64.dll
2011-05-25 05:01:46 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2011-05-25 05:00:00 ----A---- C:\Windows\system32\atiumd6v.dll
2011-05-25 04:59:38 ----A---- C:\Windows\SYSWOW64\atiumdmv.dll
2011-05-25 04:59:26 ----A---- C:\Windows\system32\atiumd6a.dll
2011-05-25 04:58:52 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2011-05-25 04:50:38 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2011-05-25 04:49:44 ----A---- C:\Windows\system32\atidxx64.dll
2011-05-25 04:47:40 ----A---- C:\Windows\system32\aticalrt64.dll
2011-05-25 04:47:38 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2011-05-25 04:47:30 ----A---- C:\Windows\system32\aticalcl64.dll
2011-05-25 04:47:28 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2011-05-25 04:47:18 ----A---- C:\Windows\system32\aticaldd64.dll
2011-05-25 04:43:52 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2011-05-25 04:39:16 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2011-05-25 04:38:18 ----A---- C:\Windows\system32\atimpc64.dll
2011-05-25 04:38:18 ----A---- C:\Windows\system32\amdpcom64.dll
2011-05-25 04:38:14 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2011-05-25 04:38:14 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2011-05-25 04:33:04 ----A---- C:\Windows\system32\atiumd64.dll
2011-05-25 04:26:18 ----A---- C:\Windows\system32\atiadlxx.dll
2011-05-25 04:26:12 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2011-05-25 04:26:04 ----A---- C:\Windows\system32\atig6pxx.dll
2011-05-25 04:26:00 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2011-05-25 04:26:00 ----A---- C:\Windows\system32\atiglpxx.dll
2011-05-25 04:25:58 ----A---- C:\Windows\system32\atig6txx.dll
2011-05-25 04:25:48 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2011-05-25 04:25:42 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2011-05-25 04:24:58 ----A---- C:\Windows\system32\atiuxp64.dll
2011-05-25 04:24:50 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2011-05-25 04:24:44 ----A---- C:\Windows\system32\atiu9p64.dll
2011-05-25 04:24:36 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2011-05-25 04:24:08 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2011-05-25 04:19:00 ----A---- C:\Windows\system32\coinst.dll
2011-05-24 23:44:30 ----A---- C:\Windows\system32\OVDecode64.dll
2011-05-24 23:44:26 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2011-05-24 23:44:14 ----A---- C:\Windows\system32\OpenCL.dll
2011-05-24 23:44:10 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-05-24 23:44:04 ----A---- C:\Windows\system32\amdocl64.dll
2011-05-24 23:43:50 ----A---- C:\Windows\SYSWOW64\amdocl.dll

======List of files/folders modified in the last 3 months======

2011-08-11 17:51:13 ----RD---- C:\Program Files
2011-08-11 17:51:07 ----D---- C:\Windows\Temp
2011-08-11 17:46:47 ----D---- C:\Windows\Logs
2011-08-11 17:46:47 ----D---- C:\Windows\debug
2011-08-11 17:46:47 ----D---- C:\Windows
2011-08-11 17:35:23 ----D---- C:\Windows\system32\drivers
2011-08-11 17:35:17 ----RD---- C:\Program Files (x86)
2011-08-11 17:35:10 ----HD---- C:\ProgramData
2011-08-11 17:30:49 ----D---- C:\Windows\Microsoft.NET
2011-08-11 17:30:45 ----RSD---- C:\Windows\assembly
2011-08-11 16:47:28 ----D---- C:\Windows\System32
2011-08-11 16:46:31 ----D---- C:\Windows\SysWOW64
2011-08-11 16:40:54 ----D---- C:\Windows\winsxs
2011-08-11 16:40:04 ----D---- C:\Windows\system32\config
2011-08-11 16:38:35 ----D---- C:\Windows\SYSWOW64\migration
2011-08-11 16:38:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-11 16:38:35 ----D---- C:\Windows\system32\cs-CZ
2011-08-11 16:38:35 ----D---- C:\Program Files\Internet Explorer
2011-08-11 16:38:35 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-11 16:38:34 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-11 16:38:33 ----D---- C:\Windows\system32\migration
2011-08-11 16:38:33 ----D---- C:\Windows\system32\en-US
2011-08-11 16:38:33 ----D---- C:\Windows\PolicyDefinitions
2011-08-11 16:37:05 ----D---- C:\Windows\system32\catroot
2011-08-11 16:37:04 ----D---- C:\Windows\SYSWOW64\catroot2.old
2011-08-11 16:28:37 ----D---- C:\Windows\inf
2011-08-11 16:28:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-11 15:52:14 ----D---- C:\Program Files (x86)\Common Files
2011-08-11 06:20:23 ----D---- C:\Windows\AppPatch
2011-08-10 19:15:19 ----D---- C:\Windows\ModemLogs
2011-08-07 21:36:52 ----D---- C:\Windows\Tasks
2011-08-07 21:36:52 ----D---- C:\Windows\system32\wfp
2011-08-07 21:36:52 ----D---- C:\Windows\system32\DriverStore
2011-08-07 21:36:52 ----D---- C:\Windows\system32\CodeIntegrity
2011-08-07 21:36:52 ----D---- C:\Windows\AppCompat
2011-08-07 21:35:31 ----D---- C:\Windows\system32\wbem
2011-08-07 21:35:31 ----D---- C:\Windows\registration
2011-08-07 21:35:30 ----D---- C:\Windows\system32\Tasks
2011-08-07 21:30:59 ----D---- C:\Windows\system32\LogFiles
2011-08-05 21:49:46 ----SD---- C:\ProgramData\Microsoft
2011-08-05 15:38:50 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-01 22:23:02 ----D---- C:\Windows\system32\wdi
2011-08-01 12:43:20 ----RSD---- C:\Windows\Fonts
2011-07-30 00:39:01 ----D---- C:\Windows\ShellNew
2011-07-30 00:39:00 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-30 00:39:00 ----D---- C:\Program Files\Common Files
2011-07-30 00:38:00 ----D---- C:\Program Files (x86)\MSBuild
2011-07-30 00:35:36 ----A---- C:\Windows\win.ini
2011-07-30 00:35:31 ----D---- C:\Program Files\Common Files\System
2011-07-14 16:23:19 ----D---- C:\Windows\rescache
2011-07-07 13:55:47 ----D---- C:\Windows\Downloaded Program Files
2011-07-06 14:56:19 ----D---- C:\Windows\system32\Boot
2011-07-06 01:54:02 ----D---- C:\Windows\system32\zh-HK
2011-07-06 01:54:01 ----D---- C:\Windows\system32\zh-TW
2011-07-06 01:54:01 ----D---- C:\Windows\system32\zh-CN
2011-07-06 01:54:01 ----D---- C:\Windows\system32\tr-TR
2011-07-06 01:54:01 ----D---- C:\Windows\system32\th-TH
2011-07-06 01:54:01 ----D---- C:\Windows\system32\sv-SE
2011-07-06 01:54:01 ----D---- C:\Windows\system32\sl-SI
2011-07-06 01:54:00 ----D---- C:\Windows\system32\sk-SK
2011-07-06 01:54:00 ----D---- C:\Windows\system32\ru-RU
2011-07-06 01:54:00 ----D---- C:\Windows\system32\ro-RO
2011-07-06 01:54:00 ----D---- C:\Windows\system32\pt-PT
2011-07-06 01:53:59 ----D---- C:\Windows\system32\pt-BR
2011-07-06 01:53:59 ----D---- C:\Windows\system32\pl-PL
2011-07-06 01:53:59 ----D---- C:\Windows\system32\nl-NL
2011-07-06 01:53:59 ----D---- C:\Windows\system32\nb-NO
2011-07-06 01:53:59 ----D---- C:\Windows\system32\lv-LV
2011-07-06 01:53:59 ----D---- C:\Windows\system32\lt-LT
2011-07-06 01:53:59 ----D---- C:\Windows\system32\ko-KR
2011-07-06 01:53:58 ----D---- C:\Windows\system32\ja-JP
2011-07-06 01:53:58 ----D---- C:\Windows\system32\it-IT
2011-07-06 01:53:58 ----D---- C:\Windows\system32\hu-HU
2011-07-06 01:53:58 ----D---- C:\Windows\system32\hr-HR
2011-07-06 01:53:58 ----D---- C:\Windows\system32\he-IL
2011-07-06 01:53:58 ----D---- C:\Windows\system32\fr-FR
2011-07-06 01:53:57 ----D---- C:\Windows\system32\fi-FI
2011-07-06 01:53:57 ----D---- C:\Windows\system32\et-EE
2011-07-06 01:53:57 ----D---- C:\Windows\system32\es-ES
2011-07-06 01:53:57 ----D---- C:\Windows\system32\el-GR
2011-07-06 01:53:57 ----D---- C:\Windows\system32\de-DE
2011-07-06 01:53:57 ----D---- C:\Windows\system32\da-DK
2011-07-06 01:53:56 ----D---- C:\Windows\system32\bg-BG
2011-07-06 01:53:56 ----D---- C:\Windows\system32\ar-SA
2011-07-06 01:50:43 ----D---- C:\Windows\system32\NDF
2011-07-06 01:40:27 ----D---- C:\Windows\system32\restore
2011-07-06 01:24:10 ----SHD---- C:\$Recycle.Bin
2011-07-06 01:23:56 ----RD---- C:\Users
2011-07-06 01:23:44 ----D---- C:\Program Files\Windows NT
2011-07-06 01:17:01 ----D---- C:\Windows\system32\sysprep
2011-05-24 19:14:10 ----N---- C:\Windows\system32\MpSigStub.exe
2011-05-18 10:15:04 ----A---- C:\Windows\system32\nmwcdclsx64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-07-04 31064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-07-04 600920]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-07-04 288088]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-07-04 45400]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-07-06 254528]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-07-04 22360]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-07-04 64856]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2010-07-07 50696]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-05-25 9359872]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-05-25 309760]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-06 3058168]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-05-20 32296]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-15 2225952]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-03-21 321064]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-12-02 213280]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-05-20 38248]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-05-20 294760]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-05-20 202792]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-05-20 52584]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-05-20 156392]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-08 239136]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-05-25 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-05-24 365568]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-05-25 47776]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-31 75064]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2011-08-11 948775]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-07-26 411432]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-07-06 1255736]

-----------------EOF-----------------

Dobrý večer

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Combofix:


ComboFix 11-08-11.02 - LittleOmig 11.08.2011 21:10:25.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2040 [GMT 2:00]
Spuštěný z: c:\users\LittleOmig\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-11 do 2011-08-11 )))))))))))))))))))))))))))))))
.
.
2011-08-11 19:17 . 2011-08-11 19:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-11 15:51 . 2011-08-11 15:51 -------- d-----w- c:\program files\trend micro
2011-08-11 15:51 . 2011-08-11 15:51 -------- d-----w- C:\rsit
2011-08-11 15:35 . 2011-08-11 15:35 -------- d-----w- c:\program files (x86)\Crawler
2011-08-11 15:35 . 2011-08-11 15:37 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\Spyware Terminator
2011-08-11 15:35 . 2011-08-11 15:41 -------- d-----w- c:\programdata\Spyware Terminator
2011-08-11 15:35 . 2011-08-11 15:40 -------- d-----w- c:\program files (x86)\Spyware Terminator
2011-08-11 15:15 . 2011-08-11 15:15 -------- d-----w- c:\program files (x86)\Trend Micro
2011-08-11 14:47 . 2011-08-11 14:53 -------- d-----w- c:\windows\system32\catroot2
2011-08-11 14:46 . 2011-08-11 14:07 1266056 ----a-w- C:\WindowsXP-KB927891-v3-x86-ENU.exe
2011-08-11 14:46 . 2011-08-11 14:07 6216032 ----a-w- C:\windowsupdateagent30-x86.exe
2011-08-11 14:46 . 2011-08-11 14:06 3038 ----a-w- C:\fix_svchost.bat
2011-08-11 14:17 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-08-11 14:17 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-08-11 14:17 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-08-11 14:17 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-08-11 14:17 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-08-11 13:52 . 2011-08-11 13:52 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-08-11 13:51 . 2011-08-11 13:51 -------- d-----w- c:\program files (x86)\Java
2011-08-10 15:27 . 2011-08-10 15:27 -------- d-----w- C:\60b8c4892ef9c97dd4
2011-08-10 10:54 . 2011-06-23 05:43 5561216 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-08-10 10:54 . 2011-06-23 04:33 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-08-10 10:54 . 2011-06-23 04:33 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-08-09 10:27 . 2011-07-13 04:53 8578896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{942A45E6-9AE6-4C84-98B5-B7F4D5A9DD67}\mpengine.dll
2011-08-08 10:13 . 2011-08-08 10:13 -------- d-----w- c:\program files (x86)\Microsoft WSE
2011-08-07 02:15 . 2011-08-07 02:15 -------- d-----w- c:\programdata\Symantec
2011-08-07 02:15 . 2011-08-07 19:35 -------- d-----w- c:\program files (x86)\Norton Security Scan
2011-08-07 02:15 . 2011-08-07 02:15 -------- d-----w- c:\windows\system32\drivers\NSSx64
2011-08-07 02:14 . 2011-08-07 19:35 -------- d-----w- c:\programdata\Norton
2011-08-07 02:14 . 2011-08-07 02:14 -------- d-----w- c:\program files (x86)\NortonInstaller
2011-08-06 12:29 . 2011-08-06 12:29 -------- d-----w- c:\program files (x86)\Alcohol Soft
2011-08-06 11:46 . 2011-08-06 11:56 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\ImgBurn
2011-08-06 11:32 . 2011-08-06 11:32 -------- d-----w- c:\program files (x86)\ImgBurn
2011-08-05 19:49 . 2011-08-05 19:49 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2011-08-05 13:37 . 2011-08-05 13:42 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\PC Suite
2011-08-05 13:37 . 2011-08-05 13:38 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\Nokia
2011-08-05 13:37 . 2011-08-05 13:38 -------- d-----w- c:\programdata\PC Suite
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Common Files\PCSuite
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Common Files\Nokia
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files\DIFX
2011-08-05 13:35 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2011-08-05 13:35 . 2011-08-05 13:35 -------- dc----w- c:\windows\system32\DRVSTORE
2011-08-05 13:35 . 2011-08-05 13:35 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2011-08-05 13:35 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Nokia
2011-08-05 13:34 . 2011-08-05 13:34 -------- d-----w- c:\programdata\Installations
2011-08-04 15:57 . 2011-08-04 15:57 -------- d-----w- c:\users\LittleOmig\AppData\Local\DOSBox
2011-08-04 15:57 . 2011-08-04 16:34 -------- d-----w- c:\program files (x86)\DOSBox-0.74
2011-08-03 19:00 . 2011-08-03 19:00 -------- d-----w- c:\users\LittleOmig\KBCertifikat
2011-08-01 18:05 . 2011-08-01 18:25 -------- d-----w- c:\program files\Loki
2011-08-01 10:43 . 2011-08-01 10:43 -------- d-----w- c:\users\LittleOmig\AppData\Local\SFK_Team_Inc
2011-08-01 10:09 . 2011-08-01 11:10 -------- d-----w- c:\program files (x86)\Left 4 Dead 2
2011-07-31 20:06 . 2011-07-31 20:06 -------- d-----w- c:\program files (x86)\VALVe
2011-07-31 19:40 . 2011-07-31 19:47 215152 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-07-31 19:03 . 2011-07-31 19:03 -------- d-----w- c:\users\LittleOmig\AppData\Local\PunkBuster
2011-07-31 19:03 . 2011-07-31 19:03 -------- d-----w- c:\users\LittleOmig\AppData\Local\Activision
2011-07-31 18:55 . 2011-07-31 19:47 215152 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-07-31 18:55 . 2011-07-31 19:39 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-07-31 18:55 . 2011-07-31 18:55 682280 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-07-31 18:50 . 2011-07-31 18:50 -------- d-----w- c:\program files (x86)\Activision
2011-07-31 18:45 . 2011-07-31 18:45 -------- d-sh--w- c:\windows\ftpcache
2011-07-29 23:16 . 2011-07-29 23:17 -------- d-----w- c:\program files (x86)\AMP Font Viewer
2011-07-29 22:48 . 2011-07-29 22:48 472576 ----a-w- c:\windows\AutoKMS.exe
2011-07-29 22:38 . 2011-07-29 22:38 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\windows\PCHEALTH
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-07-29 22:36 . 2011-07-29 22:36 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\users\LittleOmig\AppData\Local\Microsoft Help
2011-07-29 22:34 . 2011-08-11 01:07 -------- d-----w- c:\programdata\Microsoft Help
2011-07-29 22:33 . 2011-07-29 22:33 -------- d-----r- C:\MSOCache
2011-07-28 18:37 . 2011-08-11 11:13 -------- d-----w- c:\users\LittleOmig\riotsGamesLogs
2011-07-24 11:24 . 2011-08-11 17:58 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\TS3Client
2011-07-24 11:24 . 2011-07-24 11:24 -------- d-----w- c:\program files\TeamSpeak 3 Client
2011-07-24 00:39 . 2011-07-24 00:39 -------- d-----w- C:\jpeg
2011-07-24 00:20 . 2011-07-24 00:20 -------- d-----w- c:\users\LittleOmig\KBang
2011-07-20 14:07 . 2011-07-20 14:07 94208 ----a-w- c:\windows\DIIUnin.exe
2011-07-20 14:07 . 2011-07-20 14:07 2829 ----a-w- c:\windows\DIIUnin.pif
2011-07-20 14:04 . 2011-07-26 19:24 -------- d-----w- c:\program files\Diablo 2 LOD
2011-07-20 13:41 . 2011-07-20 13:55 -------- d-----w- c:\program files\Diablo II
2011-07-20 12:39 . 2011-07-20 12:39 98304 ----a-w- c:\windows\SysWow64\CmdLineExt.dll
2011-07-20 12:27 . 2011-07-20 12:27 1 ----a-w- c:\windows\SysWow64\SI.bin
2011-07-20 12:27 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2011-07-20 12:27 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2011-07-20 12:27 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2011-07-20 12:27 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2011-07-19 20:48 . 2011-07-19 20:48 -------- d-----w- c:\program files (x86)\MSECache
2011-07-17 20:28 . 2011-07-17 20:28 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\LolClient
2011-07-17 19:14 . 2011-07-17 19:48 -------- d-----w- c:\program files (x86)\League of Legends
2011-07-17 19:13 . 2011-08-11 17:56 -------- d-----w- c:\users\LittleOmig\AppData\Local\PMB Files
2011-07-17 19:13 . 2011-08-11 17:56 -------- d-----w- c:\programdata\PMB Files
2011-07-17 19:13 . 2011-07-17 19:13 -------- d-----w- c:\program files (x86)\Pando Networks
2011-07-17 15:51 . 2011-07-27 20:14 -------- d-----w- c:\programdata\TrackMania
2011-07-17 11:21 . 2011-07-17 11:26 -------- d--h--w- c:\windows\msdownld.tmp
2011-07-17 10:57 . 2011-07-17 10:57 -------- d-----w- c:\users\LittleOmig\AppData\Local\CrashRpt
2011-07-17 10:17 . 2011-07-17 10:17 -------- d-----w- c:\program files (x86)\Atari
2011-07-16 23:58 . 2011-07-16 23:58 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\.BitTornado
2011-07-16 23:57 . 2011-07-16 23:57 -------- d-----w- c:\program files (x86)\BitTornado
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\program files (x86)\Conduit
2011-07-16 23:55 . 2011-07-16 23:55 0 ----a-w- c:\windows\SysWow64\ConduitEngine.tmp
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\users\LittleOmig\AppData\Local\Conduit
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\program files (x86)\uTorrent
2011-07-16 23:55 . 2011-07-26 14:42 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\uTorrent
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\users\LittleOmig\AppData\Local\uTorrent
2011-07-16 10:31 . 2011-08-01 09:01 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-07-16 10:30 . 2011-08-11 17:59 -------- d-----w- c:\program files (x86)\Steam
2011-07-16 07:49 . 2011-07-16 07:49 -------- d-----w- c:\program files\CCleaner
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-11 13:51 . 2011-07-06 14:41 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-07-16 04:26 . 2011-08-10 10:55 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-07-08 11:52 . 2011-07-08 11:52 419840 ----a-w- c:\windows\system32\wrap_oal.dll
2011-07-08 11:52 . 2011-07-08 11:52 413696 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-07-08 11:52 . 2011-07-08 11:52 133632 ----a-w- c:\windows\system32\OpenAL32.dll
2011-07-08 11:52 . 2011-07-08 11:52 110592 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-07-07 16:37 . 2011-07-07 16:34 2829 ----a-w- c:\windows\War3Unin.pif
2011-07-07 16:37 . 2011-07-07 16:34 139264 ----a-w- c:\windows\War3Unin.exe
2011-07-07 11:55 . 2011-07-07 11:55 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-07-06 11:10 . 2011-07-06 11:10 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-07-05 23:53 . 2011-07-05 23:53 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2011-07-05 23:53 . 2011-07-05 23:53 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2011-07-05 23:53 . 2011-07-05 23:53 3561272 ----a-w- c:\windows\system32\bcmihvui64.dll
2011-07-05 23:53 . 2011-07-05 23:53 3058168 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2011-07-05 23:53 . 2011-07-05 23:53 3896632 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2011-07-04 11:43 . 2011-07-06 09:39 40112 ----a-w- c:\windows\avastSS.scr
2011-07-04 11:43 . 2011-07-06 09:39 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-07-04 11:43 . 2011-07-06 09:40 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-04 11:36 . 2011-07-06 09:40 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-04 11:36 . 2011-07-06 09:40 288088 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-04 11:35 . 2011-07-06 09:40 45400 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-04 11:32 . 2011-07-06 09:40 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-04 11:32 . 2011-07-06 09:40 64856 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-04 11:32 . 2011-07-06 09:40 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-05-25 04:26 . 2011-05-25 04:26 9359872 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-05-25 03:53 . 2011-05-25 03:53 23336960 ----a-w- c:\windows\system32\atio6axx.dll
2011-05-25 03:31 . 2011-05-25 03:31 17940992 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-05-25 03:07 . 2011-05-25 03:07 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-05-25 03:07 . 2011-05-25 03:07 688128 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-05-25 03:06 . 2011-05-25 03:06 811008 ----a-w- c:\windows\system32\aticfx64.dll
2011-05-25 03:04 . 2011-05-25 03:04 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-05-25 03:04 . 2011-05-25 03:04 485376 ----a-w- c:\windows\system32\atieclxx.exe
2011-05-25 03:03 . 2011-05-25 03:03 204288 ----a-w- c:\windows\system32\atiesrxx.exe
2011-05-25 03:02 . 2011-05-25 03:02 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-05-25 03:02 . 2011-05-25 03:02 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-05-25 03:02 . 2011-05-25 03:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-05-25 03:01 . 2011-05-25 03:01 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-05-25 03:01 . 2011-05-25 03:01 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-05-25 03:01 . 2011-05-25 03:01 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-05-25 03:00 . 2011-05-25 03:00 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
2011-05-25 02:59 . 2011-05-25 02:59 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-05-25 02:59 . 2011-05-25 02:59 3810816 ----a-w- c:\windows\system32\atiumd6a.dll
2011-05-25 02:58 . 2011-05-25 02:58 4219904 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-05-25 02:50 . 2011-05-25 02:50 4017152 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-05-25 02:49 . 2011-05-25 02:49 5008384 ----a-w- c:\windows\system32\atidxx64.dll
2011-05-25 02:47 . 2011-05-25 02:47 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-05-25 02:47 . 2011-05-25 02:47 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-05-25 02:47 . 2011-05-25 02:47 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-05-25 02:47 . 2011-05-25 02:47 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-05-25 02:47 . 2011-05-25 02:47 8489472 ----a-w- c:\windows\system32\aticaldd64.dll
2011-05-25 02:43 . 2011-05-25 02:43 6847488 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-05-25 02:39 . 2011-05-25 02:39 4330496 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-05-25 02:38 . 2011-05-25 02:38 53760 ----a-w- c:\windows\system32\atimpc64.dll
2011-05-25 02:38 . 2011-05-25 02:38 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2011-05-25 02:33 . 2011-05-25 02:33 5486592 ----a-w- c:\windows\system32\atiumd64.dll
2011-05-25 02:26 . 2011-05-25 02:26 366592 ----a-w- c:\windows\system32\atiadlxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-05-25 02:26 . 2011-05-25 02:26 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 39936 ----a-w- c:\windows\system32\atig6txx.dll
2011-05-25 02:25 . 2011-05-25 02:25 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 309760 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-05-25 02:24 . 2011-05-25 02:24 40960 ----a-w- c:\windows\system32\atiuxp64.dll
2011-05-25 02:24 . 2011-05-25 02:24 31744 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2011-05-25 02:24 . 2011-05-25 02:24 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-05-25 02:24 . 2011-05-25 02:24 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-05-25 02:24 . 2011-05-25 02:24 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-05-25 02:19 . 2011-05-25 02:19 58880 ----a-w- c:\windows\system32\coinst.dll
2011-05-24 21:44 . 2011-05-24 21:44 61952 ----a-w- c:\windows\system32\OVDecode64.dll
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-05-24 21:44 . 2011-05-24 21:44 53760 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-24 21:44 . 2011-05-24 21:44 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-05-24 21:44 . 2011-05-24 21:44 16672768 ----a-w- c:\windows\system32\amdocl64.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-05-24 17:14 . 2010-11-21 03:27 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-24 11:42 . 2011-07-06 09:26 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-24 10:40 . 2011-07-06 09:26 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2011-05-24 10:40 . 2011-07-06 09:26 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2011-05-24 10:39 . 2011-07-06 09:26 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2011-05-24 10:37 . 2011-07-06 09:26 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2011-05-18 08:15 . 2010-12-02 10:14 57856 ----a-w- c:\windows\system32\nmwcdclsx64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-03-28 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\ConduitEngine\prxConduitEngin.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\uTorrentBar\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-03-28 176936]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngin.dll" [2011-03-28 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QIP Internet Guardian"="c:\users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe" [2010-09-01 190928]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2010-11-21 1174016]
"SpywareTerminatorUpdate"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2011-08-11 3318784]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"SpywareTerminator"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2011-08-11 2557440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-05-24 365568]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-05-25 47776]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SP_RSDRV2
*Deregistered* - AIDA64Driver
.
Obsah adresáře 'Naplánované úlohy'
.
2011-08-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000Core.job
- c:\users\LittleOmig\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-06 00:03]
.
2011-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000UA.job
- c:\users\LittleOmig\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-06 00:03]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-15 9644576]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-05-25 585376]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-05-25 354464]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://qip.ru
uDefault_Search_URL = hxxp://search.qip.ru
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://search.qip.ru/ie
IE: &Download All with FlashGet - c:\program files (x86)\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files (x86)\FlashGet\jc_link.htm
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.101.1 77.48.254.254
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-346902679-3115300631-747182166-1000\Software\SecuROM\License information*]
"datasecu"=hex:79,9f,17,8d,56,77,cf,96,e4,ed,83,f3,ce,52,d7,4c,e0,7e,05,db,ad,
20,53,e9,0f,b0,38,12,8d,25,2c,76,cd,e2,ce,40,37,8a,a7,10,4e,0d,87,31,be,dc,\
"rkeysecu"=hex:43,f3,aa,9f,21,6c,4b,dd,45,a2,00,f9,87,61,78,b2
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-08-11 21:20:15
ComboFix-quarantined-files.txt 2011-08-11 19:20
.
Před spuštěním: Volných bajtů: 266 716 844 032
Po spuštění: Volných bajtů: 266 127 278 080
.
- - End Of File - - 29CAB845CA8E882DE9110FE0A87DE19F

Teď to vypadá jak?

Pořád stejně ... ještě bych dodal, že to začalo dělat po nově nainstalovaných aktualizacích.

Určitě je to po nich?
Ještě zkuste vypnout rezidentní štít od Terminátora.

motji píše:Určitě je to po nich?
Ještě zkuste vypnout rezidentní štít od Terminátora.

Na 100% to říct nemůžu, ale při vypnutí se mi instalovaly aktualizace a když jsem to další den zapnul, blbnul svchost.exe.
Jinak ani rezidentní štít Terminatora nepomohl.

Tak ještě jeden test.

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verze databáze: 7437

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

12.8.2011 0:28:34
mbam-log-2011-08-12 (00-28-34).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 381980
Uplynulý čas: 1 hodin, 14 minut, 4 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Tohle je co?
C:\fix_svchost.bat


Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Jinak ten fix_svchost.bat je z návodu na odstranění toho problému, ale nepomohlo to.

ComboFix 11-08-11.02 - LittleOmig 12.08.2011 11:35:06.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2444 [GMT 2:00]
Spuštěný z: c:\users\LittleOmig\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LittleOmig\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\AutoKMS.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Norton Security Scan
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\{2A85E335-7417-424d-AD89-31DED1689794}.dat
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\{71B3DD3A-BC1F-40cc-A74F-C0C30DFCE7D5}.dat
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\{F8D07955-00ED-4093-88AA-0A0F69AFD83C}.dat
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\help.htm
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\Microsoft.VC90.CRT.manifest
c:\program files (x86)\Norton Security Scan\Engine\3.5.1.6\PrdDtRes.dll
c:\program files (x86)\NortonInstaller
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\09\01\InstUI.loc
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\extract.dat
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\fallback.dat
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\finalzed.dat
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\install.dat
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\Install.mft
c:\program files (x86)\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\3.5.1.6\layout.dat
c:\programdata\Norton
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\Module9000.txt
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\Connections\connections.dat
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\diMaster\eula.dat
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\diMaster\service.dat
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\itbLUReg\{65190544-26C3-43a4-A78A-694964901607}.dat
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\itbLUReg\{6E3396BD-C6A6-4f0f-9254-267F9058FEC4}.dat
c:\programdata\Norton\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS_3.5.1.6\itbLUReg\{D4F4CC32-7A41-4684-AE57-41E59E9B4503}.dat
c:\programdata\Symantec
c:\windows\AutoKMS.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-12 do 2011-08-12 )))))))))))))))))))))))))))))))
.
.
2011-08-12 09:55 . 2011-08-12 09:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-11 21:13 . 2011-08-11 21:13 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\Malwarebytes
2011-08-11 21:13 . 2010-11-29 15:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-08-11 21:13 . 2011-08-11 21:13 -------- d-----w- c:\programdata\Malwarebytes
2011-08-11 21:13 . 2010-11-29 15:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-11 21:13 . 2011-08-11 21:13 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-08-11 15:51 . 2011-08-11 15:51 -------- d-----w- c:\program files\trend micro
2011-08-11 15:51 . 2011-08-11 15:51 -------- d-----w- C:\rsit
2011-08-11 15:35 . 2011-08-11 15:35 -------- d-----w- c:\program files (x86)\Crawler
2011-08-11 15:35 . 2011-08-11 15:37 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\Spyware Terminator
2011-08-11 15:35 . 2011-08-11 15:41 -------- d--h--w- c:\programdata\Spyware Terminator
2011-08-11 15:35 . 2011-08-11 15:40 -------- d-----w- c:\program files (x86)\Spyware Terminator
2011-08-11 15:15 . 2011-08-11 15:15 -------- d-----w- c:\program files (x86)\Trend Micro
2011-08-11 14:47 . 2011-08-11 14:53 -------- d-----w- c:\windows\system32\catroot2
2011-08-11 14:46 . 2011-08-11 14:07 1266056 ----a-w- C:\WindowsXP-KB927891-v3-x86-ENU.exe
2011-08-11 14:46 . 2011-08-11 14:07 6216032 ----a-w- C:\windowsupdateagent30-x86.exe
2011-08-11 14:46 . 2011-08-11 14:06 3038 ----a-w- C:\fix_svchost.bat
2011-08-11 14:17 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-08-11 14:17 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-08-11 14:17 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-08-11 14:17 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-08-11 14:17 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-08-11 13:52 . 2011-08-11 13:52 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-08-11 13:51 . 2011-08-11 13:51 -------- d-----w- c:\program files (x86)\Java
2011-08-10 15:27 . 2011-08-10 15:27 -------- d-----w- C:\60b8c4892ef9c97dd4
2011-08-10 10:54 . 2011-06-23 05:43 5561216 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-08-10 10:54 . 2011-06-23 04:33 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-08-10 10:54 . 2011-06-23 04:33 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-08-09 10:27 . 2011-07-13 04:53 8578896 ---ha-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{942A45E6-9AE6-4C84-98B5-B7F4D5A9DD67}\mpengine.dll
2011-08-08 10:13 . 2011-08-08 10:13 -------- d-----w- c:\program files (x86)\Microsoft WSE
2011-08-07 02:15 . 2011-08-07 02:15 -------- d-----w- c:\windows\system32\drivers\NSSx64
2011-08-07 02:14 . 2011-08-07 02:14 -------- d--h--w- c:\programdata\NortonInstaller
2011-08-06 12:29 . 2011-08-06 12:29 -------- d-----w- c:\program files (x86)\Alcohol Soft
2011-08-06 11:46 . 2011-08-06 11:56 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\ImgBurn
2011-08-06 11:32 . 2011-08-06 11:32 -------- d-----w- c:\program files (x86)\ImgBurn
2011-08-05 19:49 . 2011-08-05 19:49 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2011-08-05 13:37 . 2011-08-05 13:42 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\PC Suite
2011-08-05 13:37 . 2011-08-05 13:38 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\Nokia
2011-08-05 13:37 . 2011-08-05 13:38 -------- d--h--w- c:\programdata\PC Suite
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Common Files\PCSuite
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Common Files\Nokia
2011-08-05 13:36 . 2011-08-05 13:36 -------- d-----w- c:\program files\DIFX
2011-08-05 13:35 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2011-08-05 13:35 . 2011-08-05 13:35 -------- dc----w- c:\windows\system32\DRVSTORE
2011-08-05 13:35 . 2011-08-05 13:35 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2011-08-05 13:35 . 2011-08-05 13:36 -------- d-----w- c:\program files (x86)\Nokia
2011-08-05 13:34 . 2011-08-05 13:34 -------- d--h--w- c:\programdata\Installations
2011-08-04 15:57 . 2011-08-04 15:57 -------- d-----w- c:\users\LittleOmig\AppData\Local\DOSBox
2011-08-04 15:57 . 2011-08-04 16:34 -------- d-----w- c:\program files (x86)\DOSBox-0.74
2011-08-03 19:00 . 2011-08-03 19:00 -------- d-----w- c:\users\LittleOmig\KBCertifikat
2011-08-01 18:05 . 2011-08-01 18:25 -------- d-----w- c:\program files\Loki
2011-08-01 10:43 . 2011-08-01 10:43 -------- d-----w- c:\users\LittleOmig\AppData\Local\SFK_Team_Inc
2011-08-01 10:09 . 2011-08-01 11:10 -------- d-----w- c:\program files (x86)\Left 4 Dead 2
2011-07-31 20:06 . 2011-07-31 20:06 -------- d-----w- c:\program files (x86)\VALVe
2011-07-31 19:40 . 2011-07-31 19:47 215152 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-07-31 19:03 . 2011-07-31 19:03 -------- d-----w- c:\users\LittleOmig\AppData\Local\PunkBuster
2011-07-31 19:03 . 2011-07-31 19:03 -------- d-----w- c:\users\LittleOmig\AppData\Local\Activision
2011-07-31 18:55 . 2011-07-31 19:47 215152 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-07-31 18:55 . 2011-07-31 19:39 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-07-31 18:55 . 2011-07-31 18:55 682280 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-07-31 18:50 . 2011-07-31 18:50 -------- d-----w- c:\program files (x86)\Activision
2011-07-31 18:45 . 2011-07-31 18:45 -------- d-sh--w- c:\windows\ftpcache
2011-07-29 23:16 . 2011-07-29 23:17 -------- d-----w- c:\program files (x86)\AMP Font Viewer
2011-07-29 22:38 . 2011-07-29 22:38 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\windows\PCHEALTH
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-07-29 22:37 . 2011-07-29 22:37 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-07-29 22:36 . 2011-07-29 22:36 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-07-29 22:34 . 2011-07-29 22:34 -------- d-----w- c:\users\LittleOmig\AppData\Local\Microsoft Help
2011-07-29 22:34 . 2011-08-11 01:07 -------- d--h--w- c:\programdata\Microsoft Help
2011-07-29 22:33 . 2011-07-29 22:33 -------- d-----r- C:\MSOCache
2011-07-28 18:37 . 2011-08-11 23:23 -------- d-----w- c:\users\LittleOmig\riotsGamesLogs
2011-07-24 11:24 . 2011-08-11 17:58 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\TS3Client
2011-07-24 11:24 . 2011-07-24 11:24 -------- d-----w- c:\program files\TeamSpeak 3 Client
2011-07-24 00:39 . 2011-07-24 00:39 -------- d-----w- C:\jpeg
2011-07-24 00:20 . 2011-07-24 00:20 -------- d-----w- c:\users\LittleOmig\KBang
2011-07-20 14:07 . 2011-07-20 14:07 94208 ----a-w- c:\windows\DIIUnin.exe
2011-07-20 14:07 . 2011-07-20 14:07 2829 ----a-w- c:\windows\DIIUnin.pif
2011-07-20 14:04 . 2011-07-26 19:24 -------- d-----w- c:\program files\Diablo 2 LOD
2011-07-20 13:41 . 2011-07-20 13:55 -------- d-----w- c:\program files\Diablo II
2011-07-20 12:39 . 2011-07-20 12:39 98304 ----a-w- c:\windows\SysWow64\CmdLineExt.dll
2011-07-20 12:27 . 2011-07-20 12:27 1 ----a-w- c:\windows\SysWow64\SI.bin
2011-07-20 12:27 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2011-07-20 12:27 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2011-07-20 12:27 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2011-07-20 12:27 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2011-07-19 20:48 . 2011-07-19 20:48 -------- d-----w- c:\program files (x86)\MSECache
2011-07-17 20:28 . 2011-07-17 20:28 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\LolClient
2011-07-17 19:14 . 2011-07-17 19:48 -------- d-----w- c:\program files (x86)\League of Legends
2011-07-17 19:13 . 2011-08-11 23:24 -------- d-----w- c:\users\LittleOmig\AppData\Local\PMB Files
2011-07-17 19:13 . 2011-08-11 23:24 -------- d--h--w- c:\programdata\PMB Files
2011-07-17 19:13 . 2011-07-17 19:13 -------- d-----w- c:\program files (x86)\Pando Networks
2011-07-17 15:51 . 2011-07-27 20:14 -------- d--h--w- c:\programdata\TrackMania
2011-07-17 11:21 . 2011-07-17 11:26 -------- d--h--w- c:\windows\msdownld.tmp
2011-07-17 10:57 . 2011-07-17 10:57 -------- d-----w- c:\users\LittleOmig\AppData\Local\CrashRpt
2011-07-17 10:17 . 2011-07-17 10:17 -------- d-----w- c:\program files (x86)\Atari
2011-07-16 23:58 . 2011-07-16 23:58 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\.BitTornado
2011-07-16 23:57 . 2011-07-16 23:57 -------- d-----w- c:\program files (x86)\BitTornado
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\program files (x86)\Conduit
2011-07-16 23:55 . 2011-07-16 23:55 0 ----a-w- c:\windows\SysWow64\ConduitEngine.tmp
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\users\LittleOmig\AppData\Local\Conduit
2011-07-16 23:55 . 2011-08-12 01:18 -------- d-----w- c:\program files (x86)\uTorrent
2011-07-16 23:55 . 2011-08-12 09:49 -------- d-----w- c:\users\LittleOmig\AppData\Roaming\uTorrent
2011-07-16 23:55 . 2011-07-16 23:55 -------- d-----w- c:\users\LittleOmig\AppData\Local\uTorrent
2011-07-16 10:31 . 2011-08-01 09:01 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-07-16 10:30 . 2011-08-11 23:24 -------- d-----w- c:\program files (x86)\Steam
2011-07-16 07:49 . 2011-07-16 07:49 -------- d-----w- c:\program files\CCleaner
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-11 13:51 . 2011-07-06 14:41 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-07-16 04:26 . 2011-08-10 10:55 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-07-08 11:52 . 2011-07-08 11:52 419840 ----a-w- c:\windows\system32\wrap_oal.dll
2011-07-08 11:52 . 2011-07-08 11:52 413696 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-07-08 11:52 . 2011-07-08 11:52 133632 ----a-w- c:\windows\system32\OpenAL32.dll
2011-07-08 11:52 . 2011-07-08 11:52 110592 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-07-07 16:37 . 2011-07-07 16:34 2829 ----a-w- c:\windows\War3Unin.pif
2011-07-07 16:37 . 2011-07-07 16:34 139264 ----a-w- c:\windows\War3Unin.exe
2011-07-07 11:55 . 2011-07-07 11:55 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-07-06 11:10 . 2011-07-06 11:10 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-07-05 23:53 . 2011-07-05 23:53 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2011-07-05 23:53 . 2011-07-05 23:53 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2011-07-05 23:53 . 2011-07-05 23:53 3561272 ----a-w- c:\windows\system32\bcmihvui64.dll
2011-07-05 23:53 . 2011-07-05 23:53 3058168 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2011-07-05 23:53 . 2011-07-05 23:53 3896632 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2011-07-04 11:43 . 2011-07-06 09:39 40112 ----a-w- c:\windows\avastSS.scr
2011-07-04 11:43 . 2011-07-06 09:39 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-07-04 11:43 . 2011-07-06 09:40 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-04 11:36 . 2011-07-06 09:40 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-04 11:36 . 2011-07-06 09:40 288088 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-04 11:35 . 2011-07-06 09:40 45400 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-04 11:32 . 2011-07-06 09:40 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-04 11:32 . 2011-07-06 09:40 64856 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-04 11:32 . 2011-07-06 09:40 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-06-11 03:07 . 2011-07-13 08:40 3137536 ----a-w- c:\windows\system32\win32k.sys
2011-05-25 04:26 . 2011-05-25 04:26 9359872 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-05-25 03:53 . 2011-05-25 03:53 23336960 ----a-w- c:\windows\system32\atio6axx.dll
2011-05-25 03:31 . 2011-05-25 03:31 17940992 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-05-25 03:07 . 2011-05-25 03:07 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-05-25 03:07 . 2011-05-25 03:07 688128 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-05-25 03:06 . 2011-05-25 03:06 811008 ----a-w- c:\windows\system32\aticfx64.dll
2011-05-25 03:04 . 2011-05-25 03:04 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-05-25 03:04 . 2011-05-25 03:04 485376 ----a-w- c:\windows\system32\atieclxx.exe
2011-05-25 03:03 . 2011-05-25 03:03 204288 ----a-w- c:\windows\system32\atiesrxx.exe
2011-05-25 03:02 . 2011-05-25 03:02 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-05-25 03:02 . 2011-05-25 03:02 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-05-25 03:02 . 2011-05-25 03:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-05-25 03:01 . 2011-05-25 03:01 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-05-25 03:01 . 2011-05-25 03:01 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-05-25 03:01 . 2011-05-25 03:01 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-05-25 03:00 . 2011-05-25 03:00 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
2011-05-25 02:59 . 2011-05-25 02:59 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-05-25 02:59 . 2011-05-25 02:59 3810816 ----a-w- c:\windows\system32\atiumd6a.dll
2011-05-25 02:58 . 2011-05-25 02:58 4219904 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-05-25 02:50 . 2011-05-25 02:50 4017152 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-05-25 02:49 . 2011-05-25 02:49 5008384 ----a-w- c:\windows\system32\atidxx64.dll
2011-05-25 02:47 . 2011-05-25 02:47 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-05-25 02:47 . 2011-05-25 02:47 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-05-25 02:47 . 2011-05-25 02:47 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-05-25 02:47 . 2011-05-25 02:47 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-05-25 02:47 . 2011-05-25 02:47 8489472 ----a-w- c:\windows\system32\aticaldd64.dll
2011-05-25 02:43 . 2011-05-25 02:43 6847488 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-05-25 02:39 . 2011-05-25 02:39 4330496 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-05-25 02:38 . 2011-05-25 02:38 53760 ----a-w- c:\windows\system32\atimpc64.dll
2011-05-25 02:38 . 2011-05-25 02:38 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2011-05-25 02:33 . 2011-05-25 02:33 5486592 ----a-w- c:\windows\system32\atiumd64.dll
2011-05-25 02:26 . 2011-05-25 02:26 366592 ----a-w- c:\windows\system32\atiadlxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-05-25 02:26 . 2011-05-25 02:26 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 39936 ----a-w- c:\windows\system32\atig6txx.dll
2011-05-25 02:25 . 2011-05-25 02:25 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 309760 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-05-25 02:24 . 2011-05-25 02:24 40960 ----a-w- c:\windows\system32\atiuxp64.dll
2011-05-25 02:24 . 2011-05-25 02:24 31744 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2011-05-25 02:24 . 2011-05-25 02:24 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-05-25 02:24 . 2011-05-25 02:24 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-05-25 02:24 . 2011-05-25 02:24 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-05-25 02:19 . 2011-05-25 02:19 58880 ----a-w- c:\windows\system32\coinst.dll
2011-05-24 21:44 . 2011-05-24 21:44 61952 ----a-w- c:\windows\system32\OVDecode64.dll
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-05-24 21:44 . 2011-05-24 21:44 53760 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-24 21:44 . 2011-05-24 21:44 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-05-24 21:44 . 2011-05-24 21:44 16672768 ----a-w- c:\windows\system32\amdocl64.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-05-24 17:14 . 2010-11-21 03:27 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-24 11:42 . 2011-07-06 09:26 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-24 10:40 . 2011-07-06 09:26 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2011-05-24 10:40 . 2011-07-06 09:26 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2011-05-24 10:39 . 2011-07-06 09:26 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2011-05-24 10:37 . 2011-07-06 09:26 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2011-05-18 08:15 . 2010-12-02 10:14 57856 ----a-w- c:\windows\system32\nmwcdclsx64.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-11_19.17.23 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-08-11 18:50 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-08-12 07:47 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-08-12 07:47 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-11 18:50 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-11 18:50 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-12 07:47 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2011-08-11 19:42 33858 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-08-11 19:42 42954 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-08-11 14:51 42954 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-07-05 23:20 . 2011-08-11 19:42 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-07-05 23:20 . 2011-08-11 14:36 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-07-05 23:20 . 2011-08-11 14:36 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-07-05 23:20 . 2011-08-11 19:42 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-11 19:42 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-11 14:36 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2011-08-12 03:07 93952 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2011-07-05 23:51 . 2011-08-11 19:42 8724 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-346902679-3115300631-747182166-1000_UserData.bin
- 2011-08-11 14:49 . 2011-08-11 14:49 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-08-11 19:40 . 2011-08-11 19:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-08-11 14:49 . 2011-08-11 14:49 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-08-11 19:40 . 2011-08-11 19:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 05:01 . 2011-08-11 19:39 766290 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-08-11 14:44 766290 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 04:45 . 2011-08-11 19:40 5521752 c:\windows\system32\FNTCACHE.DAT
+ 2011-07-06 00:12 . 2011-08-11 19:39 8721704 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-07-16 14:42 . 2011-08-11 19:39 2463396 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-346902679-3115300631-747182166-1000-12288.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QIP Internet Guardian"="c:\users\LittleOmig\AppData\Roaming\QipGuard\QipGuard.exe" [2010-09-01 190928]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2010-11-21 1174016]
"SpywareTerminatorUpdate"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2011-08-11 3318784]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"SpywareTerminator"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2011-08-11 2557440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-05-24 365568]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-05-25 47776]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000Core.job
- c:\users\LittleOmig\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-06 00:03]
.
2011-08-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-346902679-3115300631-747182166-1000UA.job
- c:\users\LittleOmig\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-06 00:03]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-15 9644576]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-05-25 585376]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-05-25 354464]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = %SystemRoot%\system32\blank.htm
uSearchAssistant = hxxp://search.qip.ru/ie
IE: &Download All with FlashGet - c:\program files (x86)\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files (x86)\FlashGet\jc_link.htm
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.101.1 77.48.254.254
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
.
Supplementary scan did not complete!
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-346902679-3115300631-747182166-1000\Software\SecuROM\License information*]
"datasecu"=hex:79,9f,17,8d,56,77,cf,96,e4,ed,83,f3,ce,52,d7,4c,e0,7e,05,db,ad,
20,53,e9,0f,b0,38,12,8d,25,2c,76,cd,e2,ce,40,37,8a,a7,10,4e,0d,87,31,be,dc,\
"rkeysecu"=hex:43,f3,aa,9f,21,6c,4b,dd,45,a2,00,f9,87,61,78,b2
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-08-12 12:13:39
ComboFix-quarantined-files.txt 2011-08-11 19:20
ComboFix2.txt 2011-08-11 19:20
.
Před spuštěním: Volných bajtů: 249 870 643 200
Po spuštění: Volných bajtů: 249 580 900 352
.
- - End Of File - - B57FB6EEF3D6CB9293125CBF5621A5BB

Pořád vytěžuje?

Momentálně to lítá okolo 100MB což bylo i předtím, vypadá to, že to je OK, děkuji moc za pomoc

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?