VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2011-09-29 21:03:34
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 126 GB (79%) free of 160 GB
Total RAM: 3951 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:03:39, on 29.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\QIP 2010\qip.exe
C:\Program Files (x86)\SpeedFan\speedfan.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.youtube.com/index?gl=CZ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jirka\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10961 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2316
"C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"taskhost.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe" /Start
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
"C:\Program Files (x86)\QIP 2010\qip.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\SpeedFan\speedfan.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=5192.00A406E0.2040286149 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=5192.07695160.671300481 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Jirka\AppData\Local\Google\Chrome\APPLIC~1\140835~1.186\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Jirka\AppData\Local\Google\Chrome\Application\14.0.835.186\gcswf32.dll" --lang=cs --channel=5192.08DEBE00.760309506 --flash-broker=5424 /prefetch:4
"C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey BFA3B470-3068-C3F1-7C79-935EE6F7F4C7 -Reinvoke
"C:\Users\Jirka\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1909719316-1497147805-183848060-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1909719316-1497147805-183848060-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1909719316-1497147805-183848060-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1909719316-1497147805-183848060-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll [2011-09-05 265944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-09-26 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll [2011-09-05 220888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-09-08 489472]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2010-04-05 186904]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-03 2174760]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-07-21 8192]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 1436736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-26 136176]
"Facebook Update"=C:\Users\Jirka\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-28 137536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
C:\Program Files (x86)\QIP 2010\qip.exe [2011-08-22 6821248]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2010-02-25 287800]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2010-04-12 180224]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"facemoods"=C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe [2011-09-05 362200]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-28 336384]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-09-29 21:03:34 ----D---- C:\rsit
2011-09-29 21:03:34 ----D---- C:\Program Files\trend micro
2011-09-28 14:21:29 ----D---- C:\Users\Jirka\AppData\Roaming\TeamViewer
2011-09-28 14:10:30 ----D---- C:\Program Files (x86)\TeamViewer
2011-09-28 14:09:02 ----D---- C:\Users\Jirka\AppData\Roaming\TightVNC
2011-09-27 16:56:40 ----D---- C:\Windows\SYSWOW64\Wat
2011-09-27 16:56:40 ----D---- C:\Windows\system32\Wat
2011-09-27 13:38:06 ----D---- C:\Users\Jirka\AppData\Roaming\ATI
2011-09-27 13:38:06 ----D---- C:\ProgramData\ATI
2011-09-27 13:38:04 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-09-27 13:37:04 ----D---- C:\Program Files (x86)\ATI Technologies
2011-09-27 13:34:08 ----D---- C:\AMD
2011-09-27 11:40:26 ----D---- C:\Program Files (x86)\SpeedFan
2011-09-27 10:28:16 ----A---- C:\Windows\system32\FntCache.dll
2011-09-27 10:28:15 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-09-27 10:28:15 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-09-27 10:28:15 ----A---- C:\Windows\system32\DWrite.dll
2011-09-27 10:28:15 ----A---- C:\Windows\system32\d2d1.dll
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-09-27 08:26:20 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-09-27 08:26:19 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-09-27 08:26:18 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-09-27 08:26:18 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-09-27 08:26:18 ----A---- C:\Windows\system32\fsutil.exe
2011-09-27 08:26:18 ----A---- C:\Windows\system32\esent.dll
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\storport.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-09-27 08:26:18 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-09-26 22:22:19 ----A---- C:\Windows\system32\MRT.exe
2011-09-26 22:21:43 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-09-26 22:21:43 ----A---- C:\Windows\system32\prevhost.exe
2011-09-26 22:21:43 ----A---- C:\Windows\explorer.exe
2011-09-26 22:21:42 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-09-26 22:21:42 ----A---- C:\Windows\system32\drivers\afd.sys
2011-09-26 22:21:41 ----A---- C:\Windows\system32\KernelBase.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-09-26 22:21:40 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-09-26 22:21:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-09-26 22:21:40 ----A---- C:\Windows\system32\wow64win.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\wow64cpu.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\wow64.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\winsrv.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\ntvdm64.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\kernel32.dll
2011-09-26 22:21:40 ----A---- C:\Windows\system32\conhost.exe
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-09-26 22:21:39 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-09-26 22:21:38 ----A---- C:\Windows\SYSWOW64\user.exe
2011-09-26 22:21:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-09-26 22:21:22 ----A---- C:\Windows\system32\tzres.dll
2011-09-26 22:21:16 ----A---- C:\Windows\system32\EncDec.dll
2011-09-26 22:21:16 ----A---- C:\Windows\system32\CPFilters.dll
2011-09-26 22:21:15 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-09-26 22:21:15 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-09-26 22:21:15 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-09-26 22:21:15 ----A---- C:\Windows\system32\sbe.dll
2011-09-26 22:21:02 ----D---- C:\Windows\system32\appmgmt
2011-09-26 22:20:59 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-09-26 22:20:59 ----A---- C:\Windows\system32\kerberos.dll
2011-09-26 22:20:58 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-09-26 22:20:58 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-09-26 22:20:58 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-09-26 22:20:58 ----A---- C:\Windows\system32\fontsub.dll
2011-09-26 22:20:58 ----A---- C:\Windows\system32\atmlib.dll
2011-09-26 22:20:58 ----A---- C:\Windows\system32\atmfd.dll
2011-09-26 22:20:54 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-09-26 22:20:54 ----A---- C:\Windows\system32\poqexec.exe
2011-09-26 22:20:53 ----A---- C:\Windows\system32\mfc42u.dll
2011-09-26 22:20:53 ----A---- C:\Windows\system32\mfc42.dll
2011-09-26 22:20:52 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-09-26 22:20:52 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-09-26 22:20:51 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-09-26 22:20:51 ----A---- C:\Windows\system32\tquery.dll
2011-09-26 22:20:51 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-09-26 22:20:51 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-09-26 22:20:51 ----A---- C:\Windows\system32\mssrch.dll
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-09-26 22:20:50 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-09-26 22:20:50 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-09-26 22:20:50 ----A---- C:\Windows\system32\mssvp.dll
2011-09-26 22:20:50 ----A---- C:\Windows\system32\mssphtb.dll
2011-09-26 22:20:50 ----A---- C:\Windows\system32\mssph.dll
2011-09-26 22:20:50 ----A---- C:\Windows\system32\msscntrs.dll
2011-09-26 22:20:49 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-09-26 22:20:47 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-09-26 22:20:46 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-09-26 22:20:46 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-09-26 22:20:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-09-26 22:20:44 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-09-26 22:20:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-09-26 22:20:43 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-09-26 22:20:43 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-09-26 22:20:43 ----A---- C:\Windows\system32\odbctrac.dll
2011-09-26 22:20:43 ----A---- C:\Windows\system32\odbccu32.dll
2011-09-26 22:20:43 ----A---- C:\Windows\system32\odbccr32.dll
2011-09-26 22:20:43 ----A---- C:\Windows\system32\odbccp32.dll
2011-09-26 22:20:42 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-09-26 22:20:42 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-09-26 22:20:42 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-09-26 22:20:40 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-09-26 22:20:40 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-09-26 22:20:40 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-09-26 22:20:40 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-09-26 22:20:40 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-09-26 22:20:38 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-09-26 22:20:38 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-09-26 22:20:38 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-09-26 22:20:38 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-09-26 22:20:38 ----A---- C:\Windows\system32\dnsapi.dll
2011-09-26 22:20:36 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-09-26 22:20:34 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-09-26 22:20:34 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-09-26 22:20:34 ----A---- C:\Windows\system32\drivers\srv.sys
2011-09-26 22:20:33 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-09-26 22:20:33 ----A---- C:\Windows\system32\XpsPrint.dll
2011-09-26 22:20:29 ----A---- C:\Windows\system32\winload.exe
2011-09-26 22:20:29 ----A---- C:\Windows\system32\win32k.sys
2011-09-26 22:20:28 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-09-26 22:20:28 ----A---- C:\Windows\system32\xmllite.dll
2011-09-26 22:20:28 ----A---- C:\Windows\system32\winresume.exe
2011-09-26 22:20:28 ----A---- C:\Windows\system32\kdusb.dll
2011-09-26 22:20:28 ----A---- C:\Windows\system32\kdcom.dll
2011-09-26 22:20:28 ----A---- C:\Windows\system32\kd1394.dll
2011-09-26 22:20:26 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-09-26 22:20:26 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-09-26 22:20:26 ----A---- C:\Windows\system32\d3d10_1.dll
2011-09-26 22:20:25 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-09-26 22:20:25 ----A---- C:\Windows\system32\oleaut32.dll
2011-09-26 22:19:14 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-09-26 22:19:14 ----A---- C:\Windows\system32\inetcomm.dll
2011-09-26 22:19:12 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-09-26 22:16:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-09-26 22:16:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-09-26 22:16:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-09-26 21:47:35 ----D---- C:\Program Files (x86)\Microsoft Security Client
2011-09-26 21:47:27 ----D---- C:\Program Files\Microsoft Security Client
2011-09-26 21:42:06 ----D---- C:\Windows\Panther
2011-09-26 21:41:04 ----DC---- C:\Windows\system32\DRVSTORE
2011-09-26 21:41:04 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2011-09-26 21:41:03 ----D---- C:\Program Files (x86)\Windows Live
2011-09-26 21:39:50 ----D---- C:\Program Files\Windows Live
2011-09-26 21:38:46 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-09-26 21:37:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-09-26 21:33:13 ----D---- C:\ProgramData\Blizzard Entertainment
2011-09-26 21:32:24 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2011-09-26 21:32:12 ----D---- C:\Windows\PCHEALTH
2011-09-26 21:32:12 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-09-26 21:32:12 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2011-09-26 21:32:12 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2011-09-26 21:30:26 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-09-26 21:30:11 ----D---- C:\Program Files\Microsoft Office
2011-09-26 21:30:04 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2011-09-26 21:30:00 ----D---- C:\ProgramData\Microsoft Help
2011-09-26 21:30:00 ----D---- C:\Program Files (x86)\Microsoft Office
2011-09-26 21:29:52 ----RHD---- C:\MSOCache
2011-09-26 21:23:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-09-26 21:23:41 ----D---- C:\Program Files (x86)\facemoods.com
2011-09-26 21:23:41 ----A---- C:\prefs.js
2011-09-26 21:23:36 ----HD---- C:\Windows\msdownld.tmp
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\url.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-09-26 21:23:15 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\wininet.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\urlmon.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-09-26 21:23:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-09-26 21:23:15 ----A---- C:\Windows\system32\pngfilt.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\occache.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\msrating.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\msls31.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\mshtmler.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\mshtml.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\mshta.exe
2011-09-26 21:23:15 ----A---- C:\Windows\system32\msfeedssync.exe
2011-09-26 21:23:15 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\jsproxy.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\jscript9.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\jscript.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\imgutil.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieUnatt.exe
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieui.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\iesysprep.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\iertutil.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\iepeers.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieframe.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieakui.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieaksie.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\ieakeng.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-09-26 21:23:15 ----A---- C:\Windows\system32\admparse.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\wextract.exe
2011-09-26 21:23:14 ----A---- C:\Windows\system32\webcheck.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\vbscript.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\url.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\mshtmled.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\msfeeds.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\licmgr10.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\inseng.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\iexpress.exe
2011-09-26 21:23:14 ----A---- C:\Windows\system32\iesetup.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\iernonce.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\iedkcs32.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\ieapfltr.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\ieapfltr.dat
2011-09-26 21:23:14 ----A---- C:\Windows\system32\ie4uinit.exe
2011-09-26 21:23:14 ----A---- C:\Windows\system32\icardie.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\dxtrans.dll
2011-09-26 21:23:14 ----A---- C:\Windows\system32\dxtmsft.dll
2011-09-26 21:23:01 ----D---- C:\Program Files (x86)\JDownloader
2011-09-26 21:22:00 ----D---- C:\Users\Jirka\AppData\Roaming\vlc
2011-09-26 21:21:58 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2011-09-26 21:21:52 ----D---- C:\Users\Jirka\AppData\Roaming\skypePM
2011-09-26 21:21:11 ----D---- C:\Program Files (x86)\VideoLAN
2011-09-26 21:21:03 ----RD---- C:\Program Files (x86)\Skype
2011-09-26 21:21:02 ----D---- C:\Users\Jirka\AppData\Roaming\Skype
2011-09-26 21:21:01 ----D---- C:\ProgramData\Skype
2011-09-26 21:20:40 ----D---- C:\Program Files (x86)\rajce
2011-09-26 21:20:32 ----D---- C:\Users\Jirka\AppData\Roaming\QIP
2011-09-26 21:20:18 ----D---- C:\ProgramData\Sun
2011-09-26 21:20:17 ----D---- C:\Program Files (x86)\QIP 2010
2011-09-26 21:20:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-09-26 21:20:12 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-09-26 21:20:12 ----A---- C:\Windows\SYSWOW64\java.exe
2011-09-26 21:20:12 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-09-26 21:20:06 ----D---- C:\Program Files (x86)\Java
2011-09-26 21:19:53 ----D---- C:\Program Files (x86)\PowerISO
2011-09-26 21:19:53 ----A---- C:\Windows\system32\drivers\scdemu.sys
2011-09-26 21:19:40 ----D---- C:\Program Files (x86)\Palm
2011-09-26 21:19:28 ----D---- C:\Program Files (x86)\Microsoft Games
2011-09-26 21:19:24 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-09-26 21:19:24 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-09-26 21:19:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-09-26 21:19:08 ----D---- C:\Windows\SYSWOW64\Macromed
2011-09-26 21:19:03 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-09-26 21:19:02 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-09-26 21:19:02 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-09-26 21:18:47 ----D---- C:\Windows\SYSWOW64\xlive
2011-09-26 21:18:45 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-09-26 21:18:01 ----D---- C:\Program Files (x86)\INFINITUMair
2011-09-26 21:17:44 ----D---- C:\Program Files (x86)\HWiNFO32
2011-09-26 21:16:16 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-09-26 21:16:15 ----D---- C:\Program Files (x86)\ffdshow
2011-09-26 21:16:06 ----D---- C:\ProgramData\Adobe
2011-09-26 21:16:04 ----D---- C:\Program Files (x86)\Adobe
2011-09-26 21:16:00 ----D---- C:\Users\Jirka\AppData\Roaming\Macromedia
2011-09-26 21:16:00 ----D---- C:\Users\Jirka\AppData\Roaming\Adobe
2011-09-26 21:15:49 ----D---- C:\Program Files (x86)\AC3Filter
2011-09-26 21:14:24 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2011-09-26 21:14:24 ----D---- C:\Program Files\totalcmd
2011-09-26 21:14:24 ----A---- C:\Windows\UC.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\RAR.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\PKZIP.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\PKUNZIP.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\NOCLOSE.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\LHA.PIF
2011-09-26 21:14:24 ----A---- C:\Windows\ARJ.PIF
2011-09-26 21:14:06 ----D---- C:\Program Files\Everest.Ultimate.5.50.build.2109
2011-09-26 21:12:39 ----A---- C:\Windows\SYSWOW64\HPWA.ini
2011-09-26 21:12:39 ----A---- C:\Windows\system32\HPWA.ini
2011-09-26 21:12:36 ----D---- C:\Program Files\Hewlett-Packard
2011-09-26 21:10:12 ----D---- C:\Users\Jirka\AppData\Roaming\Hewlett-Packard Company
2011-09-26 21:10:11 ----A---- C:\Windows\HBCIKRNL.INI
2011-09-26 21:10:06 ----D---- C:\Program Files (x86)\SCM Microsystems
2011-09-26 21:10:00 ----D---- C:\Windows\Downloaded Installations
2011-09-26 21:09:59 ----D---- C:\Program Files\Synaptics
2011-09-26 21:09:50 ----A---- C:\Windows\system32\yk62x64ver.dll
2011-09-26 21:09:44 ----D---- C:\Users\Jirka\AppData\Roaming\hpqLog
2011-09-26 21:09:19 ----D---- C:\Program Files (x86)\Marvell
2011-09-26 21:09:19 ----A---- C:\Windows\system32\drivers\wdfcoinstaller01005.dll
2011-09-26 21:09:19 ----A---- C:\Windows\system32\drivers\HpqKbFiltr.sys
2011-09-26 21:09:17 ----D---- C:\Program Files (x86)\Hewlett-Packard
2011-09-26 21:09:17 ----A---- C:\Windows\SYSWOW64\BttnCmns.dll
2011-09-26 21:09:17 ----A---- C:\Windows\SYSWOW64\BttnCmn.dll
2011-09-26 21:08:34 ----A---- C:\Windows\SYSWOW64\vsnp2uvc.dll
2011-09-26 21:08:34 ----A---- C:\Windows\SYSWOW64\rsnp2uvc.dll
2011-09-26 21:08:34 ----A---- C:\Windows\system32\vsnp2uvc.dll
2011-09-26 21:08:34 ----A---- C:\Windows\system32\rsnp2uvc.dll
2011-09-26 21:08:34 ----A---- C:\Windows\system32\drivers\snp2uvc.sys
2011-09-26 21:08:34 ----A---- C:\Windows\system32\drivers\sncduvc.sys
2011-09-26 21:08:34 ----A---- C:\Windows\system32\csnp2uvc.dll
2011-09-26 21:08:34 ----A---- C:\Windows\snuvcdsm.exe
2011-09-26 21:08:34 ----A---- C:\Windows\snp2uvc.src
2011-09-26 21:08:34 ----A---- C:\Windows\snp2uvc.ini
2011-09-26 21:08:11 ----D---- C:\Users\Jirka\AppData\Roaming\InstallShield
2011-09-26 21:07:43 ----A---- C:\Windows\SYSWOW64\log.txt
2011-09-26 21:07:06 ----A---- C:\Windows\system32\drivers\btwampfl.sys
2011-09-26 21:07:05 ----A---- C:\Windows\system32\drivers\btwrchid.sys
2011-09-26 21:07:05 ----A---- C:\Windows\system32\drivers\btwl2cap.sys
2011-09-26 21:07:05 ----A---- C:\Windows\system32\drivers\btwavdt.sys
2011-09-26 21:07:05 ----A---- C:\Windows\system32\drivers\btwaudio.sys
2011-09-26 21:06:59 ----D---- C:\Program Files (x86)\Intel
2011-09-26 21:06:59 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2011-09-26 21:06:52 ----D---- C:\Intel
2011-09-26 21:06:37 ----N---- C:\Windows\SYSWOW64\agrsmdel.exe
2011-09-26 21:06:37 ----N---- C:\Windows\SYSWOW64\agrscoin.dll
2011-09-26 21:06:37 ----N---- C:\Windows\SYSWOW64\agrsco64.dll
2011-09-26 21:06:31 ----D---- C:\Program Files\LSI SoftModem
2011-09-26 21:06:23 ----D---- C:\Windows\Options
2011-09-26 21:05:51 ----A---- C:\Windows\SYSWOW64\RicohMediadriverVer.dll
2011-09-26 21:05:50 ----A---- C:\Windows\system32\snymsico.dll
2011-09-26 21:05:50 ----A---- C:\Windows\system32\rixdicon.dll
2011-09-26 21:05:50 ----A---- C:\Windows\system32\RiSDIcon.dll
2011-09-26 21:05:50 ----A---- C:\Windows\system32\RiMMCIcon.dll
2011-09-26 21:05:50 ----A---- C:\Windows\system32\drivers\rixdpe64.sys
2011-09-26 21:05:50 ----A---- C:\Windows\system32\drivers\risdpe64.sys
2011-09-26 21:05:50 ----A---- C:\Windows\system32\drivers\rimspe64.sys
2011-09-26 21:04:33 ----D---- C:\Program Files\WIDCOMM
2011-09-26 21:03:44 ----A---- C:\Windows\system32\stlang64.dll
2011-09-26 21:03:44 ----A---- C:\Windows\system32\AESTEC64.dll
2011-09-26 21:03:44 ----A---- C:\Windows\system32\AESTCo64.dll
2011-09-26 21:03:44 ----A---- C:\Windows\system32\AESTAR64.dll
2011-09-26 21:03:44 ----A---- C:\Windows\system32\AESTAC64.dll
2011-09-26 21:03:44 ----A---- C:\Windows\sttray64.exe
2011-09-26 21:03:16 ----A---- C:\Windows\system32\stcplx64.dll
2011-09-26 21:03:16 ----A---- C:\Windows\system32\staco64.dll
2011-09-26 21:03:16 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2011-09-26 21:03:15 ----N---- C:\Windows\system32\stapi64.dll
2011-09-26 21:03:15 ----A---- C:\Windows\system32\stapo64.dll
2011-09-26 21:03:14 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-09-26 21:03:14 ----D---- C:\Program Files\IDT
2011-09-26 21:00:49 ----D---- C:\Program Files (x86)\AMD APP
2011-09-26 21:00:35 ----D---- C:\SWSetup
2011-09-26 21:00:34 ----SHD---- C:\Windows\Installer
2011-09-26 21:00:26 ----D---- C:\Program Files\ATI Technologies
2011-09-26 21:00:25 ----D---- C:\Program Files\ATI
2011-09-26 20:59:57 ----D---- C:\ATI
2011-09-26 20:53:35 ----D---- C:\Users\Jirka\AppData\Roaming\Identities
2011-09-26 20:53:19 ----SD---- C:\Users\Jirka\AppData\Roaming\Microsoft
2011-09-26 20:53:19 ----D---- C:\Users\Jirka\AppData\Roaming\Media Center Programs
2011-09-26 20:53:11 ----SHD---- C:\Recovery
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Šablony
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Plocha
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Oblíbené položky
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Nabídka Start
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Dokumenty
2011-09-26 20:53:11 ----SHD---- C:\ProgramData\Data aplikací
2011-09-26 20:45:33 ----D---- C:\Windows\SoftwareDistribution
2011-09-26 20:43:21 ----D---- C:\Windows\Prefetch
2011-09-26 20:42:29 ----SHD---- C:\System Volume Information
2011-09-26 20:42:29 ----ASH---- C:\pagefile.sys
2011-09-26 20:42:29 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2011-09-29 21:03:34 ----RD---- C:\Program Files
2011-09-29 21:03:10 ----D---- C:\Windows\Temp
2011-09-29 19:50:54 ----RSD---- C:\Windows\assembly
2011-09-29 19:50:54 ----D---- C:\Windows\Microsoft.NET
2011-09-29 18:39:16 ----D---- C:\Windows\system32\config
2011-09-29 18:30:02 ----D---- C:\Windows\System32
2011-09-29 18:30:02 ----D---- C:\Windows\inf
2011-09-29 18:30:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-28 22:21:24 ----D---- C:\Windows\system32\wdi
2011-09-28 21:26:43 ----D---- C:\Windows\Tasks
2011-09-28 21:26:43 ----D---- C:\Windows\system32\Tasks
2011-09-28 14:46:01 ----D---- C:\Windows\system32\catroot2
2011-09-28 14:10:30 ----RD---- C:\Program Files (x86)
2011-09-28 10:54:36 ----D---- C:\Windows\system32\LogFiles
2011-09-28 07:27:24 ----RD---- C:\Users
2011-09-27 21:23:53 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-09-27 21:23:53 ----D---- C:\Windows\system32\cs-CZ
2011-09-27 21:21:13 ----D---- C:\Windows\SysWOW64
2011-09-27 21:21:10 ----D---- C:\Windows\SYSWOW64\en-US
2011-09-27 21:21:10 ----D---- C:\Windows\system32\en-US
2011-09-27 21:16:19 ----D---- C:\Windows
2011-09-27 21:16:17 ----D---- C:\Windows\winsxs
2011-09-27 21:15:29 ----D---- C:\Program Files\Internet Explorer
2011-09-27 16:56:47 ----D---- C:\Windows\system32\catroot
2011-09-27 16:56:39 ----D---- C:\Windows\system32\DriverStore
2011-09-27 16:56:39 ----D---- C:\Windows\system32\drivers
2011-09-27 13:38:06 ----HD---- C:\ProgramData
2011-09-27 13:38:04 ----D---- C:\Program Files\Common Files
2011-09-27 13:38:04 ----D---- C:\Program Files (x86)\Common Files
2011-09-27 13:20:05 ----D---- C:\Windows\rescache
2011-09-27 13:18:02 ----D---- C:\Windows\Logs
2011-09-27 10:35:47 ----A---- C:\Windows\win.ini
2011-09-27 10:20:47 ----D---- C:\Windows\servicing
2011-09-27 10:20:47 ----D---- C:\Program Files (x86)\Internet Explorer
2011-09-27 10:19:25 ----D---- C:\Windows\SYSWOW64\migration
2011-09-27 10:19:25 ----D---- C:\Windows\system32\migration
2011-09-27 10:19:25 ----D---- C:\Windows\PolicyDefinitions
2011-09-27 08:23:22 ----SHD---- C:\$Recycle.Bin
2011-09-26 23:04:51 ----D---- C:\Windows\AppPatch
2011-09-26 22:33:00 ----RSD---- C:\Windows\Fonts
2011-09-26 22:32:57 ----D---- C:\Windows\system32\Boot
2011-09-26 22:30:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-09-26 22:22:24 ----D---- C:\Windows\debug
2011-09-26 21:47:35 ----SD---- C:\ProgramData\Microsoft
2011-09-26 21:32:45 ----D---- C:\Windows\ShellNew
2011-09-26 21:32:37 ----D---- C:\Program Files (x86)\MSBuild
2011-09-26 21:08:40 ----D---- C:\Windows\twain_32
2011-09-26 21:06:36 ----SD---- C:\Windows\system32\Microsoft
2011-09-26 21:03:48 ----D---- C:\Windows\system32\restore
2011-09-26 20:59:03 ----D---- C:\Windows\system32\CodeIntegrity
2011-09-26 20:53:11 ----D---- C:\Windows\system32\Recovery
2011-09-26 20:53:11 ----D---- C:\Program Files\Windows NT
2011-09-26 20:47:05 ----D---- C:\Windows\system32\sysprep
2011-09-26 20:45:17 ----D---- C:\Windows\system32\drivers\UMDF
2011-09-26 20:43:17 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-05 409624]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 189440]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 rimspci;rimspci; C:\Windows\system32\DRIVERS\rimspe64.sys [2009-10-26 61952]
R2 risdpcie;risdpcie; C:\Windows\system32\DRIVERS\risdpe64.sys [2009-10-28 79360]
R2 rixdpcie;rixdpcie; C:\Windows\system32\DRIVERS\rixdpe64.sys [2009-12-11 55808]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-07-21 1208320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-07-29 9980416]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-07-28 309248]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-07-20 102952]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-07-20 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-07-20 21544]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2010-02-25 18432]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-07-14 7821312]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 84864]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-12-18 1798400]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-09-08 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-03 1379376]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-07-29 9980416]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2011-05-13 48488]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 40832]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-07-28 204288]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-07-29 951584]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-07-21 103992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2010-04-05 354840]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 12784]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-09-08 271360]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-27 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Zdravím, tohle fixni v HJT :

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jirka\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

HJT najdeš zde :

C:\Program Files\trend micro\Jirka.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

Diky za rady.
Tady je scan z MBAM


Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verze databáze: 7833

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

30.9.2011 13:24:55
mbam-log-2011-09-30 (13-24-55).txt

Typ kontroly: Rychlý test
Testované objekty: 177293
Uplynulý čas: 1 minut, 40 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.