VIRY.CZ

Zdravím. Zničeho nic mi počítač začal u všech textových editorů, instant massengerů a nevím čeho ještě všeho psát místo jednoho háčku hned dva. Na webu jsem se dočetl, že jde o virus Badtrans. Můžu poprosit o pomoc při řešení.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Tomas at 2011-11-23 18:55:56
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 340 GB (71%) free of 477 GB
Total RAM: 4094 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:55:59, on 23.11.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\QIP\qip.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\SysWOW64\explorer.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tomas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [PrintSpooler] C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
O4 - HKCU\..\Run: [QIP2005] C:\Program Files (x86)\QIP\qip.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [PrintSpooler] C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
O4 - HKCU\..\Run: [AssetCache] C:\Users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe
O4 - HKLM\..\Policies\Explorer\Run: [PrintSpoolStart] C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
O4 - HKCU\..\Policies\Explorer\Run: [PrintSpoolStart] C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
O4 - HKUS\S-1-5-21-1553317441-3571389557-1658996358-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1553317441-3571389557-1658996358-1003\..\Run: [QIP2005] C:\Program Files (x86)\QIP\qip.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1553317441-3571389557-1658996358-1003\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1553317441-3571389557-1658996358-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tomas\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8293 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\System32\spoolsv.exe
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\QIP\qip.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
explorer.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-34a94e46-e549-46ef-9468-5135425eba98 -SystemEventPortName:HostProcess-0adc808e-4b88-4e43-a9fb-ce2b34ad0525 -IoCancelEventPortName:HostProcess-9abad217-89f3-40e0-9994-14ccdc8f583e -NonStateChangingEventPortName:HostProcess-b68b2a4f-c0d5-484a-84fb-7967a568cfc7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8d22b376-6f12-4af1-ad35-34cd920b6407
WLIDSvcM.exe 2708
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Winamp\winamp.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=2644.0236B420.798127668 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=2644.0236BDC0.1674432925 --ignored=" --type=renderer " /prefetch:3
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=2644.0737C000.472427375 /prefetch:3
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=2644.0C49D9A0.975118490 /prefetch:3
"C:\Users\Tomas\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=2644.0C49D420.737052761 /prefetch:3
C:\Windows\system32\msiexec.exe /V
"C:\Users\Tomas\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1553317441-3571389557-1658996358-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1553317441-3571389557-1658996358-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-11-03 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-07-05 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-06-30 9048392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"PrintSpoolStart"=C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"QIP2005"=C:\Program Files (x86)\QIP\qip.exe [2010-10-29 3330560]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"PrintSpooler"=C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]
"AssetCache"=C:\Users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe [2011-11-23 1000448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"PrintSpoolStart"=C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AssetCache]
C:\Users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe [2011-11-23 1000448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrintSpooler]
C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]
"PrintSpooler"=C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"PrintSpoolStart"=C:\Users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe [2006-07-15 407552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-11-03 249344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22 253288]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-11-23 17:57:50 ----RSHD---- C:\Users\Tomas\AppData\Roaming\AdobeUtil
2011-11-18 15:51:47 ----D---- C:\Users\Tomas\AppData\Roaming\Media Player Classic
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-11-10 18:44:15 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\OpenCL.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvoglv64.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvcuvid.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvcuda.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\nvcompiler.dll
2011-11-10 18:44:15 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-11-10 18:40:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-11-10 18:40:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-11-10 18:40:41 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-11-10 18:40:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-11-10 18:40:40 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-11-10 18:40:40 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-11-10 18:40:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-11-10 18:40:40 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-10 18:40:40 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-11-10 18:40:40 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-11-10 18:40:39 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-11-10 18:40:39 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-10 18:40:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-11-10 18:40:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-10 18:40:36 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-11-10 18:40:36 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-11-10 18:40:36 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-10 18:40:36 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-10 18:40:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-11-10 18:40:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-11-10 18:40:35 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-10 18:40:35 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-10 18:40:34 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-11-10 18:40:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-11-10 18:40:34 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-10 18:40:34 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-10 18:40:33 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-11-10 18:40:33 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-10 18:40:32 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-11-10 18:40:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-11-10 18:40:32 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-11-10 18:40:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-11-10 18:40:32 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-10 18:40:32 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-10 18:40:32 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-10 18:40:32 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-10 18:40:31 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-11-10 18:40:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-11-10 18:40:31 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-10 18:40:31 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-10 18:40:30 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-11-10 18:40:30 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-10 18:40:29 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-11-10 18:40:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-11-10 18:40:29 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-11-10 18:40:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-11-10 18:40:29 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-10 18:40:29 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-10 18:40:29 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-10 18:40:29 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-10 18:40:28 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-11-10 18:40:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-11-10 18:40:28 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-11-10 18:40:28 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-10 18:40:28 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-10 18:40:28 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-10 18:40:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-11-10 18:40:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-11-10 18:40:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-11-10 18:40:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-11-10 18:40:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-11-10 18:40:26 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-10 18:40:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-11-10 18:40:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-11-10 18:40:25 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-11-10 18:40:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-11-10 18:40:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-10 18:40:25 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-10 18:40:25 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-10 18:40:23 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-11-10 18:40:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-11-10 18:40:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-10 18:40:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-10 18:40:22 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-11-10 18:40:22 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-11-10 18:40:22 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-11-10 18:40:22 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-10 18:40:22 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-10 18:40:22 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-10 18:40:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-11-10 18:40:21 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-11-10 18:40:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-11-10 18:40:21 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-10 18:40:21 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-10 18:40:21 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-10 18:40:19 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-11-10 18:40:19 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-11-10 18:40:19 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-10 18:40:19 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-10 18:40:18 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-11-10 18:40:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-11-10 18:40:18 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-10 18:40:18 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-10 18:40:17 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-11-10 18:40:17 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-10 18:40:16 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-11-10 18:40:16 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-10 18:40:15 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-11-10 18:40:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-11-10 18:40:15 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-10 18:40:15 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-10 18:40:14 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-11-10 18:40:14 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-10 18:40:13 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-11-10 18:40:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-11-10 18:40:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-10 18:40:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-10 18:40:12 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-11-10 18:40:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-11-10 18:40:12 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-10 18:40:12 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-10 18:40:11 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-11-10 18:40:11 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-11-10 18:40:11 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-10 18:40:11 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-10 18:40:10 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-11-10 18:40:10 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-10 18:40:09 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-11-10 18:40:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-11-10 18:40:09 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-10 18:40:09 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-10 18:40:08 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-11-10 18:40:08 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-11-10 18:40:08 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-10 18:40:08 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-10 18:40:07 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-11-10 18:40:07 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-10 18:40:06 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-11-10 18:40:06 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-10 18:40:05 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-11-10 18:40:05 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-11-10 18:40:05 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-10 18:40:05 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-10 18:40:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-11-10 18:40:04 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-11-10 18:40:04 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-10 18:40:04 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-10 18:40:03 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-11-10 18:40:03 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-11-10 18:40:03 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-10 18:40:03 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-10 18:40:02 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-11-10 18:40:02 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-10 18:40:01 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-11-10 18:40:01 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-10 18:40:00 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-11-10 18:40:00 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-10 18:39:55 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-11-10 18:39:55 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-10 18:39:54 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-11-10 18:39:54 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-11-10 18:39:54 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-10 18:39:54 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-10 18:39:53 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-11-10 18:39:53 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-10 18:39:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-11-10 18:39:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-10 18:39:50 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-11-10 18:39:50 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-10 18:39:49 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-11-10 18:39:49 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-10 18:39:48 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-11-10 18:39:48 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-10 18:39:46 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-11-10 18:39:46 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-11-10 18:36:12 ----D---- C:\Program Files (x86)\The Elder Scrolls V Skyrim
2011-11-09 22:06:28 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-09 22:06:27 ----A---- C:\Windows\system32\win32k.sys
2011-11-09 17:56:39 ----A---- C:\Windows\SYSWOW64\MSVCP71.DLL
2011-11-09 17:56:39 ----A---- C:\Windows\SYSWOW64\MFC71U.DLL
2011-11-09 17:56:39 ----A---- C:\Windows\SYSWOW64\ATL71.DLL
2011-11-07 18:53:44 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2011-11-05 23:03:11 ----D---- C:\Users\Tomas\AppData\Roaming\Evolved
2011-11-05 22:58:42 ----D---- C:\Program Files (x86)\Microsoft
2011-11-05 22:56:15 ----D---- C:\Program Files (x86)\Jane's Advanced Strike Fighters
2011-11-05 16:51:20 ----D---- C:\Program Files (x86)\FreeRapid-0.86
2011-11-03 19:34:53 ----HD---- C:\Windows\msdownld.tmp
2011-11-03 19:34:50 ----D---- C:\Windows\SYSWOW64\directx
2011-11-03 15:18:01 ----A---- C:\Windows\system32\javaws.exe
2011-11-03 15:18:01 ----A---- C:\Windows\system32\javaw.exe
2011-11-03 15:18:01 ----A---- C:\Windows\system32\java.exe
2011-11-03 15:18:01 ----A---- C:\Windows\system32\deployJava1.dll
2011-11-03 15:17:55 ----D---- C:\Program Files\Java
2011-11-03 15:13:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-11-03 15:13:08 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-11-03 15:13:08 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-11-03 15:13:08 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\url.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-11-03 15:13:07 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\wininet.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\urlmon.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-11-03 15:13:07 ----A---- C:\Windows\system32\pngfilt.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\occache.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\msrating.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\msls31.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\mshtml.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\mshta.exe
2011-11-03 15:13:07 ----A---- C:\Windows\system32\msfeedssync.exe
2011-11-03 15:13:07 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\jsproxy.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\jscript9.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\jscript.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\imgutil.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\ieUnatt.exe
2011-11-03 15:13:07 ----A---- C:\Windows\system32\iertutil.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\iepeers.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\ieakui.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\ieaksie.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-11-03 15:13:07 ----A---- C:\Windows\system32\admparse.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\wextract.exe
2011-11-03 15:13:06 ----A---- C:\Windows\system32\webcheck.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\vbscript.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\url.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-11-03 15:13:06 ----A---- C:\Windows\system32\mshtmler.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\mshtmled.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\msfeeds.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\licmgr10.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\inseng.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\iexpress.exe
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ieui.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\iesysprep.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\iesetup.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\iernonce.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ieframe.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\iedkcs32.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ieapfltr.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ieapfltr.dat
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ieakeng.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\ie4uinit.exe
2011-11-03 15:13:06 ----A---- C:\Windows\system32\icardie.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\dxtrans.dll
2011-11-03 15:13:06 ----A---- C:\Windows\system32\dxtmsft.dll
2011-11-03 15:12:51 ----D---- C:\Program Files\Defraggler
2011-11-03 15:12:26 ----D---- C:\Program Files (x86)\FileHippo.com

======List of files/folders modified in the last 1 month======

2011-11-23 18:55:59 ----D---- C:\Windows\Prefetch
2011-11-23 18:55:58 ----D---- C:\Program Files\trend micro
2011-11-23 18:52:32 ----SHD---- C:\Windows\Installer
2011-11-23 18:52:23 ----SD---- C:\ProgramData\Microsoft
2011-11-23 18:48:20 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2011-11-23 17:24:36 ----D---- C:\Windows\inf
2011-11-23 16:34:16 ----D---- C:\Windows\temp
2011-11-23 15:36:02 ----D---- C:\Windows\system32\config
2011-11-23 15:28:21 ----D---- C:\Windows\System32
2011-11-23 15:28:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-23 15:21:52 ----D---- C:\Windows
2011-11-23 15:21:51 ----D---- C:\ProgramData\NVIDIA
2011-11-22 22:29:40 ----D---- C:\Users\Tomas\AppData\Roaming\Winamp
2011-11-21 08:31:40 ----RD---- C:\Program Files (x86)
2011-11-19 13:11:13 ----SHD---- C:\System Volume Information
2011-11-19 11:34:37 ----RSHD---- C:\Windows\SYSWOW64\PrintDrv
2011-11-17 22:12:13 ----SD---- C:\Users\Tomas\AppData\Roaming\Microsoft
2011-11-17 20:24:36 ----D---- C:\Windows\SysWOW64
2011-11-16 17:08:58 ----D---- C:\Users\Tomas\AppData\Roaming\DAEMON Tools Lite
2011-11-11 17:49:17 ----D---- C:\Windows\system32\catroot
2011-11-10 19:20:21 ----D---- C:\Windows\Logs
2011-11-10 18:46:08 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-11-10 18:45:45 ----D---- C:\Windows\system32\DriverStore
2011-11-10 18:44:56 ----D---- C:\Windows\system32\drivers
2011-11-10 18:44:52 ----D---- C:\Windows\system32\catroot2
2011-11-10 18:40:00 ----RSD---- C:\Windows\assembly
2011-11-10 16:29:24 ----D---- C:\Windows\debug
2011-11-10 14:45:58 ----D---- C:\Windows\winsxs
2011-11-10 14:44:15 ----D---- C:\Program Files\Common Files\System
2011-11-09 22:48:24 ----A---- C:\Windows\system32\MRT.exe
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvwgf2umx.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvvsvc.exe
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvsvcr.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvsvc64.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvshext.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvmctray.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvdispco64.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvcpl.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\nvapi64.dll
2011-11-08 04:51:00 ----A---- C:\Windows\system32\easyupdatusapiu64.dll
2011-11-05 16:18:58 ----D---- C:\Windows\Panther
2011-11-05 13:25:30 ----D---- C:\ProgramData\Comodo
2011-11-04 16:07:42 ----D---- C:\Windows\rescache
2011-11-03 21:55:04 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-11-03 21:55:04 ----D---- C:\Program Files\Internet Explorer
2011-11-03 21:55:04 ----D---- C:\Program Files (x86)\Internet Explorer
2011-11-03 21:55:03 ----D---- C:\Windows\SYSWOW64\migration
2011-11-03 21:55:03 ----D---- C:\Windows\system32\cs-CZ
2011-11-03 21:55:02 ----D---- C:\Windows\SYSWOW64\en-US
2011-11-03 21:55:02 ----D---- C:\Windows\system32\migration
2011-11-03 21:55:02 ----D---- C:\Windows\PolicyDefinitions
2011-11-03 21:55:01 ----D---- C:\Windows\system32\en-US
2011-11-03 15:25:00 ----D---- C:\Windows\system32\appmgmt
2011-11-03 15:24:56 ----D---- C:\Windows\system32\Tasks
2011-11-03 15:20:33 ----D---- C:\Program Files (x86)\Winamp
2011-11-03 15:20:28 ----D---- C:\Program Files (x86)\Winamp Detect
2011-11-03 15:19:47 ----RD---- C:\Program Files (x86)\Skype
2011-11-03 15:18:33 ----D---- C:\Program Files (x86)\The KMPlayer
2011-11-03 15:17:55 ----RD---- C:\Program Files
2011-11-03 15:16:40 ----D---- C:\Program Files\CCleaner
2011-10-25 22:39:26 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-06-30 252344]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-06-30 41712]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-14 270912]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-06-30 92688]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-09-28 314016]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2010-11-09 21992]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-09-28 43680]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-06-30 2528096]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-11-08 1640768]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-08 2253120]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-07-23 75136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-11-07 381248]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-15 2280312]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-06-22 1255736]

-----------------EOF-----------------

Zdravím!
Poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

ComboFix 11-11-23.01 - Tomas 23.11.2011 20:21:10.3.3 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2827 [GMT 1:00]
Spuštěný z: c:\users\Tomas\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: COMODO Defense+ *Disabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe
c:\users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
c:\users\Tomas\AppData\Roaming\Tomaslog.dat
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-23 do 2011-11-23 )))))))))))))))))))))))))))))))
.
.
2011-11-18 14:51 . 2011-11-21 09:25 -------- d-----w- c:\users\Tomas\AppData\Roaming\Media Player Classic
2011-11-10 17:42 . 2011-11-10 17:42 -------- d-----w- c:\users\Tomas\AppData\Local\Skyrim
2011-11-10 17:36 . 2011-11-13 11:23 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2011-11-09 21:06 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 21:06 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 21:06 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 21:06 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys
2011-11-09 16:56 . 2003-03-19 06:12 1047552 ----a-w- c:\windows\SysWow64\MFC71U.DLL
2011-11-09 16:56 . 2003-03-19 05:14 499712 ----a-w- c:\windows\SysWow64\MSVCP71.DLL
2011-11-09 16:56 . 2003-03-19 04:05 89088 ----a-w- c:\windows\SysWow64\ATL71.DLL
2011-11-07 17:53 . 2011-11-07 17:53 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2011-11-05 22:03 . 2011-11-05 22:03 -------- d-----w- c:\users\Tomas\AppData\Roaming\Evolved
2011-11-05 21:58 . 2011-11-23 17:52 -------- d-----w- c:\program files (x86)\Microsoft
2011-11-05 21:56 . 2011-11-08 20:08 -------- d-----w- c:\program files (x86)\Jane's Advanced Strike Fighters
2011-11-05 15:51 . 2011-11-21 08:22 -------- d-----w- c:\program files (x86)\FreeRapid-0.86
2011-11-03 18:57 . 2011-11-03 18:57 -------- d-----w- c:\users\Tomas\AppData\Local\WB Games
2011-11-03 18:34 . 2011-11-05 21:58 -------- d--h--w- c:\windows\msdownld.tmp
2011-11-03 14:18 . 2011-11-03 14:18 -------- d-----w- c:\users\Tomas\AppData\Local\APN
2011-11-03 14:18 . 2011-11-03 14:17 627600 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-03 14:17 . 2011-11-03 14:17 -------- d-----w- c:\program files\Java
2011-11-03 14:12 . 2011-11-03 14:12 -------- d-----w- c:\program files (x86)\FileHippo.com
2011-10-25 21:39 . 2011-10-25 21:39 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-08 03:51 . 2011-08-28 07:52 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-08 03:51 . 2011-08-28 07:51 1543488 ----a-w- c:\windows\system32\nvdispco64.dll
2011-11-08 03:51 . 2011-06-22 20:04 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-11-08 03:51 . 2011-06-22 20:04 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-11-08 03:51 . 2011-06-22 20:04 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-08 03:51 . 2011-06-22 20:04 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-08 03:51 . 2011-06-22 20:04 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-11-08 03:51 . 2011-06-22 20:04 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-08 03:51 . 2011-06-22 20:04 2808128 ----a-w- c:\windows\system32\nvapi64.dll
2011-11-08 03:51 . 2009-07-13 21:59 8792384 ----a-w- c:\windows\system32\nvwgf2umx.dll
2011-10-22 11:21 . 2011-10-22 11:21 71680 ----a-w- c:\windows\system32\frapsv64.dll
2011-10-22 11:21 . 2011-10-22 11:21 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2011-10-15 08:53 . 2011-08-28 07:51 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2011-09-28 10:01 . 2011-09-28 10:01 43680 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-09-28 10:01 . 2011-09-28 10:01 314016 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-09-06 21:45 . 2011-07-21 09:02 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 21:45 . 2011-07-21 09:02 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-09-06 21:45 . 2011-06-22 19:54 254400 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 21:38 . 2011-07-21 09:02 601944 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 21:38 . 2011-07-21 09:02 301912 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 21:36 . 2011-07-21 09:02 58200 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 21:36 . 2011-07-21 09:02 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 21:36 . 2011-07-21 09:02 65368 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-09-06 21:36 . 2011-07-21 09:02 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-08-27 05:37 . 2011-10-13 20:18 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 05:37 . 2011-10-13 20:18 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 04:26 . 2011-10-13 20:18 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2011-08-27 04:26 . 2011-10-13 20:18 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QIP2005"="c:\program files (x86)\QIP\qip.exe" [2010-10-29 3330560]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"COMODO"=c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe
"CPA"=c:\program files\COMODO\COMODO GeekBuddy\VALA.exe
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-08 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-11-07 381248]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-15 2280312]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1553317441-3571389557-1658996358-1001Core.job
- c:\users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-22 19:42]
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1553317441-3571389557-1658996358-1001UA.job
- c:\users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-22 19:42]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 21:45 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-09 11860072]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-06-30 9048392]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\guard64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube to Mp3 Converter - c:\users\Tomas\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 212.96.161.6 212.96.160.7
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-PrintSpooler - c:\users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
Wow6432Node-HKCU-Run-AssetCache - c:\users\Tomas\AppData\Roaming\AdobeUtil\assetcache.exe
Wow6432Node-HKLM-Run-PrintSpooler - c:\users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
Wow6432Node-HKLM-Explorer_Run-PrintSpoolStart - c:\users\Tomas\AppData\Roaming\PrintDrv\Spooler.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2011-11-23 20:30:39 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-23 19:30
.
Před spuštěním: Volných bajtů: 365 766 201 344
Po spuštění: Volných bajtů: 365 684 953 088
.
- - End Of File - - 84B13CBE56E5827E9C5B411F2AC10D87

Několik položek CF smazal, zbytek logu vypadá čistý. Nastala nějaká změna?

Nastala, už to jede zase tak, jak má
Děkuji!

Pročistíme ještě od combofixu? Případně nějaké další čištění?

CF odinstalujte Startmenu>přík řádek (napsat) combofix /uninstall>OK. Systém můžete ještě vyčistit CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .