VIRY.CZ

Fyftém mi minule zahlásil nějakýho šmejda, mimo to mívám často modrou smrt, což dočasně vyřeší defragmentance, kterou dělávám každej druhej den.

End of file - 10590 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\diMaster.dll" /prefetch:1
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe"
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6d0c8e5b-88bc-4647-b160-6e4e22f1535e -SystemEventPortName:HostProcess-96a94a30-1ce2-4c46-adc7-62cad72b41fa -IoCancelEventPortName:HostProcess-08f83087-b7cd-4cf3-80dc-ff3549f59abd -NonStateChangingEventPortName:HostProcess-16e3db02-8e38-48d1-8f13-8c259f933d52 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:06e28d27-07aa-4d8e-933d-3e1e363906ed
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe" /c /a /s UserSession
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
"D:\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
"D:\Program Files (x86)\Xfire\Xfire.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Computer Alarm Clock\cac.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"D:\Program Files (x86)\Xfire\xfire64.exe" xfire64.exe /pid 3340
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4540.1372f7c0.185921822 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.4.0.1" -omnijar C:\Program Files (x86)\Mozilla Firefox\omni.jar 4540 \\.\pipe\gecko-crash-server-pipe.4540 plugin
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\SEA LION\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\SEA LION\AppData\Roaming\Mozilla\Firefox\Profiles\jq4epwbi.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\SEA LION\AppData\Roaming\Mozilla\Firefox\Profiles\jq4epwbi.default\extensions\
{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll [2011-04-28 436152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL [2011-03-31 210872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\prxtbuTo0.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll [2011-04-28 436152]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\prxtbuTo0.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-05-07 10810912]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2008-01-24 2289664]
"DAEMON Tools Lite"=D:\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"SpywareTerminatorUpdate"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-05-08 3318784]
"Steam"=C:\Program Files (x86)\Steam1\Steam.exe [2011-11-17 1242448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-08-25 98304]
"RemoteControl"=C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2010-03-12 49208]
""= []
"Computer Alarm Clock"=C:\PROGRA~2\COMPUT~1\cac.exe [2007-09-06 696832]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

C:\Users\SEA LION\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Warkeys Update.lnk - C:\Program Files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe
Xfire.lnk - D:\Program Files (x86)\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 month======

2011-11-26 13:17:11 ----D---- C:\rsit
2011-11-26 13:17:11 ----D---- C:\Program Files\trend micro
2011-11-19 18:50:25 ----D---- C:\Windows\system32\SPReview
2011-11-19 18:49:13 ----D---- C:\Windows\system32\EventProviders
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-11-17 16:02:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-17 16:02:43 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-11-17 16:02:42 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-11-17 16:02:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-11-17 16:02:42 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-17 16:02:42 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-17 16:02:41 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-17 16:02:40 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-11-17 16:02:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-11-17 16:02:40 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-11-17 16:02:40 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-11-17 16:02:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-11-17 16:02:40 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-17 16:02:40 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-17 16:02:40 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-17 16:02:40 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-17 16:02:40 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-17 16:02:39 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-11-17 16:02:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-11-17 16:02:39 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-11-17 16:02:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-11-17 16:02:39 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-17 16:02:39 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-17 16:02:39 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-17 16:02:39 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-17 16:02:38 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-11-17 16:02:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-11-17 16:02:38 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-11-17 16:02:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-11-17 16:02:38 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-11-17 16:02:38 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-17 16:02:38 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-17 16:02:38 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-17 16:02:38 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-17 16:02:38 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-17 16:02:37 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-11-17 16:02:37 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-11-17 16:02:37 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-11-17 16:02:37 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-11-17 16:02:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-11-17 16:02:37 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-17 16:02:37 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-17 16:02:37 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-17 16:02:37 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-11-17 16:02:37 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-11-17 16:02:36 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-11-17 16:02:36 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-11-17 16:02:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-17 16:02:35 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-17 16:02:34 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-11-17 16:02:34 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-17 16:02:33 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-11-17 16:02:33 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-11-17 16:02:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-11-17 16:02:33 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-17 16:02:33 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-17 16:02:33 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-17 16:02:32 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-11-17 16:02:32 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-11-17 16:02:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-11-17 16:02:32 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-17 16:02:32 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-17 16:02:32 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-17 16:02:31 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-11-17 16:02:31 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-11-17 16:02:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-11-17 16:02:31 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-17 16:02:31 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-17 16:02:31 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-17 16:02:30 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-11-17 16:02:30 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-11-17 16:02:30 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-17 16:02:30 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-17 16:02:29 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-11-17 16:02:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-11-17 16:02:29 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-17 16:02:29 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-17 16:02:28 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-11-17 16:02:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-11-17 16:02:28 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-11-17 16:02:28 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-11-17 16:02:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-11-17 16:02:28 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-17 16:02:28 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-17 16:02:28 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-17 16:02:28 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-17 16:02:28 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-17 16:02:27 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-11-17 16:02:27 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-17 16:02:26 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-11-17 16:02:26 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-11-17 16:02:26 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-17 16:02:26 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-17 16:02:25 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-11-17 16:02:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-11-17 16:02:25 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-17 16:02:25 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-17 16:02:24 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-11-17 16:02:24 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-17 16:02:23 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-11-17 16:02:23 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-17 16:02:22 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-11-17 16:02:22 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-11-17 16:02:22 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-17 16:02:22 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-17 16:02:20 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-11-17 16:02:20 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-17 16:02:19 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-11-17 16:02:19 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-11-17 16:02:19 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-17 16:02:19 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-17 16:02:18 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-11-17 16:02:18 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-17 16:02:17 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-11-17 16:02:17 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-17 16:02:16 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-11-17 16:02:16 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-17 16:02:14 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-11-17 16:02:14 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-11-17 16:02:14 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-17 16:02:14 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-17 16:02:12 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-11-17 16:02:12 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-17 16:02:05 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-11-17 16:02:05 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-17 16:02:04 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-11-17 16:02:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-11-17 16:02:04 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-17 16:02:04 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-17 16:02:02 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-11-17 16:02:02 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-17 16:02:00 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-11-17 16:02:00 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-17 16:01:58 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-11-17 16:01:58 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-17 16:01:56 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-11-17 16:01:56 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-17 16:01:54 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-11-17 16:01:54 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-17 16:01:51 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-11-17 16:01:51 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-11-17 15:57:48 ----D---- C:\Program Files (x86)\The Elder Scrolls V Skyrim
2011-11-17 14:58:57 ----D---- C:\Program Files (x86)\Steam1
2011-11-17 11:28:38 ----D---- C:\Program Files\CCleaner
2011-11-15 20:00:41 ----D---- C:\Users\SEA LION\AppData\Roaming\Juce VST Host
2011-11-15 20:00:32 ----D---- C:\Users\SEA LION\AppData\Roaming\Sawer
2011-11-15 19:58:22 ----D---- C:\Users\SEA LION\AppData\Roaming\Hardcore
2011-11-15 19:38:41 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2011-11-15 19:38:19 ----A---- C:\Windows\SYSWOW64\rewire.dll
2011-11-15 19:37:28 ----D---- C:\Program Files (x86)\VstPlugins
2011-11-15 19:37:26 ----D---- C:\Program Files (x86)\Outsim
2011-11-15 19:35:45 ----D---- C:\Program Files (x86)\Image-Line
2011-11-10 18:41:54 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-10 18:41:53 ----A---- C:\Windows\system32\win32k.sys
2011-11-06 23:18:09 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-11-06 23:18:09 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-11-06 23:18:09 ----A---- C:\Windows\SYSWOW64\java.exe

======List of files/folders modified in the last 1 month======

2011-11-26 13:17:16 ----D---- C:\Windows\Prefetch
2011-11-26 13:17:14 ----D---- C:\Windows\Temp
2011-11-26 13:17:11 ----RD---- C:\Program Files
2011-11-26 13:14:52 ----D---- C:\Windows\System32
2011-11-26 13:14:52 ----D---- C:\Windows\inf
2011-11-26 13:14:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-26 13:13:59 ----SHD---- C:\System Volume Information
2011-11-26 13:12:52 ----D---- C:\Windows\system32\config
2011-11-26 13:09:33 ----A---- C:\Windows\SYSWOW64\log.txt
2011-11-25 20:44:15 ----D---- C:\Windows\Minidump
2011-11-25 20:44:14 ----D---- C:\Windows
2011-11-25 18:54:01 ----D---- C:\Users\SEA LION\AppData\Roaming\uTorrent
2011-11-24 17:16:37 ----D---- C:\Program Files (x86)\DotAlicious Gaming Client
2011-11-24 14:35:57 ----D---- C:\ProgramData\Spyware Terminator
2011-11-23 17:41:57 ----D---- C:\Program Files (x86)\Spyware Terminator
2011-11-22 20:20:20 ----D---- C:\Users\SEA LION\AppData\Roaming\Skype
2011-11-22 18:57:06 ----D---- C:\Users\SEA LION\AppData\Roaming\skypePM
2011-11-21 07:20:29 ----D---- C:\Windows\Microsoft.NET
2011-11-21 07:14:52 ----RSD---- C:\Windows\assembly
2011-11-20 16:30:29 ----D---- C:\Windows\winsxs
2011-11-20 13:44:53 ----D---- C:\Windows\rescache
2011-11-20 12:53:26 ----D---- C:\Windows\system32\catroot
2011-11-20 12:53:17 ----D---- C:\Windows\system32\catroot2
2011-11-20 12:49:04 ----D---- C:\Windows\system32\DriverStore
2011-11-20 12:42:32 ----D---- C:\Windows\Panther
2011-11-20 12:38:12 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-11-20 12:38:12 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-11-20 12:38:12 ----D---- C:\Program Files (x86)\Windows Media Player
2011-11-20 12:38:12 ----D---- C:\Program Files (x86)\Windows Mail
2011-11-20 12:38:12 ----D---- C:\Program Files (x86)\Internet Explorer
2011-11-20 12:38:11 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-11-20 12:38:10 ----D---- C:\Program Files\Windows Sidebar
2011-11-20 12:38:10 ----D---- C:\Program Files\Windows Mail
2011-11-20 12:38:10 ----D---- C:\Program Files\Internet Explorer
2011-11-20 12:38:10 ----D---- C:\Program Files\DVD Maker
2011-11-20 12:38:09 ----D---- C:\Program Files\Windows Portable Devices
2011-11-20 12:38:09 ----D---- C:\Program Files\Windows Photo Viewer
2011-11-20 12:38:09 ----D---- C:\Program Files\Windows Media Player
2011-11-20 12:38:09 ----D---- C:\Program Files\Windows Journal
2011-11-20 12:38:08 ----D---- C:\Program Files\Common Files\System
2011-11-20 12:38:07 ----D---- C:\Windows\servicing
2011-11-20 12:38:07 ----D---- C:\Program Files\Windows Defender
2011-11-20 12:38:06 ----D---- C:\Windows\ehome
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\Setup
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\oobe
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\migration
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\da-DK
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\cs
2011-11-20 12:38:00 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-11-20 12:37:59 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-11-20 12:37:58 ----D---- C:\Windows\SYSWOW64\sppui
2011-11-20 12:37:58 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-11-20 12:37:58 ----D---- C:\Windows\SYSWOW64\es-ES
2011-11-20 12:37:57 ----D---- C:\Windows\SYSWOW64\wbem
2011-11-20 12:37:55 ----D---- C:\Windows\SYSWOW64\migwiz
2011-11-20 12:37:55 ----D---- C:\Windows\SYSWOW64\Dism
2011-11-20 12:37:54 ----D---- C:\Windows\SysWOW64
2011-11-20 12:37:34 ----D---- C:\Windows\system32\en-US
2011-11-20 12:37:34 ----D---- C:\Windows\system32\da-DK
2011-11-20 12:37:34 ----D---- C:\Windows\PolicyDefinitions
2011-11-20 12:37:33 ----D---- C:\Windows\system32\oobe
2011-11-20 12:37:33 ----D---- C:\Windows\system32\migration
2011-11-20 12:37:29 ----D---- C:\Windows\system32\Setup
2011-11-20 12:37:29 ----D---- C:\Windows\system32\cs
2011-11-20 12:37:29 ----D---- C:\Windows\system32\AdvancedInstallers
2011-11-20 12:37:28 ----D---- C:\Windows\system32\cs-CZ
2011-11-20 12:37:26 ----D---- C:\Windows\system32\manifeststore
2011-11-20 12:37:26 ----D---- C:\Windows\system32\es-ES
2011-11-20 12:37:25 ----D---- C:\Windows\system32\sppui
2011-11-20 12:37:25 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-11-20 12:37:25 ----D---- C:\Windows\system32\drivers
2011-11-20 12:37:24 ----D---- C:\Windows\system32\wbem
2011-11-20 12:37:24 ----D---- C:\Windows\system32\migwiz
2011-11-20 12:37:23 ----D---- C:\Windows\system32\Dism
2011-11-20 12:37:02 ----RSD---- C:\Windows\Fonts
2011-11-20 12:37:01 ----D---- C:\Windows\AppPatch
2011-11-20 03:33:51 ----D---- C:\Windows\system32\Boot
2011-11-19 18:58:52 ----D---- C:\Windows\Logs
2011-11-19 18:57:24 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-11-19 18:57:24 ----A---- C:\Windows\system32\msclmd.dll
2011-11-19 18:49:44 ----D---- C:\Users\SEA LION\AppData\Roaming\Spyware Terminator
2011-11-18 13:15:09 ----D---- C:\ProgramData\Xfire
2011-11-18 13:13:44 ----SHD---- C:\Config.Msi
2011-11-17 16:02:53 ----SHD---- C:\Windows\Installer
2011-11-17 15:57:48 ----RD---- C:\Program Files (x86)
2011-11-17 12:13:07 ----D---- C:\Users\SEA LION\AppData\Roaming\Media Player Classic
2011-11-17 12:13:06 ----D---- C:\Users\SEA LION\AppData\Roaming\Winamp
2011-11-17 11:58:46 ----D---- C:\Program Files (x86)\Steam
2011-11-17 11:57:19 ----RD---- C:\Program Files (x86)\Skype
2011-11-17 11:53:33 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-17 11:48:28 ----HD---- C:\ProgramData
2011-11-17 11:33:46 ----D---- C:\Users\SEA LION\AppData\Roaming\DAEMON Tools Lite
2011-11-17 11:33:40 ----D---- C:\Users\SEA LION\AppData\Roaming\Ventrilo
2011-11-17 11:33:40 ----D---- C:\Users\SEA LION\AppData\Roaming\TS3Client
2011-11-17 11:30:24 ----D---- C:\Windows\debug
2011-11-10 20:32:51 ----A---- C:\Windows\system32\MRT.exe
2011-11-08 22:14:00 ----D---- C:\Users\SEA LION\AppData\Roaming\Xfire
2011-11-06 23:22:53 ----D---- C:\Program Files (x86)\Common Files
2011-11-06 23:18:05 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS [2011-03-15 912504]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110701.001\BHDrvx64.sys [2011-05-19 1143416]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-13 254528]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2011-05-10 481912]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110708.032\IDSvia64.sys [2011-07-07 488056]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1206000.01D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1206000.01D\SYMNETS.SYS [2011-07-08 386168]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2010-07-07 50696]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-08-26 7767040]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-08-26 279040]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k62x64.sys [2010-04-05 301232]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 136824]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-05-07 2366496]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2011-05-11 174200]
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Program Files (x86)\Garena\safedrv.sys []
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110710.003\ENG64.SYS [2011-06-23 117880]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110710.003\EX64.SYS [2011-06-23 2011768]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1206000.01D\SRTSP64.SYS [2011-03-31 744568]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-08-26 203264]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2008-01-24 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-04-14 75136]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [2007-05-14 272024]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2011-05-08 948775]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-09-17 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-11-17 419624]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-04-12 1255736]

-----------------EOF-----------------

Zdravím, smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.


P.S. všechny logy co sem dáváš potřebuji kompletní (u Rsitu ti chybí začátek)

Udělal jsem jak jsi řekl, akorát nevím, kde mám teď ten log z combofixu, páč se těchhle mašinách nevyznávám.

Roli píše:Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem

Chce to číst návody

ComboFix 11-11-29.04 - SEA LION 29.11.2011 21:10:21.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3957.2476 [GMT 1:00]
Spuštěný z: c:\users\SEA LION\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-28 do 2011-11-29 )))))))))))))))))))))))))))))))
.
.
2011-11-29 20:19 . 2011-11-29 20:19 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{290D46CB-4C75-4AD3-8444-6001A654CAC3}\offreg.dll
2011-11-29 20:15 . 2011-11-29 20:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-29 16:24 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{290D46CB-4C75-4AD3-8444-6001A654CAC3}\mpengine.dll
2011-11-26 12:17 . 2011-11-26 12:17 -------- d-----w- C:\rsit
2011-11-26 12:17 . 2011-11-26 12:17 -------- d-----w- c:\program files\trend micro
2011-11-19 17:50 . 2011-11-19 17:50 -------- d-----w- c:\windows\system32\SPReview
2011-11-19 17:49 . 2011-11-19 17:49 -------- d-----w- c:\windows\system32\EventProviders
2011-11-17 15:01 . 2005-05-26 14:34 3767504 ----a-w- c:\windows\system32\d3dx9_26.dll
2011-11-17 15:01 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll
2011-11-17 10:28 . 2011-11-17 10:28 -------- d-----w- c:\program files\CCleaner
2011-11-15 19:00 . 2011-11-15 19:04 -------- d-----w- c:\users\SEA LION\AppData\Roaming\Juce VST Host
2011-11-15 19:00 . 2011-11-15 19:00 -------- d-----w- c:\users\SEA LION\AppData\Roaming\Sawer
2011-11-15 18:58 . 2011-11-15 18:58 -------- d-----w- c:\users\SEA LION\AppData\Roaming\Hardcore
2011-11-15 18:38 . 2011-11-15 18:38 -------- d-----w- c:\program files (x86)\ASIO4ALL v2
2011-11-15 18:38 . 2006-06-20 08:56 225280 ----a-w- c:\windows\SysWow64\rewire.dll
2011-11-15 18:37 . 2009-08-02 20:09 1554944 ----a-w- c:\windows\SysWow64\vorbis.acm
2011-11-15 18:37 . 2011-11-15 18:38 -------- d-----w- c:\program files (x86)\VstPlugins
2011-11-15 18:37 . 2011-11-15 18:37 -------- d-----w- c:\program files (x86)\Outsim
2011-11-15 18:35 . 2011-11-28 22:23 -------- d-----w- c:\program files (x86)\Image-Line
2011-11-10 17:41 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-10 17:41 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-10 17:41 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-10 17:41 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-19 17:57 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-11-19 17:57 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-10-13 20:29 . 2011-10-13 20:29 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2011-10-13 20:29 . 2011-10-13 20:29 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2011-10-03 04:06 . 2011-04-11 15:35 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-10-01 03:25 . 2011-10-13 12:51 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:42 . 2011-10-13 12:51 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTo0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\uTorrentBar\prxtbuTo0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTo0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-01-24 2289664]
"DAEMON Tools Lite"="d:\daemon tools lite\DTLite.exe" [2011-01-20 1305408]
"SpywareTerminatorUpdate"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2011-05-08 3318784]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"RemoteControl"="c:\program files (x86)\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"Computer Alarm Clock"="c:\progra~2\COMPUT~1\cac.exe" [2007-09-06 696832]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
.
c:\users\SEA LION\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Warkeys Update.lnk - c:\program files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe [2009-9-25 245248]
Xfire.lnk - d:\program files (x86)\Xfire\Xfire.exe [2011-10-13 3510680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 GGSAFERDriver;GGSAFER Driver;d:\program files (x86)\Garena\safedrv.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110701.001\BHDrvx64.sys [2011-05-19 1143416]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110708.032\IDSvia64.sys [2011-07-07 488056]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1206000.01D\SYMNETS.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 136824]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-01-24 10:30 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-07 10810912]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-15 499608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\SEA LION\AppData\Roaming\Mozilla\Firefox\Profiles\jq4epwbi.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1962689573-952449915-1300430135-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:0c,e9,45,ad,e9,28,86,41,05,72,34,4f,3b,03,79,1d,95,73,53,d6,60,79,a3,
f7,01,dd,df,0a,25,71,e2,fc,cb,cc,39,c6,a0,74,c6,55,8a,41,5c,dc,03,47,c8,c4,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\CyberLink\Shared Files\RichVideo.exe
.
**************************************************************************
.
Celkový čas: 2011-11-29 21:30:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-29 20:30
.
Před spuštěním: Volných bajtů: 39 188 795 392
Po spuštění: Volných bajtů: 39 255 908 352
.
- - End Of File - - 0B7E0709D9B8C44D39347A31F2130813

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci