Facebook virus

[master007]

Můj problém:
jednou jsem si hezky surfoval na fb a jeden kámoš mi na zeď vložil video. Samozřejmě jsem na něj kliknul a v tu chvíli to začalo.
Toto video se začalo automaticky (Bez mého svolení) vkládat na zdi mých kamarádů, do různých skupin i na různé stránky. To ale není vše. Dále se mi z některých stránek najednou stanou aplikace FB, které jsou ale úplně v pořádku!!(Stránky se mění každou chvíli, trvalo mi dost dlouho se sem vůbec dostat). Další věc je kompletní zpomalení všech internetových stránek. Udělal jsem samozřejmě všechny klasické bezpečnostní věci na fb (Změna mailu, změna hesla, smazal jesm všechny osobně neznámý lidi a disliknul všechny cizí stránky. To ale samozřejmě je beze smyslu. Prohnal jsem počítač Avastem (plnou verzí) I Windows defendrem. Nikde nic. Začínám být docela zoufalý. Už skoro nemůžu být na internetu. Bojím se ale dost i o můj počítač. Proto prosím o jakoukoli pomoc.
Fakta:
video: Sexy Tattoos on Women - Sexy Tattoo Designs
stránka: http://bit.ly
prohlížeč: Google chrome
Antivirus: Avast Internet security.
Prosím o jakoukoli odpověď
Dík moc.

[Rudy]

Zdravím!

Nejprve dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 .

[master007]

Aha omlouvám se. Tady je:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Já at 2012-01-03 08:12:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 629 GB (90%) free of 701 GB
Total RAM: 4040 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:12:45, on 3.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Lenovo\RobustIntelligentCompanion\LenovoR.I.C.Tray.exe
C:\Program Files (x86)\MyBrowserCash\MyBrowserCash.exe
C:\ProgramData\Boxtools\Boxofttoolbox.exe
C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\Download.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files (x86)\Global Graphics\gDoc\DocCreatorClient.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Já.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: BS Player - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DocCreatorClient] "C:\Program Files (x86)\Global Graphics\gDoc\DocCreatorClient.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [LenovoR.I.C.Tray] C:\Program Files (x86)\Lenovo\RobustIntelligentCompanion\LenovoR.I.C.Tray.exe
O4 - HKCU\..\Run: [MyBrowserCash] C:\Program Files (x86)\MyBrowserCash\MyBrowserCash.exe
O4 - HKCU\..\Run: [Boxoft Tools] "C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun
O4 - HKCU\..\Run: [Download Master] C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\Download.exe /hide
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2059308169-1745044369-3953885576-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2059308169-1745044369-3953885576-1000\..\Run: [MyBrowserCash] C:\Program Files (x86)\MyBrowserCash\MyBrowserCash.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2059308169-1745044369-3953885576-1000\..\Run: [Boxoft Tools] "C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2059308169-1745044369-3953885576-1000\..\Run: [Download Master] C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\Download.exe /hide (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2059308169-1745044369-3953885576-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Download All by ASUS Download - C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\ASDownloadAll.htm
O8 - Extra context menu item: Download using ASUS Download - C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\ASDownload.htm
O8 - Extra context menu item: Download Video on This Page - res://C:\Program Files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/211
O8 - Extra context menu item: Download Video This Links To - res://C:\Program Files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/212
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - res://C:\Program Files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/211 (file missing)
O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - res://C:\Program Files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/211 (file missing)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{A3C682EA-1512-4373-92CB-A4A236FFD63C}: NameServer = 192.168.1.33
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: DCMessages - Global Graphics Software Ltd - C:\Windows\SysWOW64\DCMessages.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15302 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 22738944
\??\C:\windows\system32\conhost.exe "-573158552-545246071232938236-1292105473154025508-522054007255799369-852748045
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
taskeng.exe {8B8B4D0D-E5E6-4BDF-8602-2AAAC9C1DD4D}
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\Lenovo\RobustIntelligentCompanion\LenovoR.I.C.Tray.exe"
"C:\Program Files (x86)\MyBrowserCash\MyBrowserCash.exe"
"C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun
"C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\Download.exe" /hide
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe"
"C:\Program Files (x86)\Global Graphics\gDoc\DocCreatorClient.exe"
"C:\Windows\SysWOW64\DCMessages.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\windows\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4776
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --extension-process --enable-print-preview --channel=6676.0299A780.881086776 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_12/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --extension-process --enable-print-preview --channel=6676.0299A900.119058400 /prefetch:3
taskeng.exe {43E357CA-0857-4C22-862A-1148B671CB93}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Já\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0\npSkypeChromePlugin.dll" --lang=cs --channel=6676.067CEE00.1930992613 /prefetch:4
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\160912~1.63\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\16.0.912.63\gcswf32.dll" --lang=cs --channel=6676.08245A80.1703415196 --flash-broker=6384 /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_12/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=6676.0592DD80.492045070 /prefetch:3
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\system32\sppsvc.exe
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_12/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=6676.061C7300.56148482 /prefetch:3
"C:\windows\system32\SearchFilterHost.exe" 0 544 548 556 65536 552
wmiadap.exe /F /T /R
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheListSize/CacheListSize_12/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=6676.0B487900.260299665 /prefetch:3
"C:\Users\Já\Downloads\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-11-28 963064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-02 458416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-02 342192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-02 458416]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-11-28 963064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-02 342192]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll [2011-05-09 176936]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-03-30 167960]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-03-30 391704]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-03-30 418840]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"IntelPAN"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-05-02 1935120]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-21 2712360]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2011-10-08 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2011-10-08 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2011-10-08 5908928]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LenovoR.I.C.Tray"=C:\Program Files (x86)\Lenovo\RobustIntelligentCompanion\LenovoR.I.C.Tray.exe [2011-10-08 2569568]
"MyBrowserCash"=C:\Program Files (x86)\MyBrowserCash\MyBrowserCash.exe [2011-12-02 51712]
"Boxoft Tools"=C:\ProgramData\Boxtools\Boxofttoolbox.exe [2010-11-19 2590208]
"Download Master"=C:\Program Files (x86)\ASUS\WL-500gP Wireless Router Utilities\Download.exe [2006-05-12 5721600]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2011-10-08 39408]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-12 283160]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2011-10-08 329056]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"DocCreatorClient"=C:\Program Files (x86)\Global Graphics\gDoc\DocCreatorClient.exe [2009-11-24 292248]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-11-28 3744552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-03 08:12:39 ----D---- C:\rsit
2012-01-03 08:12:39 ----D---- C:\Program Files\trend micro
2012-01-02 14:23:54 ----A---- C:\windows\system32\drivers\aswFW.sys
2012-01-02 14:23:39 ----A---- C:\windows\system32\drivers\aswNdis2.sys
2012-01-02 14:23:38 ----A---- C:\windows\system32\drivers\aswNdis.sys
2012-01-02 14:10:35 ----A---- C:\windows\system32\drivers\aswSP.sys
2012-01-02 14:10:35 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2012-01-02 14:10:33 ----A---- C:\windows\system32\drivers\aswTdi.sys
2012-01-02 14:10:33 ----A---- C:\windows\system32\drivers\aswSnx.sys
2012-01-02 14:10:33 ----A---- C:\windows\system32\drivers\aswRdr.sys
2012-01-02 14:10:33 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2012-01-02 14:10:32 ----A---- C:\windows\system32\aswBoot.exe
2012-01-02 14:10:20 ----A---- C:\windows\avastSS.scr
2012-01-02 14:10:19 ----A---- C:\windows\SYSWOW64\aswBoot.exe
2012-01-02 14:10:14 ----D---- C:\ProgramData\AVAST Software
2012-01-02 14:10:14 ----D---- C:\Program Files\AVAST Software
2011-12-22 21:12:25 ----D---- C:\Program Files (x86)\Conduit
2011-12-22 21:12:17 ----D---- C:\Program Files (x86)\BS_Player
2011-12-22 21:11:45 ----D---- C:\Users\Já\AppData\Roaming\BSplayer Pro
2011-12-22 21:11:45 ----D---- C:\Users\Já\AppData\Roaming\BSplayer
2011-12-22 21:11:38 ----D---- C:\Program Files (x86)\Webteh
2011-12-15 20:59:58 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2011-12-15 20:59:58 ----A---- C:\windows\system32\mshtmled.dll
2011-12-15 20:59:57 ----A---- C:\windows\SYSWOW64\urlmon.dll
2011-12-15 20:59:57 ----A---- C:\windows\SYSWOW64\url.dll
2011-12-15 20:59:57 ----A---- C:\windows\SYSWOW64\ieui.dll
2011-12-15 20:59:57 ----A---- C:\windows\SYSWOW64\iertutil.dll
2011-12-15 20:59:57 ----A---- C:\windows\system32\urlmon.dll
2011-12-15 20:59:57 ----A---- C:\windows\system32\url.dll
2011-12-15 20:59:57 ----A---- C:\windows\system32\jsproxy.dll
2011-12-15 20:59:57 ----A---- C:\windows\system32\ieui.dll
2011-12-15 20:59:57 ----A---- C:\windows\system32\iertutil.dll
2011-12-15 20:59:56 ----A---- C:\windows\SYSWOW64\wininet.dll
2011-12-15 20:59:56 ----A---- C:\windows\SYSWOW64\jscript9.dll
2011-12-15 20:59:56 ----A---- C:\windows\SYSWOW64\jscript.dll
2011-12-15 20:59:56 ----A---- C:\windows\system32\wininet.dll
2011-12-15 20:59:56 ----A---- C:\windows\system32\jscript9.dll
2011-12-15 20:59:55 ----A---- C:\windows\SYSWOW64\mshtml.dll
2011-12-15 20:59:55 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2011-12-15 20:59:55 ----A---- C:\windows\system32\jscript.dll
2011-12-15 20:59:54 ----A---- C:\windows\SYSWOW64\ieframe.dll
2011-12-15 20:59:54 ----A---- C:\windows\system32\mshtml.dll
2011-12-15 20:59:53 ----A---- C:\windows\system32\ieframe.dll
2011-12-15 14:18:13 ----A---- C:\windows\system32\csrsrv.dll
2011-12-15 14:13:13 ----A---- C:\windows\system32\win32k.sys
2011-12-15 14:13:10 ----A---- C:\windows\system32\EncDec.dll
2011-12-15 14:13:09 ----A---- C:\windows\SYSWOW64\EncDec.dll
2011-12-15 14:12:18 ----A---- C:\windows\system32\tzres.dll
2011-12-15 14:12:12 ----A---- C:\windows\SYSWOW64\tzres.dll
2011-12-13 17:03:24 ----A---- C:\windows\SYSWOW64\ASUSW32N50.dll
2011-12-13 17:03:24 ----A---- C:\windows\SYSWOW64\ASNDIS5.sys
2011-12-13 17:03:24 ----A---- C:\windows\SYSWOW64\ASIW32N50.dll
2011-12-13 17:03:24 ----A---- C:\windows\SYSWOW64\ASINDIS5.sys
2011-12-13 17:03:22 ----D---- C:\Program Files (x86)\ASUS
2011-12-12 08:18:07 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-12-10 15:40:56 ----A---- C:\ProgramData\__wdump.txt
2011-12-10 15:36:28 ----D---- C:\ProgramData\Pinnacle Studio HD
2011-12-10 15:24:34 ----D---- C:\ProgramData\Studio 14
2011-12-10 15:24:34 ----D---- C:\ProgramData\Pinnacle Studio Plus
2011-12-10 15:24:33 ----D---- C:\Program Files (x86)\Pinnacle
2011-12-10 15:19:06 ----D---- C:\ProgramData\Pinnacle
2011-12-06 19:36:45 ----D---- C:\Users\Já\AppData\Roaming\.oit
2011-12-06 19:31:52 ----D---- C:\Users\Já\AppData\Roaming\Global Graphics
2011-12-06 19:31:29 ----D---- C:\Users\Já\AppData\Roaming\jaws
2011-12-06 19:29:39 ----D---- C:\ProgramData\Global Graphics
2011-12-06 19:28:42 ----A---- C:\windows\SYSWOW64\ShutdownDCClients.exe
2011-12-06 19:28:42 ----A---- C:\windows\SYSWOW64\EventHelper.dll
2011-12-06 19:28:41 ----A---- C:\windows\SYSWOW64\oemsetup.ini
2011-12-06 19:28:41 ----A---- C:\windows\SYSWOW64\doccreatorpm.dll
2011-12-06 19:28:41 ----A---- C:\windows\SYSWOW64\DCMessagesPS.dll
2011-12-06 19:28:41 ----A---- C:\windows\SYSWOW64\DCMessages.exe
2011-12-06 19:28:14 ----D---- C:\Program Files (x86)\Global Graphics
2011-12-06 19:16:19 ----D---- C:\ProgramData\Boxtools
2011-12-06 19:16:00 ----D---- C:\Program Files (x86)\Boxoft PDF to WORD (freeware)
2011-12-06 19:10:01 ----D---- C:\Program Files\Foxit Software
2011-12-06 18:33:55 ----D---- C:\Program Files\Tracker Software
2011-12-05 16:08:07 ----D---- C:\Users\Já\AppData\Roaming\Skype
2011-12-05 16:07:56 ----RD---- C:\Program Files (x86)\Skype
2011-12-05 16:07:46 ----D---- C:\ProgramData\Skype
2011-12-04 16:53:54 ----D---- C:\Program Files (x86)\Plus500

======List of files/folders modified in the last 1 month======

2012-01-03 08:12:45 ----D---- C:\windows\Temp
2012-01-03 08:12:39 ----RD---- C:\Program Files
2012-01-03 08:09:40 ----A---- C:\windows\SYSWOW64\log.txt
2012-01-03 08:07:50 ----D---- C:\ProgramData\VeriFace
2012-01-03 08:07:40 ----D---- C:\windows\system32\config
2012-01-02 21:34:01 ----D---- C:\Users\Já\AppData\Roaming\SoftGrid Client
2012-01-02 19:23:41 ----D---- C:\windows\System32
2012-01-02 19:23:41 ----D---- C:\windows\inf
2012-01-02 19:23:41 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-01-02 18:11:28 ----D---- C:\windows\Prefetch
2012-01-02 18:07:58 ----RD---- C:\Program Files (x86)
2012-01-02 18:07:58 ----D---- C:\ProgramData\McAfee
2012-01-02 18:07:58 ----D---- C:\Program Files\Common Files
2012-01-02 18:07:58 ----D---- C:\Program Files (x86)\McAfee
2012-01-02 18:07:58 ----D---- C:\Program Files (x86)\Common Files
2012-01-02 17:03:13 ----SHD---- C:\System Volume Information
2012-01-02 14:23:54 ----D---- C:\windows\system32\drivers
2012-01-02 14:23:49 ----D---- C:\windows\system32\DriverStore
2012-01-02 14:23:49 ----D---- C:\windows\system32\catroot
2012-01-02 14:10:32 ----D---- C:\windows\SysWOW64
2012-01-02 14:10:31 ----SHD---- C:\windows\Installer
2012-01-02 14:10:20 ----D---- C:\Windows
2012-01-02 14:10:14 ----HD---- C:\ProgramData
2012-01-02 10:28:39 ----RSD---- C:\windows\assembly
2012-01-02 10:28:39 ----D---- C:\windows\Microsoft.NET
2012-01-01 22:24:14 ----D---- C:\windows\winsxs
2012-01-01 22:23:24 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2011-12-27 13:16:12 ----D---- C:\windows\system32\catroot2
2011-12-25 19:11:39 ----D---- C:\windows\twain_32
2011-12-25 19:11:39 ----D---- C:\windows\SYSWOW64\drivers
2011-12-25 19:06:05 ----D---- C:\windows\system32\Tasks
2011-12-25 19:05:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-19 12:44:37 ----D---- C:\windows\ModemLogs
2011-12-18 19:15:30 ----D---- C:\windows\rescache
2011-12-16 08:02:52 ----D---- C:\windows\SYSWOW64\migration
2011-12-16 08:02:52 ----D---- C:\windows\system32\migration
2011-12-16 08:02:52 ----D---- C:\Program Files\Internet Explorer
2011-12-16 08:02:52 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-15 14:23:41 ----A---- C:\windows\system32\MRT.exe
2011-12-15 14:23:27 ----D---- C:\windows\SYSWOW64\cs-CZ
2011-12-15 14:23:27 ----D---- C:\windows\system32\cs-CZ
2011-12-14 08:14:34 ----D---- C:\windows\system32\NDF
2011-12-10 15:37:51 ----SD---- C:\Users\Já\AppData\Roaming\Microsoft
2011-12-10 15:34:27 ----RSD---- C:\windows\Fonts
2011-12-10 15:08:13 ----D---- C:\windows\system32\wdi
2011-12-07 11:53:20 ----D---- C:\Program Files (x86)\McAfee Security Scan
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Sidebar
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Photo Viewer
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Media Player
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Mail
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Journal
2011-12-05 21:23:21 ----D---- C:\Program Files\Windows Defender
2011-12-05 21:23:21 ----D---- C:\Program Files\Common Files\System
2011-12-05 21:23:21 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-12-05 21:23:20 ----D---- C:\windows\SYSWOW64\winrm
2011-12-05 21:23:20 ----D---- C:\windows\SYSWOW64\slmgr
2011-12-05 21:23:20 ----D---- C:\windows\SYSWOW64\sk-SK
2011-12-05 21:23:20 ----D---- C:\windows\SYSWOW64\migwiz
2011-12-05 21:23:20 ----D---- C:\windows\SYSWOW64\en
2011-12-05 21:23:20 ----D---- C:\windows\servicing
2011-12-05 21:23:20 ----D---- C:\windows\ehome
2011-12-05 21:23:20 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-12-05 21:23:20 ----D---- C:\Program Files (x86)\Windows Media Player
2011-12-05 21:23:20 ----D---- C:\Program Files (x86)\Windows Mail
2011-12-05 21:23:20 ----D---- C:\Program Files (x86)\Windows Defender
2011-12-05 21:23:19 ----D---- C:\windows\SYSWOW64\en-US
2011-12-05 21:23:19 ----D---- C:\windows\SYSWOW64\drivers\en-US
2011-12-05 21:23:18 ----D---- C:\windows\SYSWOW64\WCN
2011-12-05 21:23:18 ----D---- C:\windows\SYSWOW64\Printing_Admin_Scripts
2011-12-05 21:23:18 ----D---- C:\windows\SYSWOW64\DriverStore
2011-12-05 21:23:18 ----D---- C:\windows\SYSWOW64\Dism
2011-12-05 21:23:18 ----D---- C:\windows\system32\winrm
2011-12-05 21:23:18 ----D---- C:\windows\system32\sysprep
2011-12-05 21:23:18 ----D---- C:\windows\system32\slmgr
2011-12-05 21:23:18 ----D---- C:\windows\system32\sk-SK
2011-12-05 21:23:18 ----D---- C:\windows\system32\oobe
2011-12-05 21:23:18 ----D---- C:\windows\system32\migwiz
2011-12-05 21:23:18 ----D---- C:\windows\system32\en
2011-12-05 21:23:18 ----D---- C:\windows\system32\Boot
2011-12-05 21:23:18 ----D---- C:\windows\en-US
2011-12-05 21:23:17 ----D---- C:\windows\system32\en-US
2011-12-05 21:23:16 ----D---- C:\windows\system32\WCN
2011-12-05 21:23:16 ----D---- C:\windows\system32\drivers\en-US
2011-12-05 21:23:16 ----D---- C:\windows\system32\Dism
2011-12-05 21:23:11 ----D---- C:\windows\system32\Printing_Admin_Scripts
2011-12-05 21:23:06 ----D---- C:\Program Files\DVD Maker
2011-12-05 21:22:58 ----D---- C:\windows\Speech
2011-12-05 14:48:53 ----D---- C:\windows\Logs
2011-12-04 08:00:39 ----D---- C:\ProgramData\Partner

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\windows\system32\DRIVERS\aswNdis.sys [2011-11-28 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\windows\system32\drivers\aswNdis2.sys [2011-11-28 258392]
R0 HybridDisk;HybridDisk; C:\windows\System32\DRIVERS\HybridDiskX64.sys [2010-03-02 38496]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2011-10-08 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-05-10 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswFW;avast! TDI Firewall driver; C:\windows\system32\drivers\aswFW.sys [2011-11-28 140120]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr.sys [2011-11-28 42328]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2011-11-28 591192]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2011-11-28 304472]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2011-11-28 58712]
R1 hybridcfile;hybridcfile; C:\windows\system32\DRIVERS\HybridCFileX64.sys [2010-03-02 13920]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R1 winioex;winioex; C:\windows\system32\drivers\winioex.sys [2011-10-08 15456]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2011-11-28 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2011-11-28 66904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-10-08 29792]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-05-13 437288]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-05-13 150568]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2011-05-13 164392]
R3 BTWDPAN;Bluetooth Personal Area Network; C:\windows\system32\DRIVERS\btwdpan.sys [2011-05-13 89640]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-05-13 39976]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-05-13 21544]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 DelayMan;ACPI DelayMan Filter Service; C:\windows\system32\DRIVERS\delayman.sys [2011-10-08 20064]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2010-12-13 174168]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2011-05-09 425000]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\nusb3hub.sys [2010-11-19 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\windows\system32\DRIVERS\nusb3xhc.sys [2010-11-19 181248]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 rtsuvc;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-03-21 1413168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 DCamUSBSTK02N;Standard Camera; C:\windows\system32\DRIVERS\STK02NW2.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-11-28 44768]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2011-11-28 127192]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-05-12 970016]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-05-02 1517328]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-12 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-05-02 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-10 2009704]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-05-02 844560]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 DCMessages;DCMessages; C:\Windows\SysWOW64\DCMessages.exe [2009-11-24 99720]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-08 136176]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-08 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-08 182768]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-05-02 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-11-13 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

[Rudy]

Nic, co by se podobalo FB viru nevidím. Zkuste udělat kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[master007]

Tady je: Napadlo mě, jestli to není jen Spam. Jinak log je v pořádku?


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.0.1800
www.malwarebytes.org

Verze databáze: v2012.01.03.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Já :: MOJE-PC [administrátor]

Ochrana: Povolena

3.1.2012 19:27:13
mbam-log-2012-01-03 (19-27-13).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 307749
Uplynulý čas: 16 minut, 31 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.0.1800
www.malwarebytes.org

Verze databáze: v2012.01.03.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Já :: MOJE-PC [administrátor]

Ochrana: Povolena

3.1.2012 19:27:13
mbam-log-2012-01-03 (19-27-13).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 307749
Uplynulý čas: 16 minut, 31 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

[Rudy]

Jj., log je OK. Můžeme ale vyčistit PC od zbytečností. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\BS_Player\prxtbBS_P.dll
C:\Program Files (x86)\Google\Google Toolbar
C:\Program Files (x86)\Skype\Toolbars
C:\Program Files (x86)\Google\Update
C:\Program Files (x86)\Google\Common\Google Updater

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"=-

:services
gupdate
gupdatem
gusvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na MoveIt! PC bude restartován.

[master007]

Mám to uložit jako txt. ? A jak to mám nazvat? Zatim Díky moc

[Rudy]

.....a do levého okna zkopírujte

[master007]

Takže udělal jsem to přesně, počítač se restartnul a hodilo mi to tohle: (Jen ten FB problém to nevyřešilo, zkoušel jsem smazat cookies, a mrknlu jsem i do msconfig, jestli tam něco není, ale vše vypadá čistě. Nevíte co by to mohlo být? Zatím moc děkuji za odpovědi...)
All processes killed
========== FILES ==========
C:\Program Files (x86)\BS_Player\prxtbBS_P.dll moved successfully.
C:\Program Files (x86)\Google\Google Toolbar\Component folder moved successfully.
C:\Program Files (x86)\Google\Google Toolbar folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\Shared folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars folder moved successfully.
C:\Program Files (x86)\Google\Update\Install folder moved successfully.
C:\Program Files (x86)\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24} folder moved successfully.
C:\Program Files (x86)\Google\Update\Download\{AB9A4C7A-3A2F-44E0-B6D1-B49611DBDDB1} folder moved successfully.
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96} folder moved successfully.
C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\16.0.912.63 folder moved successfully.
C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D} folder moved successfully.
C:\Program Files (x86)\Google\Update\Download folder moved successfully.
C:\Program Files (x86)\Google\Update\1.3.21.79 folder moved successfully.
C:\Program Files (x86)\Google\Update folder moved successfully.
C:\Program Files (x86)\Google\Common\Google Updater folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\ not found.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service gusvc stopped successfully!
Service gusvc deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Já
->Temp folder emptied: 57607478 bytes
->Temporary Internet Files folder emptied: 208508770 bytes
->Google Chrome cache emptied: 214521240 bytes
->Flash cache emptied: 1529 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 134277275 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 586.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Já
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0.00 mb


OTM by OldTimer - Version 3.1.19.0 log created on 01042012_115449

Files moved on Reboot...
C:\Users\Já\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[Rudy]

Smazáno. FB virus především způsobí, že se na FB vůbec nedostanete a někdy je znefunkčněn antivir. Video, jako takové, je nezavirovatelný soubor a pokud jste si neklikl na nabídku upgrade FlashPlayeru, neměl byste se nakazit. Ježtě zkuste dát log z ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[master007]

Tady je: (Možná jsem to chybně nazval, možná to není vir, ale co to tedy je? Jak to že se to video samo postuje dál?)
P.S. Omlouvám se za ten avast, ale prostě mi nešel vypnou, od vašeho kolegy jsem se dozvěděl, že když to vypnout nejde, tak to combofix mám pustit stejně.)
---------------------------------------

ComboFix 12-01-04.02 - Já 05.01.2012 10:06:50.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.2280 [GMT 1:00]
Spuštěný z: c:\users\Já\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-05 do 2012-01-05 )))))))))))))))))))))))))))))))
.
.
2012-01-05 09:10 . 2012-01-05 09:10 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-01-05 09:10 . 2012-01-05 09:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-05 09:05 . 2012-01-05 09:05 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E8B4059D-0673-426A-BD49-467648837FFE}\offreg.dll
2012-01-04 10:54 . 2012-01-04 10:54 -------- d-----w- C:\_OTM
2012-01-03 18:20 . 2012-01-03 18:20 -------- d-----w- c:\users\Já\AppData\Roaming\Malwarebytes
2012-01-03 18:20 . 2012-01-03 18:20 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-03 18:20 . 2012-01-03 18:20 -------- d-----w- c:\programdata\Malwarebytes
2012-01-03 18:20 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-03 07:12 . 2012-01-04 12:19 -------- d-----w- c:\program files\trend micro
2012-01-03 07:12 . 2012-01-03 07:12 -------- d-----w- C:\rsit
2012-01-03 07:11 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E8B4059D-0673-426A-BD49-467648837FFE}\mpengine.dll
2012-01-02 13:23 . 2011-11-28 17:54 140120 ----a-w- c:\windows\system32\drivers\aswFW.sys
2012-01-02 13:23 . 2011-11-28 17:53 258392 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2012-01-02 13:23 . 2011-11-28 17:26 12368 ----a-w- c:\windows\system32\drivers\aswNdis.sys
2012-01-02 13:10 . 2011-11-28 17:53 304472 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-01-02 13:10 . 2011-11-28 17:51 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-01-02 13:10 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-01-02 13:10 . 2011-11-28 17:52 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-01-02 13:10 . 2011-11-28 17:52 58712 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-01-02 13:10 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-01-02 13:10 . 2011-11-28 18:01 256960 ----a-w- c:\windows\system32\aswBoot.exe
2012-01-02 13:10 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
2012-01-02 13:10 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-01-02 13:10 . 2012-01-02 13:10 -------- d-----w- c:\programdata\AVAST Software
2012-01-02 13:10 . 2012-01-02 13:10 -------- d-----w- c:\program files\AVAST Software
2011-12-22 20:12 . 2011-12-22 20:12 -------- d-----w- c:\program files (x86)\Conduit
2011-12-22 20:12 . 2011-12-22 20:12 -------- d-----w- c:\users\Já\AppData\Local\Conduit
2011-12-22 20:12 . 2012-01-04 10:54 -------- d-----w- c:\program files (x86)\BS_Player
2011-12-22 20:11 . 2011-12-22 21:04 -------- d-----w- c:\users\Já\AppData\Roaming\BSplayer
2011-12-22 20:11 . 2011-12-22 20:11 -------- d-----w- c:\users\Já\AppData\Roaming\BSplayer Pro
2011-12-22 20:11 . 2011-12-22 20:11 -------- d-----w- c:\program files (x86)\Webteh
2011-12-15 13:18 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
2011-12-15 13:13 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-12-15 13:13 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2011-12-15 13:13 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2011-12-15 13:12 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2011-12-15 13:12 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-12-13 16:03 . 2003-04-21 20:46 61440 ----a-w- c:\windows\SysWow64\ASIW32N50.dll
2011-12-13 16:03 . 2002-09-10 18:35 16302 ----a-w- c:\windows\SysWow64\ASINDIS5.sys
2011-12-13 16:03 . 2002-09-09 20:01 61440 ----a-w- c:\windows\SysWow64\ASUSW32N50.dll
2011-12-13 16:03 . 2002-09-09 18:54 16269 ----a-w- c:\windows\SysWow64\ASNDIS5.sys
2011-12-13 16:03 . 2001-04-16 04:48 15577 ----a-w- c:\windows\SysWow64\ASNDIS3.vxd
2011-12-13 16:03 . 2001-04-16 04:48 15577 ----a-w- c:\windows\SysWow64\ASINDIS3.vxd
2011-12-13 16:03 . 2011-12-13 16:03 -------- d-----w- c:\program files (x86)\ASUS
2011-12-13 16:02 . 2003-11-10 17:13 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2011-12-13 16:02 . 2003-11-10 17:12 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2011-12-13 16:02 . 2003-11-10 17:12 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2011-12-13 16:02 . 2003-11-10 17:14 729088 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2011-12-13 16:02 . 2003-11-10 17:11 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2011-12-13 16:02 . 2011-12-13 16:02 188548 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2011-12-13 16:02 . 2011-12-13 16:02 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2011-12-12 07:18 . 2011-12-12 07:18 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-12-10 14:43 . 2011-12-10 14:43 -------- d-----w- c:\users\Já\AppData\Local\Pinnacle
2011-12-10 14:37 . 2011-12-10 14:37 -------- d-----w- c:\program files (x86)\Common Files\Pinnacle
2011-12-10 14:37 . 2011-12-10 14:37 -------- d-----w- c:\users\Já\AppData\Local\Downloaded Installations
2011-12-10 14:36 . 2011-12-10 14:36 -------- d-----w- c:\programdata\Pinnacle Studio HD
2011-12-10 14:24 . 2011-12-10 14:24 -------- d-----w- c:\program files (x86)\Common Files\Pegasus Imaging
2011-12-10 14:24 . 2011-12-10 14:24 -------- d-----w- c:\program files (x86)\Common Files\Yahoo!
2011-12-10 14:24 . 2011-12-10 14:24 -------- d-----w- c:\programdata\Studio 14
2011-12-10 14:24 . 2011-12-10 14:24 -------- d-----w- c:\programdata\Pinnacle Studio Plus
2011-12-10 14:24 . 2011-12-10 14:24 -------- d-----w- c:\program files (x86)\Pinnacle
2011-12-10 14:19 . 2011-12-10 14:35 -------- d-----w- c:\programdata\Pinnacle
2011-12-06 18:36 . 2011-12-06 18:39 -------- d-----w- c:\users\Já\AppData\Roaming\.oit
2011-12-06 18:31 . 2011-12-06 18:31 -------- d-----w- c:\users\Já\AppData\Roaming\Global Graphics
2011-12-06 18:31 . 2011-12-12 10:55 -------- d-----w- c:\users\Já\AppData\Roaming\jaws
2011-12-06 18:29 . 2011-12-06 18:29 -------- d-----w- c:\programdata\Global Graphics
2011-12-06 18:28 . 2009-11-24 09:54 17304 ----a-w- c:\windows\SysWow64\ShutdownDCClients.exe
2011-12-06 18:28 . 2009-11-24 09:54 103824 ----a-w- c:\windows\SysWow64\EventHelper.dll
2011-12-06 18:28 . 2009-11-24 09:53 165264 ----a-w- c:\windows\SysWow64\doccreatorpm.dll
2011-12-06 18:28 . 2009-11-24 09:53 15760 ----a-w- c:\windows\SysWow64\DCMessagesPS.dll
2011-12-06 18:28 . 2009-11-24 09:53 99720 ----a-w- c:\windows\SysWow64\DCMessages.exe
2011-12-06 18:28 . 2011-12-06 18:28 -------- d-----w- c:\program files (x86)\Global Graphics
2011-12-06 18:16 . 2012-01-05 07:51 -------- d-----w- c:\programdata\Boxtools
2011-12-06 18:16 . 2011-12-06 18:16 -------- d-----w- c:\program files (x86)\Boxoft PDF to WORD (freeware)
2011-12-06 18:10 . 2011-12-06 18:10 -------- d-----w- c:\program files\Foxit Software
2011-12-06 17:33 . 2011-12-06 18:13 -------- d-----w- c:\program files\Tracker Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-02 11:36 . 2011-11-28 16:43 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-12-31 14:41 . 2011-11-25 07:09 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-12-31 14:41 . 2011-11-25 07:09 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-12-26 19:37 . 2011-11-28 16:42 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-11-25 07:21 . 2011-11-22 13:05 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-11 12:08 . 2010-06-24 11:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-08 06:11 . 2011-10-08 06:11 39008 ----a-w- c:\windows\system32\drivers\LhdX64.sys
2011-10-08 06:11 . 2011-10-08 06:11 19872 ----a-w- c:\windows\system32\LenovoSDKEmSubSystem.dll
2011-10-08 06:11 . 2010-10-25 19:44 29792 ----a-w- c:\windows\system32\drivers\AcpiVpc.sys
2011-10-08 06:04 . 2011-10-08 06:04 628064 ----a-w- c:\windows\system32\SimpleExt64.dll
2011-10-08 06:04 . 2011-10-08 06:04 583008 ----a-w- c:\windows\SysWow64\VeriFaceComServer.exe
2011-10-08 06:04 . 2011-10-08 06:04 562016 ----a-w- c:\windows\system32\Lenovo.VerifaceStub.dll
2011-10-08 06:04 . 2011-10-08 06:04 472416 ----a-w- c:\windows\SysWow64\Lenovo.VerifaceStub.dll
2011-10-08 06:04 . 2011-10-08 06:04 2819936 ----a-w- c:\windows\system32\TakeSnpshot.dll
2011-10-08 06:04 . 2011-10-08 06:04 25952 ----a-w- c:\windows\SysWow64\Lenovo.Veriface.dll
2011-10-08 06:04 . 2011-10-08 06:04 2446176 ----a-w- c:\windows\system32\LenovoVeriface.Interface.dll
2011-10-08 06:04 . 2011-10-08 06:04 2278752 ----a-w- c:\windows\SysWow64\TakeSnpshot.dll
2011-10-08 06:04 . 2011-10-08 06:04 2086240 ----a-w- c:\windows\SysWow64\LenovoVeriface.Interface.dll
2011-10-08 06:04 . 2011-10-08 06:04 1500512 ----a-w- c:\windows\SysWow64\Apblend.dll
2011-10-08 06:04 . 2011-10-08 06:04 1394016 ----a-w- c:\windows\SysWow64\Imagereog.dll
2011-10-08 06:04 . 2011-10-08 06:04 1171456 ----a-w- c:\windows\SysWow64\PicNotify.dll
2011-10-08 06:04 . 2011-10-08 06:04 11104 ----a-w- c:\windows\SysWow64\biologon.dll
2011-10-08 06:04 . 2011-10-08 06:02 97472 ----a-w- c:\windows\SysWow64\gacutil.exe
2011-10-08 06:04 . 2011-10-08 06:02 1025376 ----a-w- c:\windows\SysWow64\CamOpEx.dll
2011-10-08 06:04 . 2011-10-08 06:04 783712 ----a-w- c:\windows\system32\EncIcons.dll
2011-10-08 06:04 . 2011-10-08 06:04 628064 ----a-w- c:\windows\system32\SimpleExt.dll
2011-10-08 06:04 . 2011-10-08 06:04 1769312 ----a-w- c:\windows\system32\imagereog.dll
2011-10-08 06:04 . 2011-10-08 06:04 1510752 ----a-w- c:\windows\system32\Apblend64.dll
2011-10-08 06:04 . 2011-10-08 06:04 1508192 ----a-w- c:\windows\system32\IcnOvrly.dll
2011-10-08 06:04 . 2011-10-08 06:04 876032 ----a-w- c:\windows\SysWow64\DevIL.dll
2011-10-08 06:04 . 2011-10-08 06:04 77824 ----a-w- c:\windows\SysWow64\ILU.dll
2011-10-08 06:04 . 2011-10-08 06:04 3727720 ----a-w- c:\windows\SysWow64\d3dx9_35.dll
2011-10-08 06:04 . 2011-10-08 06:04 32768 ----a-w- c:\windows\SysWow64\ILUT.dll
2011-10-08 06:04 . 2011-10-08 06:04 1044480 ----a-w- c:\windows\SysWow64\3DImageRenderer.dll
2011-10-08 06:03 . 2011-10-08 06:03 279968 ----a-w- c:\windows\system32\LenovoSdk.OKTDLL.dll
2011-10-08 06:02 . 2011-10-08 06:02 87392 ----a-w- c:\windows\SysWow64\LenovoRIC.interface.dll
2011-10-08 06:02 . 2011-10-08 06:02 83296 ----a-w- c:\windows\SysWow64\GetASData.dll
2011-10-08 06:02 . 2011-10-08 06:02 82944 ----a-w- c:\windows\system32\LenovoRIC.interface.dll
2011-10-08 06:02 . 2011-10-08 06:02 80480 ----a-w- c:\windows\SysWow64\WinIoEx.dll
2011-10-08 06:02 . 2011-10-08 06:02 74240 ----a-w- c:\windows\system32\GetASData.dll
2011-10-08 06:02 . 2011-10-08 06:02 58720 ----a-w- c:\windows\SysWow64\LenovoRIC.stub.dll
2011-10-08 06:02 . 2011-10-08 06:02 557056 ----a-w- c:\windows\system32\LenovoRIC.stub.dll
2011-10-08 06:02 . 2011-10-08 06:02 2353152 ----a-w- c:\windows\system32\ColorBlindnessDLL.dll
2011-10-08 06:02 . 2011-10-08 06:02 1771872 ----a-w- c:\windows\SysWow64\ColorBlindnessDLL.dll
2011-10-08 06:02 . 2011-10-08 06:02 15456 ----a-w- c:\windows\system32\drivers\winioex.sys
2011-10-08 06:02 . 2011-10-08 06:02 20064 ----a-w- c:\windows\system32\drivers\delayman.sys
2011-10-08 06:02 . 2011-10-08 06:02 15456 ----a-w- c:\windows\system32\codelayman.dll
2011-10-08 06:02 . 2011-10-08 06:02 1112288 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll
2011-10-07 21:08 . 2011-10-07 21:08 951680 ----a-w- c:\windows\system32\drivers\ndis.sys
2011-10-07 21:08 . 2011-10-07 21:08 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-10-07 21:08 . 2011-10-07 21:08 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-10-07 21:08 . 2011-10-07 21:08 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-10-07 21:08 . 2011-10-07 21:08 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-10-07 21:08 . 2011-10-07 21:08 2565632 ----a-w- c:\windows\system32\esent.dll
2011-10-07 21:08 . 2011-10-07 21:08 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-10-07 21:08 . 2011-10-07 21:08 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2011-10-07 21:08 . 2011-10-07 21:08 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-10-07 21:08 . 2011-10-07 21:08 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-10-07 21:08 . 2011-10-07 21:08 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-10-07 21:08 . 2011-10-07 21:08 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-10-07 21:07 . 2011-10-07 21:07 246784 ----a-w- c:\windows\system32\input.dll
2011-10-07 21:07 . 2011-10-07 21:07 202240 ----a-w- c:\windows\SysWow64\input.dll
2011-10-07 21:07 . 2011-10-07 21:07 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-07 21:07 . 2011-10-07 21:07 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-10-07 21:07 . 2011-10-07 21:07 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-10-07 21:07 . 2011-10-07 21:07 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-10-07 21:07 . 2011-10-07 21:07 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-10-07 21:07 . 2011-10-07 21:07 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-10-07 21:07 . 2011-10-07 21:07 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-10-07 21:07 . 2011-10-07 21:07 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-10-07 21:06 . 2011-10-07 21:06 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-10-07 21:06 . 2011-10-07 21:06 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-10-07 21:06 . 2011-10-07 21:06 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-10-07 21:06 . 2011-10-07 21:06 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-10-07 21:06 . 2011-10-07 21:06 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-10-07 21:06 . 2011-10-07 21:06 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-10-07 21:06 . 2011-10-07 21:06 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-10-07 21:06 . 2011-10-07 21:06 2871808 ----a-w- c:\windows\explorer.exe
2011-10-07 21:06 . 2011-10-07 21:06 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-10-07 21:06 . 2011-10-07 21:06 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-10-07 21:06 . 2011-10-07 21:06 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-10-07 21:05 . 2011-10-07 21:05 30208 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-10-07 21:05 . 2011-10-07 21:05 28672 ----a-w- c:\windows\SysWow64\dnscacheugc.exe
2011-10-07 21:05 . 2011-10-07 21:05 183296 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-10-07 21:05 . 2011-10-07 21:05 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2011-10-07 21:05 . 2011-10-07 21:05 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-10-07 21:05 . 2011-10-07 21:05 367616 ----a-w- c:\windows\system32\atmfd.dll
2011-10-07 21:05 . 2011-10-07 21:05 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-10-07 21:05 . 2011-10-07 21:05 294912 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-10-07 21:05 . 2011-10-07 21:05 100864 ----a-w- c:\windows\system32\fontsub.dll
2011-10-07 21:05 . 2011-10-07 21:05 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2011-10-07 21:05 . 2011-10-07 21:05 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-10-07 21:05 . 2011-10-07 21:05 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-10-07 21:05 . 2011-10-07 21:05 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-10-07 21:05 . 2011-10-07 21:05 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-10-07 21:05 . 2011-10-07 21:05 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-10-07 21:04 . 2011-10-07 21:04 642944 ----a-w- c:\windows\system32\winload.efi
2011-10-07 21:04 . 2011-10-07 21:04 605552 ----a-w- c:\windows\system32\winload.exe
2011-10-07 21:04 . 2011-10-07 21:04 566208 ----a-w- c:\windows\system32\winresume.efi
2011-10-07 21:04 . 2011-10-07 21:04 518672 ----a-w- c:\windows\system32\winresume.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LenovoR.I.C.Tray"="c:\program files (x86)\Lenovo\RobustIntelligentCompanion\LenovoR.I.C.Tray.exe" [2011-10-08 2569568]
"Boxoft Tools"="c:\programdata\Boxtools\Boxofttoolbox.exe" [2010-11-19 2590208]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-10-08 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-12 283160]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2011-10-08 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"DocCreatorClient"="c:\program files (x86)\Global Graphics\gDoc\DocCreatorClient.exe" [2009-11-24 292248]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2011-5-12 1211168]
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2011-11-28 127192]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 DCamUSBSTK02N;Standard Camera;c:\windows\system32\DRIVERS\STK02NW2.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-05-02 340240]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S0 HybridDisk;HybridDisk;c:\windows\System32\DRIVERS\HybridDiskX64.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 hybridcfile;hybridcfile;c:\windows\system32\DRIVERS\HybridCFileX64.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S1 winioex;winioex;c:\windows\system32\drivers\winioex.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-12 13336]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-10 2009704]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys [x]
S3 BTWDPAN;Bluetooth Personal Area Network;c:\windows\system32\DRIVERS\btwdpan.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]
S3 DCMessages;DCMessages;c:\windows\SysWOW64\DCMessages.exe [2009-11-24 99720]
S3 DelayMan;ACPI DelayMan Filter Service;c:\windows\system32\DRIVERS\delayman.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 rtsuvc;Lenovo EasyCamera;c:\windows\system32\DRIVERS\rtsuvc.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-10-08 06:04 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-30 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-30 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-30 418840]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-28 11786344]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-05-02 1935120]
"OnekeyStudio"="c:\program files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" [2011-10-08 789920]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2011-10-08 9753024]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2011-10-08 5908928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1750559
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://lenovo.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Download All by ASUS Download - c:\program files (x86)\ASUS\WL-500gP Wireless Router Utilities\ASDownloadAll.htm
IE: Download using ASUS Download - c:\program files (x86)\ASUS\WL-500gP Wireless Router Utilities\ASDownload.htm
IE: Download Video on This Page - c:\program files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/211
IE: Download Video This Links To - c:\program files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/212
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
IE: {{11F19C45-9675-488A-A8E0-8E8234DC245D} - res://c:\program files (x86)\Tomato\YouTube Video Downloader\MDIEEx.dll/211
TCP: Interfaces\{A3C682EA-1512-4373-92CB-A4A236FFD63C}: NameServer = 192.168.1.33
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_C2F5B49B54B6AC4A.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-01-05 10:12:11
ComboFix-quarantined-files.txt 2012-01-05 09:12
.
Před spuštěním: Volných bajtů: 661 544 603 648
Po spuštění: Volných bajtů: 661 035 675 648
.
- - End Of File - - 7CB4C2043133FC3831177FB25495D8D9

[Rudy]

Několik položek CF smazal. Nastala nějaká změna?

[master007]

Ne nenastala Facebook už sice zablokoval to video, bohužel postuji jiné. Druhá věc je s těmi aplikacemi. Prakticky nemůžu pracovat na internetu. Vždy když surfuji, tak se stránka přemění na aplikaci. Aplikace jsou normálně legální. (IndianaJones atd.) Hlásil jsem to na FB support, ale zatím nic nevědí... Zvláštní je, že se mi to děje pouze v tomto počítači, takže tu něco nehraje. Každopádně zatím dík!!

[Rudy]

Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.

[master007]

Nic to nenašlo, takže není žádný log...