VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu logu.

https://forum.viry.cz:443/viewtopic.php?t=121432

Stránka 1 z 1

Prosím o kontrolu logu.

Napsal: 04 kvě 2012 16:23
od Milousek66
Mám 14 dní nový počítač, vše běhalo normálně, ale v posledních dnech se stává, že počítač zamrzne a rozběhne se třeba až po 20-ti minutách. V prodejně, kam jsem comp odnesl, mi řekli, že nic nezjistili a že to vypadá, že problém je s Firefoxem, abych jej odinstaloval a nainstaloval znovu. To jsem udělal, ale zamrzá stále a to i na internetu i při hře, kterou si na počítači normálně spustím. Za pomoc či radu předem děkuji.
=

Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2012-05-04 17:09:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 849 GB (89%) free of 954 GB
Total RAM: 6126 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:09:26, on 4.5.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hal3000.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hal3000.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9024 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe"
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4b4cfd15-f4b9-479f-ae7d-982d459c5cb7 -SystemEventPortName:HostProcess-2d1cc13c-0769-401f-8206-1aa91b5d21dd -IoCancelEventPortName:HostProcess-71c21719-4ac6-4eb1-8443-6aa32d17e053 -NonStateChangingEventPortName:HostProcess-6afa8228-3e39-4706-a19f-c35d82cbbb6b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:29092050-2b42-4dc7-b24a-a46c15839293
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
"C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey A5E2FC9E-A2DF-A25D-1E9E-33ABBC907E6B -Reinvoke
"C:\Users\Milan\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-26 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-26 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-26 418840]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"=C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe [2012-03-06 574296]
"OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2011-07-21 718720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-08-11 2472048]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-08-10 421888]

C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-05-04 17:09:18 ----D---- C:\rsit
2012-05-04 17:09:18 ----D---- C:\Program Files\trend micro
2012-05-04 12:31:04 ----D---- C:\ProgramData\Mozilla
2012-05-04 12:31:03 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-03 13:36:26 ----D---- C:\Program Files (x86)\Futuremark
2012-05-02 12:37:13 ----A---- C:\Windows\ntbtlog.txt
2012-05-01 18:45:11 ----D---- C:\Users\Milan\AppData\Roaming\Cakewalk
2012-05-01 18:44:25 ----D---- C:\ProgramData\Identities
2012-05-01 18:43:30 ----A---- C:\Windows\system32\mkl_intel_thread.dll
2012-05-01 18:43:17 ----A---- C:\Windows\system32\mkl_def.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\mkl_core.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\libiomp5md.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4p.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4m3.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4m.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_intel_thread.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\mkl_core.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\libiomp5md.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcr71.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcp71.dll
2012-05-01 18:41:59 ----D---- C:\Program Files\Cakewalk
2012-05-01 18:41:59 ----D---- C:\Program Files (x86)\IK Multimedia
2012-05-01 18:41:08 ----D---- C:\Cakewalk Projects
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\ReWire.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\mfc71u.dll
2012-05-01 18:40:51 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2012-05-01 18:29:40 ----D---- C:\Cakewalk Content
2012-05-01 18:26:56 ----D---- C:\ProgramData\Cakewalk
2012-05-01 18:26:56 ----D---- C:\Program Files (x86)\Cakewalk
2012-05-01 12:07:37 ----D---- C:\Program Files (x86)\IstraSoft
2012-04-26 21:02:03 ----D---- C:\Users\Milan\AppData\Roaming\Media Player Classic
2012-04-24 19:46:54 ----D---- C:\e68ec0d1c2563f5aed314d3da9842f
2012-04-23 18:33:55 ----D---- C:\Program Files (x86)\Medvěd Míša Ostrovy pokladů
2012-04-23 18:22:20 ----D---- C:\Program Files (x86)\Zuma Deluxe
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\qt-dx331.dll
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\dpl100.dll
2012-04-23 17:49:03 ----A---- C:\Windows\SYSWOW64\divx.dll
2012-04-23 17:49:01 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2012-04-21 14:44:43 ----D---- C:\Users\Milan\AppData\Roaming\Macromedia
2012-04-21 14:44:08 ----D---- C:\ProgramData\McAfee
2012-04-21 14:40:07 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-04-21 14:40:05 ----D---- C:\Windows\SYSWOW64\Macromed
2012-04-21 14:39:54 ----D---- C:\Windows\system32\Macromed
2012-04-21 11:07:09 ----D---- C:\Users\Milan\AppData\Roaming\Nero
2012-04-20 20:08:52 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-04-20 20:07:24 ----A---- C:\Windows\system32\FntCache.dll
2012-04-20 20:07:24 ----A---- C:\Windows\system32\d2d1.dll
2012-04-20 20:07:23 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-04-20 19:47:06 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-04-20 19:47:06 ----A---- C:\Windows\system32\mshtmled.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\url.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\jscript9.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\iertutil.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\url.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\ieui.dll
2012-04-20 19:47:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jsproxy.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jscript.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-04-20 19:47:02 ----A---- C:\Windows\system32\wininet.dll
2012-04-20 19:47:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-04-20 19:47:00 ----A---- C:\Windows\system32\mshtml.dll
2012-04-20 19:46:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-04-20 19:46:58 ----A---- C:\Windows\system32\ieframe.dll
2012-04-20 19:44:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-04-20 19:44:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-04-20 19:44:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-04-20 19:37:42 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wintrust.dll
2012-04-20 19:34:24 ----SHD---- C:\Config.Msi
2012-04-20 19:11:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-04-20 18:33:33 ----D---- C:\Program Files (x86)\Nero
2012-04-20 18:33:15 ----D---- C:\ProgramData\Nero
2012-04-20 18:32:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-04-20 18:04:58 ----D---- C:\ProgramData\Apple Computer
2012-04-20 18:04:58 ----D---- C:\Program Files (x86)\QuickTime
2012-04-20 18:04:31 ----D---- C:\ProgramData\Apple
2012-04-20 18:04:31 ----D---- C:\Program Files (x86)\Apple Software Update
2012-04-20 18:03:43 ----A---- C:\Windows\avisplitter.ini
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2012-04-20 18:03:31 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2012-04-20 17:58:25 ----D---- C:\Users\Milan\AppData\Roaming\Adobe
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\qdvd.dll
2012-04-20 16:49:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-04-20 16:49:18 ----A---- C:\Windows\system32\shell32.dll
2012-04-20 16:49:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-04-20 16:49:17 ----A---- C:\Windows\system32\ntshrui.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsass.exe
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsasrv.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\cng.sys
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspisrv.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\secur32.dll
2012-04-20 16:49:14 ----A---- C:\Windows\system32\win32k.sys
2012-04-20 16:49:12 ----A---- C:\Windows\system32\csrsrv.dll
2012-04-20 16:49:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-04-20 16:49:09 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-04-20 16:49:09 ----A---- C:\Windows\system32\DWrite.dll
2012-04-20 16:49:07 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-04-20 16:49:07 ----A---- C:\Windows\system32\psisdecd.dll
2012-04-20 16:49:05 ----A---- C:\Windows\system32\drivers\afd.sys
2012-04-20 16:48:54 ----A---- C:\Windows\system32\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleacc.dll
2012-04-20 16:48:52 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-04-20 16:48:52 ----A---- C:\Windows\system32\EncDec.dll
2012-04-20 16:48:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-04-20 16:48:47 ----A---- C:\Windows\system32\tzres.dll
2012-04-20 16:48:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-04-20 16:48:41 ----A---- C:\Windows\system32\ntdll.dll
2012-04-20 16:48:13 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-04-20 16:48:13 ----A---- C:\Windows\system32\packager.dll
2012-04-20 15:50:46 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2012-04-20 15:48:13 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-04-20 15:48:00 ----D---- C:\Program Files\Microsoft Office
2012-04-20 15:47:52 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2012-04-20 15:47:45 ----D---- C:\ProgramData\Microsoft Help
2012-04-20 15:47:35 ----RHD---- C:\MSOCache
2012-04-20 15:21:51 ----D---- C:\Users\Milan\AppData\Roaming\WinRAR
2012-04-20 15:21:41 ----D---- C:\Program Files (x86)\WinRAR
2012-04-20 15:21:02 ----D---- C:\Program Files (x86)\Adobe
2012-04-20 15:20:27 ----D---- C:\ProgramData\Adobe
2012-04-20 14:48:22 ----D---- C:\ProgramData\IObit
2012-04-20 14:48:07 ----D---- C:\Users\Milan\AppData\Roaming\IObit
2012-04-20 14:47:57 ----D---- C:\Program Files (x86)\IObit
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpwsx.dll
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-04-20 14:41:37 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-04-20 14:35:48 ----D---- C:\Program Files (x86)\Google
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\avastSS.scr
2012-04-20 14:34:54 ----D---- C:\ProgramData\AVAST Software
2012-04-20 14:34:54 ----D---- C:\Program Files\AVAST Software
2012-04-20 14:25:39 ----D---- C:\Users\Milan\AppData\Roaming\Mozilla
2012-04-20 14:25:31 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-04-20 13:57:46 ----A---- C:\Windows\SYSWOW64\unrar.dll
2012-04-20 13:57:44 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2012-04-20 13:45:27 ----D---- C:\Users\Milan\AppData\Roaming\Identities
2012-04-20 13:45:21 ----SD---- C:\Users\Milan\AppData\Roaming\Microsoft
2012-04-20 13:45:21 ----D---- C:\Users\Milan\AppData\Roaming\Media Center Programs
2012-04-20 13:45:17 ----SHD---- C:\Recovery
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Šablony
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Plocha
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Oblíbené položky
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Nabídka Start
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Dokumenty
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Data aplikací
2012-04-20 13:45:17 ----SHD---- C:\Documents and Settings
2012-04-20 13:37:07 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 month======

2012-05-04 17:09:26 ----D---- C:\Windows\Prefetch
2012-05-04 17:09:18 ----RD---- C:\Program Files
2012-05-04 17:09:14 ----D---- C:\Windows\Temp
2012-05-04 16:49:17 ----D---- C:\Windows\system32\config
2012-05-04 16:36:19 ----D---- C:\Windows\System32
2012-05-04 16:36:19 ----D---- C:\Windows\inf
2012-05-04 16:36:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-05-04 12:31:04 ----HD---- C:\ProgramData
2012-05-04 12:31:03 ----RD---- C:\Program Files (x86)
2012-05-03 13:36:51 ----D---- C:\Program Files (x86)\Common Files
2012-05-03 13:36:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-03 13:36:20 ----SHD---- C:\System Volume Information
2012-05-02 12:49:30 ----SD---- C:\ProgramData\Microsoft
2012-05-02 12:37:13 ----D---- C:\Windows
2012-05-01 20:56:51 ----D---- C:\Windows\system32\wdi
2012-05-01 20:22:33 ----SHD---- C:\Windows\Installer
2012-05-01 20:22:33 ----D---- C:\Windows\SysWOW64
2012-05-01 20:06:09 ----D---- C:\Windows\LiveKernelReports
2012-05-01 18:40:20 ----D---- C:\Windows\winsxs
2012-05-01 18:29:40 ----RSD---- C:\Windows\Fonts
2012-04-26 20:06:48 ----D---- C:\Windows\system32\Tasks
2012-04-25 04:44:19 ----D---- C:\Windows\system32\catroot2
2012-04-24 20:39:25 ----D---- C:\Windows\system32\catroot
2012-04-24 20:39:21 ----D---- C:\Program Files\Microsoft Security Client
2012-04-24 20:39:18 ----D---- C:\Windows\system32\drivers
2012-04-24 19:47:26 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-04-24 19:47:24 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-04-23 12:44:38 ----D---- C:\Windows\debug
2012-04-21 14:40:08 ----D---- C:\Windows\Tasks
2012-04-21 12:01:47 ----D---- C:\Windows\system32\LogFiles
2012-04-21 08:11:00 ----RSD---- C:\Windows\assembly
2012-04-21 08:11:00 ----D---- C:\Windows\Microsoft.NET
2012-04-20 20:09:21 ----D---- C:\Program Files (x86)\Windows Live
2012-04-20 20:06:19 ----D---- C:\Windows\rescache
2012-04-20 20:01:02 ----D---- C:\Program Files\Common Files\System
2012-04-20 20:01:01 ----D---- C:\Windows\ehome
2012-04-20 20:01:00 ----D---- C:\Windows\SYSWOW64\migration
2012-04-20 20:01:00 ----D---- C:\Windows\system32\migration
2012-04-20 20:01:00 ----D---- C:\Program Files\Internet Explorer
2012-04-20 20:01:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-04-20 20:00:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-04-20 20:00:58 ----D---- C:\Windows\system32\cs-CZ
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Sidebar
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Media Player
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Mail
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Journal
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\winrm
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\slmgr
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\migwiz
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\en
2012-04-20 20:00:52 ----D---- C:\Windows\servicing
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Defender
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Media Player
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Mail
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Defender
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\WCN
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\wbem
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\DriverStore
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Dism
2012-04-20 20:00:48 ----D---- C:\Windows\system32\winrm
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sysprep
2012-04-20 20:00:48 ----D---- C:\Windows\system32\slmgr
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sk-SK
2012-04-20 20:00:48 ----D---- C:\Windows\system32\oobe
2012-04-20 20:00:48 ----D---- C:\Windows\system32\migwiz
2012-04-20 20:00:48 ----D---- C:\Windows\system32\en
2012-04-20 20:00:48 ----D---- C:\Windows\system32\Boot
2012-04-20 20:00:48 ----D---- C:\Windows\PolicyDefinitions
2012-04-20 20:00:48 ----D---- C:\Windows\en-US
2012-04-20 20:00:46 ----D---- C:\Windows\system32\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\WCN
2012-04-20 20:00:42 ----D---- C:\Windows\system32\DriverStore
2012-04-20 20:00:42 ----D---- C:\Windows\system32\drivers\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\Dism
2012-04-20 20:00:41 ----D---- C:\Windows\system32\wbem
2012-04-20 20:00:41 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2012-04-20 19:54:09 ----A---- C:\Windows\win.ini
2012-04-20 19:42:57 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-04-20 19:38:20 ----D---- C:\Program Files (x86)\Microsoft
2012-04-20 18:14:21 ----D---- C:\Program Files (x86)\Microsoft Office
2012-04-20 17:31:42 ----D---- C:\Windows\Logs
2012-04-20 15:51:14 ----D---- C:\Windows\ShellNew
2012-04-20 15:51:05 ----D---- C:\Program Files (x86)\MSBuild
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-04-20 15:49:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-04-20 15:06:20 ----RD---- C:\Users
2012-04-20 14:31:33 ----D---- C:\Windows\system32\restore
2012-04-20 14:08:54 ----D---- C:\Windows\system32\NDF
2012-04-20 13:45:24 ----SHD---- C:\$Recycle.Bin
2012-04-20 13:45:18 ----D---- C:\Windows\Panther
2012-04-20 13:45:17 ----D---- C:\Windows\system32\Recovery
2012-04-20 13:45:17 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\drivers\SiWinAcc.sys [2007-10-03 22056]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\drivers\SiRemFil.sys [2007-10-03 17448]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-11-10 10567680]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-11-10 325632]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-08-04 1342064]
S3 cpuz130;cpuz130; \??\C:\Users\Milan\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 iaStor;iaStor; C:\Windows\system32\drivers\iaStor.sys [2010-09-13 437272]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
S3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\drivers\itecir.sys [2009-06-11 60416]
S3 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2010-09-07 121432]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\drivers\ASACPI.sys [2009-07-16 15416]
S3 mv91cons;mv91cons; C:\Windows\system32\drivers\mv91cons.sys [2010-11-22 24880]
S3 mv91xx;mv91xx; C:\Windows\system32\drivers\mv91xx.sys [2010-11-22 303408]
S3 mv91xxr;mv91xxr; C:\Windows\system32\drivers\mv91xxr.sys [2010-10-21 302120]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 NmPar;MosChip PCI Parallel Port; C:\Windows\system32\drivers\NmPar.sys []
S3 nmserial;MosChip PCI Serial Port; C:\Windows\system32\drivers\nmserial.sys []
S3 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2010-03-22 29800]
S3 OxSer;OxSer; C:\Windows\system32\drivers\OxSer.sys [2009-05-26 98352]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-10-29 250984]
S3 SI3112;SI3112; C:\Windows\system32\drivers\SI3112.sys [2007-06-28 83496]
S3 SI3114;SI3114; C:\Windows\system32\drivers\SI3114.sys [2008-04-14 82984]
S3 Si3114r5;Si3114r5; C:\Windows\system32\drivers\Si3114r5.sys [2008-11-24 329256]
S3 SI3124;SI3124; C:\Windows\system32\drivers\SI3124.sys [2009-10-30 92200]
S3 Si3124r5;Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [2010-04-13 340008]
S3 SI3132;SI3132; C:\Windows\system32\drivers\SI3132.sys [2007-10-03 90664]
S3 Si3132r5;Si3132r5; C:\Windows\system32\drivers\Si3132r5.sys [2008-10-30 340520]
S3 Si3531;Si3531; C:\Windows\system32\drivers\Si3531.sys [2009-02-09 333864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-03-14 913752]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-11-10 204288]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-10-13 935208]
S2 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 253088]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-08 1255736]

-----------------EOF-----------------

Re: Prosím o kontrolu logu.

Napsal: 05 kvě 2012 09:50
od Roli
Zdravím, zkusíme se na to podívat.

Tohle fixni v HJT :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hal3000.cz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hal3000.cz
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

HJT najdeš zde :

C:\Program Files\trend micro\Milan.exe

Fix znamená že spustíš HJT Obrázek jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)

Služba Google Update (gupdatem)

Mozilla Maintenance Service

Nero BackItUp Scheduler 4.0

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Přes Odebrat programy odinstaluj od IObitu Advanced System Care


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak dej vědět jestli to zabralo, případně budeme pokračovat.

Re: Prosím o kontrolu logu.

Napsal: 09 kvě 2012 10:31
od Milousek66
Zdravím. Musel jsem odjet, takže jsem vše podle Vašeho návodu dělal až dnes ráno. Počítač běhá bez problémů, snad to vydrží. Chtěl bych moc poděkovat.

Re: Prosím o kontrolu logu.

Napsal: 09 kvě 2012 21:12
od Roli
Kdyby se problém objevil znovu dej vědět, jinak nemáš vůbec zač.

Re: Prosím o kontrolu logu.

Napsal: 15 kvě 2012 16:02
od Milousek66
Tak jsem zde bohužel zase, počítač běhal normálně, ale opět začal "zamrzat". Stane se to na internetu nebo třeba i při vypínání, jen to netrvá tak dlouho jako před tím. Tady je log, předem díky :


Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2012-05-15 16:55:09
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 854 GB (90%) free of 954 GB
Total RAM: 6126 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:55:17, on 15.5.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Registration Brothers In Arms EiB.LNK = C:\Program Files (x86)\Ubisoft\Gearbox Software\BrothersInArmsEiB\Support\Register\RegistrationReminder.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7931 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
taskeng.exe {E632EE6E-0082-4919-9C59-3AB57D485A8C}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2b044d0b-29ca-4a2b-8d2b-57fd90bba97d -SystemEventPortName:HostProcess-f531bd7a-9c60-4812-90d6-e892eeb3d189 -IoCancelEventPortName:HostProcess-3b40f7d8-84aa-425c-a4b5-1f9f5eddf17d -NonStateChangingEventPortName:HostProcess-43e21658-259d-4f5b-a3c2-56609a82af1c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d78ddb19-b8e0-484d-b6b8-702733efcc02
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-954854046-3235366559-1486098670-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-954854046-3235366559-1486098670-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
wmiadap.exe /F /T /R
"C:\Users\Milan\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-26 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-26 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-26 418840]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2011-07-21 718720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-08-11 2472048]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-08-10 421888]

C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Registration Brothers In Arms EiB.LNK - C:\Program Files (x86)\Ubisoft\Gearbox Software\BrothersInArmsEiB\Support\Register\RegistrationReminder.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-05-10 18:50:19 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-05-10 18:50:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-05-10 18:50:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-05-10 18:50:06 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-05-10 18:50:06 ----A---- C:\Windows\system32\win32k.sys
2012-05-10 18:50:05 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-05-10 18:50:05 ----A---- C:\Windows\system32\DWrite.dll
2012-05-10 18:49:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-05-10 14:01:08 ----D---- C:\Users\Milan\AppData\Roaming\Gearbox Software
2012-05-10 13:45:22 ----D---- C:\Program Files (x86)\Ubisoft
2012-05-09 11:19:17 ----D---- C:\Program Files\CCleaner
2012-05-05 15:21:01 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2012-05-04 17:09:18 ----D---- C:\rsit
2012-05-04 17:09:18 ----D---- C:\Program Files\trend micro
2012-05-04 12:31:04 ----D---- C:\ProgramData\Mozilla
2012-05-04 12:31:03 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-03 13:36:26 ----D---- C:\Program Files (x86)\Futuremark
2012-05-01 18:45:11 ----D---- C:\Users\Milan\AppData\Roaming\Cakewalk
2012-05-01 18:44:25 ----D---- C:\ProgramData\Identities
2012-05-01 18:43:30 ----A---- C:\Windows\system32\mkl_intel_thread.dll
2012-05-01 18:43:17 ----A---- C:\Windows\system32\mkl_def.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\mkl_core.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\libiomp5md.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4p.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4m3.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4m.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_intel_thread.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\mkl_core.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\libiomp5md.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcr71.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcp71.dll
2012-05-01 18:41:59 ----D---- C:\Program Files\Cakewalk
2012-05-01 18:41:59 ----D---- C:\Program Files (x86)\IK Multimedia
2012-05-01 18:41:08 ----D---- C:\Cakewalk Projects
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\ReWire.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\mfc71u.dll
2012-05-01 18:40:51 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2012-05-01 18:29:40 ----D---- C:\Cakewalk Content
2012-05-01 18:26:56 ----D---- C:\ProgramData\Cakewalk
2012-05-01 18:26:56 ----D---- C:\Program Files (x86)\Cakewalk
2012-05-01 12:07:37 ----D---- C:\Program Files (x86)\IstraSoft
2012-04-26 21:02:03 ----D---- C:\Users\Milan\AppData\Roaming\Media Player Classic
2012-04-24 19:46:54 ----D---- C:\e68ec0d1c2563f5aed314d3da9842f
2012-04-23 18:33:55 ----D---- C:\Program Files (x86)\Medvěd Míša Ostrovy pokladů
2012-04-23 18:22:20 ----D---- C:\Program Files (x86)\Zuma Deluxe
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\qt-dx331.dll
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\dpl100.dll
2012-04-23 17:49:03 ----A---- C:\Windows\SYSWOW64\divx.dll
2012-04-23 17:49:01 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2012-04-21 14:44:43 ----D---- C:\Users\Milan\AppData\Roaming\Macromedia
2012-04-21 14:44:08 ----D---- C:\ProgramData\McAfee
2012-04-21 14:40:07 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-04-21 14:40:05 ----D---- C:\Windows\SYSWOW64\Macromed
2012-04-21 14:39:54 ----D---- C:\Windows\system32\Macromed
2012-04-21 11:07:09 ----D---- C:\Users\Milan\AppData\Roaming\Nero
2012-04-20 20:08:52 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-04-20 20:07:24 ----A---- C:\Windows\system32\FntCache.dll
2012-04-20 20:07:24 ----A---- C:\Windows\system32\d2d1.dll
2012-04-20 20:07:23 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-04-20 19:47:06 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-04-20 19:47:06 ----A---- C:\Windows\system32\mshtmled.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\url.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\jscript9.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\iertutil.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\url.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\ieui.dll
2012-04-20 19:47:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jsproxy.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jscript.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-04-20 19:47:02 ----A---- C:\Windows\system32\wininet.dll
2012-04-20 19:47:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-04-20 19:47:00 ----A---- C:\Windows\system32\mshtml.dll
2012-04-20 19:46:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-04-20 19:46:58 ----A---- C:\Windows\system32\ieframe.dll
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-04-20 19:37:42 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wintrust.dll
2012-04-20 19:34:24 ----SHD---- C:\Config.Msi
2012-04-20 19:11:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-04-20 18:33:33 ----D---- C:\Program Files (x86)\Nero
2012-04-20 18:33:15 ----D---- C:\ProgramData\Nero
2012-04-20 18:32:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-04-20 18:04:58 ----D---- C:\ProgramData\Apple Computer
2012-04-20 18:04:58 ----D---- C:\Program Files (x86)\QuickTime
2012-04-20 18:04:31 ----D---- C:\ProgramData\Apple
2012-04-20 18:04:31 ----D---- C:\Program Files (x86)\Apple Software Update
2012-04-20 18:03:43 ----A---- C:\Windows\avisplitter.ini
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2012-04-20 18:03:31 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2012-04-20 17:58:25 ----D---- C:\Users\Milan\AppData\Roaming\Adobe
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\qdvd.dll
2012-04-20 16:49:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-04-20 16:49:18 ----A---- C:\Windows\system32\shell32.dll
2012-04-20 16:49:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-04-20 16:49:17 ----A---- C:\Windows\system32\ntshrui.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsass.exe
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsasrv.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\cng.sys
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspisrv.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\secur32.dll
2012-04-20 16:49:12 ----A---- C:\Windows\system32\csrsrv.dll
2012-04-20 16:49:07 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-04-20 16:49:07 ----A---- C:\Windows\system32\psisdecd.dll
2012-04-20 16:49:05 ----A---- C:\Windows\system32\drivers\afd.sys
2012-04-20 16:48:54 ----A---- C:\Windows\system32\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleacc.dll
2012-04-20 16:48:52 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-04-20 16:48:52 ----A---- C:\Windows\system32\EncDec.dll
2012-04-20 16:48:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-04-20 16:48:47 ----A---- C:\Windows\system32\tzres.dll
2012-04-20 16:48:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-04-20 16:48:41 ----A---- C:\Windows\system32\ntdll.dll
2012-04-20 16:48:13 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-04-20 16:48:13 ----A---- C:\Windows\system32\packager.dll
2012-04-20 15:50:46 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2012-04-20 15:48:13 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-04-20 15:48:00 ----D---- C:\Program Files\Microsoft Office
2012-04-20 15:47:52 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2012-04-20 15:47:45 ----D---- C:\ProgramData\Microsoft Help
2012-04-20 15:47:35 ----RHD---- C:\MSOCache
2012-04-20 15:21:51 ----D---- C:\Users\Milan\AppData\Roaming\WinRAR
2012-04-20 15:21:41 ----D---- C:\Program Files (x86)\WinRAR
2012-04-20 15:21:02 ----D---- C:\Program Files (x86)\Adobe
2012-04-20 15:20:27 ----D---- C:\ProgramData\Adobe
2012-04-20 14:48:22 ----D---- C:\ProgramData\IObit
2012-04-20 14:48:07 ----D---- C:\Users\Milan\AppData\Roaming\IObit
2012-04-20 14:47:57 ----D---- C:\Program Files (x86)\IObit
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpwsx.dll
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-04-20 14:41:37 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-04-20 14:35:48 ----D---- C:\Program Files (x86)\Google
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\avastSS.scr
2012-04-20 14:34:54 ----D---- C:\ProgramData\AVAST Software
2012-04-20 14:34:54 ----D---- C:\Program Files\AVAST Software
2012-04-20 14:25:39 ----D---- C:\Users\Milan\AppData\Roaming\Mozilla
2012-04-20 14:25:31 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-04-20 13:57:46 ----A---- C:\Windows\SYSWOW64\unrar.dll
2012-04-20 13:57:44 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2012-04-20 13:45:27 ----D---- C:\Users\Milan\AppData\Roaming\Identities
2012-04-20 13:45:21 ----SD---- C:\Users\Milan\AppData\Roaming\Microsoft
2012-04-20 13:45:21 ----D---- C:\Users\Milan\AppData\Roaming\Media Center Programs
2012-04-20 13:45:17 ----SHD---- C:\Recovery
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Šablony
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Plocha
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Oblíbené položky
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Nabídka Start
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Dokumenty
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Data aplikací
2012-04-20 13:45:17 ----SHD---- C:\Documents and Settings
2012-04-20 13:37:07 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 month======

2012-05-15 16:55:17 ----D---- C:\Windows\Prefetch
2012-05-15 16:54:00 ----D---- C:\Windows\Temp
2012-05-15 16:52:43 ----D---- C:\Windows
2012-05-15 16:50:44 ----D---- C:\Windows\system32\config
2012-05-15 14:08:44 ----D---- C:\Windows\System32
2012-05-15 14:08:44 ----D---- C:\Windows\inf
2012-05-15 14:08:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-05-14 15:04:17 ----SHD---- C:\System Volume Information
2012-05-10 19:21:53 ----RSD---- C:\Windows\assembly
2012-05-10 19:21:53 ----D---- C:\Windows\Microsoft.NET
2012-05-10 19:02:51 ----D---- C:\Windows\debug
2012-05-10 19:00:07 ----D---- C:\Windows\winsxs
2012-05-10 18:59:31 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-05-10 18:58:33 ----D---- C:\Windows\SysWOW64
2012-05-10 18:58:32 ----D---- C:\Windows\system32\drivers
2012-05-10 18:57:19 ----A---- C:\Windows\system32\MRT.exe
2012-05-10 18:57:16 ----SHD---- C:\Windows\Installer
2012-05-10 18:55:19 ----D---- C:\Windows\system32\catroot
2012-05-10 18:50:48 ----D---- C:\Program Files\Windows Journal
2012-05-10 18:49:48 ----D---- C:\Windows\system32\catroot2
2012-05-10 13:45:22 ----RD---- C:\Program Files (x86)
2012-05-09 11:20:59 ----D---- C:\Windows\Panther
2012-05-09 11:20:59 ----D---- C:\Windows\Logs
2012-05-09 11:19:17 ----RD---- C:\Program Files
2012-05-04 12:31:04 ----HD---- C:\ProgramData
2012-05-03 13:36:51 ----D---- C:\Program Files (x86)\Common Files
2012-05-03 13:36:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-02 12:49:30 ----SD---- C:\ProgramData\Microsoft
2012-05-01 20:56:51 ----D---- C:\Windows\system32\wdi
2012-05-01 20:06:09 ----D---- C:\Windows\LiveKernelReports
2012-05-01 18:29:40 ----RSD---- C:\Windows\Fonts
2012-04-26 20:06:48 ----D---- C:\Windows\system32\Tasks
2012-04-24 20:39:21 ----D---- C:\Program Files\Microsoft Security Client
2012-04-24 19:47:26 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-04-24 19:47:24 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-04-21 14:40:08 ----D---- C:\Windows\Tasks
2012-04-21 12:01:47 ----D---- C:\Windows\system32\LogFiles
2012-04-20 20:09:21 ----D---- C:\Program Files (x86)\Windows Live
2012-04-20 20:06:19 ----D---- C:\Windows\rescache
2012-04-20 20:01:02 ----D---- C:\Program Files\Common Files\System
2012-04-20 20:01:01 ----D---- C:\Windows\ehome
2012-04-20 20:01:00 ----D---- C:\Windows\SYSWOW64\migration
2012-04-20 20:01:00 ----D---- C:\Windows\system32\migration
2012-04-20 20:01:00 ----D---- C:\Program Files\Internet Explorer
2012-04-20 20:01:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-04-20 20:00:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-04-20 20:00:58 ----D---- C:\Windows\system32\cs-CZ
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Sidebar
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Media Player
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Mail
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\winrm
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\slmgr
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\migwiz
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\en
2012-04-20 20:00:52 ----D---- C:\Windows\servicing
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Defender
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Media Player
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Mail
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Defender
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\WCN
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\wbem
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\DriverStore
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Dism
2012-04-20 20:00:48 ----D---- C:\Windows\system32\winrm
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sysprep
2012-04-20 20:00:48 ----D---- C:\Windows\system32\slmgr
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sk-SK
2012-04-20 20:00:48 ----D---- C:\Windows\system32\oobe
2012-04-20 20:00:48 ----D---- C:\Windows\system32\migwiz
2012-04-20 20:00:48 ----D---- C:\Windows\system32\en
2012-04-20 20:00:48 ----D---- C:\Windows\system32\Boot
2012-04-20 20:00:48 ----D---- C:\Windows\PolicyDefinitions
2012-04-20 20:00:48 ----D---- C:\Windows\en-US
2012-04-20 20:00:46 ----D---- C:\Windows\system32\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\WCN
2012-04-20 20:00:42 ----D---- C:\Windows\system32\DriverStore
2012-04-20 20:00:42 ----D---- C:\Windows\system32\drivers\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\Dism
2012-04-20 20:00:41 ----D---- C:\Windows\system32\wbem
2012-04-20 20:00:41 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2012-04-20 19:54:09 ----A---- C:\Windows\win.ini
2012-04-20 19:38:20 ----D---- C:\Program Files (x86)\Microsoft
2012-04-20 18:14:21 ----D---- C:\Program Files (x86)\Microsoft Office
2012-04-20 15:51:14 ----D---- C:\Windows\ShellNew
2012-04-20 15:51:05 ----D---- C:\Program Files (x86)\MSBuild
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-04-20 15:49:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-04-20 15:06:20 ----RD---- C:\Users
2012-04-20 14:31:33 ----D---- C:\Windows\system32\restore
2012-04-20 14:08:54 ----D---- C:\Windows\system32\NDF
2012-04-20 13:45:24 ----SHD---- C:\$Recycle.Bin
2012-04-20 13:45:17 ----D---- C:\Windows\system32\Recovery
2012-04-20 13:45:17 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\drivers\SiWinAcc.sys [2007-10-03 22056]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\drivers\SiRemFil.sys [2007-10-03 17448]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-11-10 10567680]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-11-10 325632]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-08-04 1342064]
S3 cpuz130;cpuz130; \??\C:\Users\Milan\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 iaStor;iaStor; C:\Windows\system32\drivers\iaStor.sys [2010-09-13 437272]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
S3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\drivers\itecir.sys [2009-06-11 60416]
S3 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2010-09-07 121432]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\drivers\ASACPI.sys [2009-07-16 15416]
S3 mv91cons;mv91cons; C:\Windows\system32\drivers\mv91cons.sys [2010-11-22 24880]
S3 mv91xx;mv91xx; C:\Windows\system32\drivers\mv91xx.sys [2010-11-22 303408]
S3 mv91xxr;mv91xxr; C:\Windows\system32\drivers\mv91xxr.sys [2010-10-21 302120]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 NmPar;MosChip PCI Parallel Port; C:\Windows\system32\drivers\NmPar.sys []
S3 nmserial;MosChip PCI Serial Port; C:\Windows\system32\drivers\nmserial.sys []
S3 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2010-03-22 29800]
S3 OxSer;OxSer; C:\Windows\system32\drivers\OxSer.sys [2009-05-26 98352]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-10-29 250984]
S3 SI3112;SI3112; C:\Windows\system32\drivers\SI3112.sys [2007-06-28 83496]
S3 SI3114;SI3114; C:\Windows\system32\drivers\SI3114.sys [2008-04-14 82984]
S3 Si3114r5;Si3114r5; C:\Windows\system32\drivers\Si3114r5.sys [2008-11-24 329256]
S3 SI3124;SI3124; C:\Windows\system32\drivers\SI3124.sys [2009-10-30 92200]
S3 Si3124r5;Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [2010-04-13 340008]
S3 SI3132;SI3132; C:\Windows\system32\drivers\SI3132.sys [2007-10-03 90664]
S3 Si3132r5;Si3132r5; C:\Windows\system32\drivers\Si3132r5.sys [2008-10-30 340520]
S3 Si3531;Si3531; C:\Windows\system32\drivers\Si3531.sys [2009-02-09 333864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-11-10 204288]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-08 1255736]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-10-13 935208]

-----------------EOF-----------------

Re: Prosím o kontrolu logu.

Napsal: 15 kvě 2012 21:19
od Roli
Tak že znovu, protože z toho cos měl udělat poprvé jsi splnil pouze odinstalaci Advanced System Care.

Tohle fixni v HJT :

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - Startup: Registration Brothers In Arms EiB.LNK = C:\Program Files (x86)\Ubisoft\Gearbox Software\BrothersInArmsEiB\Support\Register\RegistrationReminder.exe

HJT najdeš zde :

C:\Program Files\trend micro\Milan.exe

Fix znamená že spustíš HJT Obrázek jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Bing Bar Update Service

Microsoft Antimalware Service

Microsoft Malware Protection

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Pak mi sem dej pro kontrolu aktuální log z Rsit a písni zda se něco změnilo.

Re: Prosím o kontrolu logu.

Napsal: 16 kvě 2012 12:13
od Milousek66
Zdravím a omlouvám se, asi jsem to minule nesputil jako správce, tak snad dnes jsem to udělal správně. Tady je nový log, počítač běhá normálně. Zatím díky.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2012-05-16 13:07:36
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 854 GB (90%) free of 954 GB
Total RAM: 6126 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:07:38, on 16.5.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6782 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5a1d22bf-1523-4dac-89cd-9fa0fff28207 -SystemEventPortName:HostProcess-31affdbd-5e53-4719-b903-d024363d3669 -IoCancelEventPortName:HostProcess-4fd39ec9-6d52-4a05-8331-269798afc6c1 -NonStateChangingEventPortName:HostProcess-8c2be5c2-0877-4161-bbb5-265a4c6ad3e9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:bcdbe61c-a309-46e9-ac3c-d02d8456e35f
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Milan\Downloads\RSITx64(1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\1dpkqtit.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-26 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-26 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-26 418840]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-08-11 2472048]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-05-15 20:25:52 ----D---- C:\Program Files\Microsoft Silverlight
2012-05-15 20:25:52 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-05-10 18:50:19 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-05-10 18:50:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-05-10 18:50:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-05-10 18:50:06 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-05-10 18:50:06 ----A---- C:\Windows\system32\win32k.sys
2012-05-10 18:50:05 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-05-10 18:50:05 ----A---- C:\Windows\system32\DWrite.dll
2012-05-10 18:49:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-05-10 14:01:08 ----D---- C:\Users\Milan\AppData\Roaming\Gearbox Software
2012-05-10 13:45:22 ----D---- C:\Program Files (x86)\Ubisoft
2012-05-09 11:19:17 ----D---- C:\Program Files\CCleaner
2012-05-05 15:21:01 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2012-05-04 17:09:18 ----D---- C:\rsit
2012-05-04 17:09:18 ----D---- C:\Program Files\trend micro
2012-05-04 12:31:04 ----D---- C:\ProgramData\Mozilla
2012-05-04 12:31:03 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-03 13:36:26 ----D---- C:\Program Files (x86)\Futuremark
2012-05-01 18:45:11 ----D---- C:\Users\Milan\AppData\Roaming\Cakewalk
2012-05-01 18:44:25 ----D---- C:\ProgramData\Identities
2012-05-01 18:43:30 ----A---- C:\Windows\system32\mkl_intel_thread.dll
2012-05-01 18:43:17 ----A---- C:\Windows\system32\mkl_def.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\mkl_core.dll
2012-05-01 18:42:47 ----A---- C:\Windows\system32\libiomp5md.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4p.dll
2012-05-01 18:42:46 ----A---- C:\Windows\SYSWOW64\mkl_p4m3.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4m.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_p4.dll
2012-05-01 18:42:45 ----A---- C:\Windows\SYSWOW64\mkl_intel_thread.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\mkl_core.dll
2012-05-01 18:42:44 ----A---- C:\Windows\SYSWOW64\libiomp5md.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcr71.dll
2012-05-01 18:42:16 ----A---- C:\Windows\msvcp71.dll
2012-05-01 18:41:59 ----D---- C:\Program Files\Cakewalk
2012-05-01 18:41:59 ----D---- C:\Program Files (x86)\IK Multimedia
2012-05-01 18:41:08 ----D---- C:\Cakewalk Projects
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\ReWire.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\msvcp70.dll
2012-05-01 18:40:52 ----A---- C:\Windows\SYSWOW64\mfc71u.dll
2012-05-01 18:40:51 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2012-05-01 18:29:40 ----D---- C:\Cakewalk Content
2012-05-01 18:26:56 ----D---- C:\ProgramData\Cakewalk
2012-05-01 18:26:56 ----D---- C:\Program Files (x86)\Cakewalk
2012-05-01 12:07:37 ----D---- C:\Program Files (x86)\IstraSoft
2012-04-26 21:02:03 ----D---- C:\Users\Milan\AppData\Roaming\Media Player Classic
2012-04-24 19:46:54 ----D---- C:\e68ec0d1c2563f5aed314d3da9842f
2012-04-23 18:33:55 ----D---- C:\Program Files (x86)\Medvěd Míša Ostrovy pokladů
2012-04-23 18:22:20 ----D---- C:\Program Files (x86)\Zuma Deluxe
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\qt-dx331.dll
2012-04-23 17:49:06 ----A---- C:\Windows\SYSWOW64\dpl100.dll
2012-04-23 17:49:03 ----A---- C:\Windows\SYSWOW64\divx.dll
2012-04-23 17:49:01 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2012-04-21 14:44:43 ----D---- C:\Users\Milan\AppData\Roaming\Macromedia
2012-04-21 14:44:08 ----D---- C:\ProgramData\McAfee
2012-04-21 14:40:07 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-04-21 14:40:05 ----D---- C:\Windows\SYSWOW64\Macromed
2012-04-21 14:39:54 ----D---- C:\Windows\system32\Macromed
2012-04-21 11:07:09 ----D---- C:\Users\Milan\AppData\Roaming\Nero
2012-04-20 20:08:52 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-04-20 20:07:24 ----A---- C:\Windows\system32\FntCache.dll
2012-04-20 20:07:24 ----A---- C:\Windows\system32\d2d1.dll
2012-04-20 20:07:23 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-04-20 19:47:06 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-04-20 19:47:06 ----A---- C:\Windows\system32\mshtmled.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\url.dll
2012-04-20 19:47:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\jscript9.dll
2012-04-20 19:47:05 ----A---- C:\Windows\system32\iertutil.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-04-20 19:47:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\url.dll
2012-04-20 19:47:04 ----A---- C:\Windows\system32\ieui.dll
2012-04-20 19:47:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\urlmon.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jsproxy.dll
2012-04-20 19:47:03 ----A---- C:\Windows\system32\jscript.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-04-20 19:47:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-04-20 19:47:02 ----A---- C:\Windows\system32\wininet.dll
2012-04-20 19:47:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-04-20 19:47:00 ----A---- C:\Windows\system32\mshtml.dll
2012-04-20 19:46:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-04-20 19:46:58 ----A---- C:\Windows\system32\ieframe.dll
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-04-20 19:37:43 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\imagehlp.dll
2012-04-20 19:37:43 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-04-20 19:37:42 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wmi.dll
2012-04-20 19:37:42 ----A---- C:\Windows\system32\wintrust.dll
2012-04-20 19:34:24 ----SHD---- C:\Config.Msi
2012-04-20 19:11:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-04-20 18:33:33 ----D---- C:\Program Files (x86)\Nero
2012-04-20 18:33:15 ----D---- C:\ProgramData\Nero
2012-04-20 18:32:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-04-20 18:04:58 ----D---- C:\ProgramData\Apple Computer
2012-04-20 18:04:58 ----D---- C:\Program Files (x86)\QuickTime
2012-04-20 18:04:31 ----D---- C:\ProgramData\Apple
2012-04-20 18:04:31 ----D---- C:\Program Files (x86)\Apple Software Update
2012-04-20 18:03:43 ----A---- C:\Windows\avisplitter.ini
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\yv12vfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2012-04-20 18:03:32 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2012-04-20 18:03:31 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2012-04-20 17:58:25 ----D---- C:\Users\Milan\AppData\Roaming\Adobe
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\quartz.dll
2012-04-20 16:49:24 ----A---- C:\Windows\system32\qdvd.dll
2012-04-20 16:49:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-04-20 16:49:18 ----A---- C:\Windows\system32\shell32.dll
2012-04-20 16:49:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-04-20 16:49:17 ----A---- C:\Windows\system32\ntshrui.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\webio.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\schannel.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsass.exe
2012-04-20 16:49:16 ----A---- C:\Windows\system32\lsasrv.dll
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-04-20 16:49:16 ----A---- C:\Windows\system32\drivers\cng.sys
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspisrv.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\sspicli.dll
2012-04-20 16:49:15 ----A---- C:\Windows\system32\secur32.dll
2012-04-20 16:49:12 ----A---- C:\Windows\system32\csrsrv.dll
2012-04-20 16:49:07 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-04-20 16:49:07 ----A---- C:\Windows\system32\psisdecd.dll
2012-04-20 16:49:05 ----A---- C:\Windows\system32\drivers\afd.sys
2012-04-20 16:48:54 ----A---- C:\Windows\system32\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-04-20 16:48:53 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleaut32.dll
2012-04-20 16:48:53 ----A---- C:\Windows\system32\oleacc.dll
2012-04-20 16:48:52 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-04-20 16:48:52 ----A---- C:\Windows\system32\EncDec.dll
2012-04-20 16:48:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-04-20 16:48:47 ----A---- C:\Windows\system32\tzres.dll
2012-04-20 16:48:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-04-20 16:48:41 ----A---- C:\Windows\system32\ntdll.dll
2012-04-20 16:48:13 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-04-20 16:48:13 ----A---- C:\Windows\system32\packager.dll
2012-04-20 15:50:46 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2012-04-20 15:48:13 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-04-20 15:48:00 ----D---- C:\Program Files\Microsoft Office
2012-04-20 15:47:52 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2012-04-20 15:47:45 ----D---- C:\ProgramData\Microsoft Help
2012-04-20 15:47:35 ----RHD---- C:\MSOCache
2012-04-20 15:21:51 ----D---- C:\Users\Milan\AppData\Roaming\WinRAR
2012-04-20 15:21:41 ----D---- C:\Program Files (x86)\WinRAR
2012-04-20 15:21:02 ----D---- C:\Program Files (x86)\Adobe
2012-04-20 15:20:27 ----D---- C:\ProgramData\Adobe
2012-04-20 14:48:22 ----D---- C:\ProgramData\IObit
2012-04-20 14:48:07 ----D---- C:\Users\Milan\AppData\Roaming\IObit
2012-04-20 14:47:57 ----D---- C:\Program Files (x86)\IObit
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpwsx.dll
2012-04-20 14:41:38 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-04-20 14:41:37 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\rdpcore.dll
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-04-20 14:41:37 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-04-20 14:35:48 ----D---- C:\Program Files (x86)\Google
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-04-20 14:35:46 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-04-20 14:35:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-04-20 14:35:43 ----A---- C:\Windows\system32\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-04-20 14:35:16 ----A---- C:\Windows\avastSS.scr
2012-04-20 14:34:54 ----D---- C:\ProgramData\AVAST Software
2012-04-20 14:34:54 ----D---- C:\Program Files\AVAST Software
2012-04-20 14:25:39 ----D---- C:\Users\Milan\AppData\Roaming\Mozilla
2012-04-20 14:25:31 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-04-20 13:57:46 ----A---- C:\Windows\SYSWOW64\unrar.dll
2012-04-20 13:57:44 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2012-04-20 13:45:27 ----D---- C:\Users\Milan\AppData\Roaming\Identities
2012-04-20 13:45:21 ----SD---- C:\Users\Milan\AppData\Roaming\Microsoft
2012-04-20 13:45:21 ----D---- C:\Users\Milan\AppData\Roaming\Media Center Programs
2012-04-20 13:45:17 ----SHD---- C:\Recovery
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Šablony
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Plocha
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Oblíbené položky
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Nabídka Start
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Dokumenty
2012-04-20 13:45:17 ----SHD---- C:\ProgramData\Data aplikací
2012-04-20 13:45:17 ----SHD---- C:\Documents and Settings
2012-04-20 13:37:07 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 month======

2012-05-16 13:05:30 ----D---- C:\Windows\Temp
2012-05-16 12:56:22 ----D---- C:\Windows\Prefetch
2012-05-16 12:37:45 ----D---- C:\Windows
2012-05-16 12:19:16 ----D---- C:\Windows\system32\config
2012-05-16 12:16:08 ----D---- C:\Windows\System32
2012-05-16 12:16:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-05-16 12:16:07 ----D---- C:\Windows\inf
2012-05-15 20:26:42 ----SHD---- C:\Windows\Installer
2012-05-15 20:25:52 ----RD---- C:\Program Files (x86)
2012-05-15 20:25:52 ----RD---- C:\Program Files
2012-05-15 20:25:22 ----SHD---- C:\System Volume Information
2012-05-10 19:21:53 ----RSD---- C:\Windows\assembly
2012-05-10 19:21:53 ----D---- C:\Windows\Microsoft.NET
2012-05-10 19:02:51 ----D---- C:\Windows\debug
2012-05-10 19:00:07 ----D---- C:\Windows\winsxs
2012-05-10 18:58:33 ----D---- C:\Windows\SysWOW64
2012-05-10 18:58:32 ----D---- C:\Windows\system32\drivers
2012-05-10 18:57:19 ----A---- C:\Windows\system32\MRT.exe
2012-05-10 18:55:19 ----D---- C:\Windows\system32\catroot
2012-05-10 18:50:48 ----D---- C:\Program Files\Windows Journal
2012-05-10 18:49:48 ----D---- C:\Windows\system32\catroot2
2012-05-09 11:20:59 ----D---- C:\Windows\Panther
2012-05-09 11:20:59 ----D---- C:\Windows\Logs
2012-05-04 12:31:04 ----HD---- C:\ProgramData
2012-05-03 13:36:51 ----D---- C:\Program Files (x86)\Common Files
2012-05-03 13:36:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-02 12:49:30 ----SD---- C:\ProgramData\Microsoft
2012-05-01 20:56:51 ----D---- C:\Windows\system32\wdi
2012-05-01 20:06:09 ----D---- C:\Windows\LiveKernelReports
2012-05-01 18:29:40 ----RSD---- C:\Windows\Fonts
2012-04-26 20:06:48 ----D---- C:\Windows\system32\Tasks
2012-04-24 20:39:21 ----D---- C:\Program Files\Microsoft Security Client
2012-04-24 19:47:26 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-04-24 19:47:24 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-04-21 14:40:08 ----D---- C:\Windows\Tasks
2012-04-21 12:01:47 ----D---- C:\Windows\system32\LogFiles
2012-04-20 20:09:21 ----D---- C:\Program Files (x86)\Windows Live
2012-04-20 20:06:19 ----D---- C:\Windows\rescache
2012-04-20 20:01:02 ----D---- C:\Program Files\Common Files\System
2012-04-20 20:01:01 ----D---- C:\Windows\ehome
2012-04-20 20:01:00 ----D---- C:\Windows\SYSWOW64\migration
2012-04-20 20:01:00 ----D---- C:\Windows\system32\migration
2012-04-20 20:01:00 ----D---- C:\Program Files\Internet Explorer
2012-04-20 20:01:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-04-20 20:00:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-04-20 20:00:58 ----D---- C:\Windows\system32\cs-CZ
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Sidebar
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Media Player
2012-04-20 20:00:56 ----D---- C:\Program Files\Windows Mail
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\winrm
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\slmgr
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\migwiz
2012-04-20 20:00:52 ----D---- C:\Windows\SYSWOW64\en
2012-04-20 20:00:52 ----D---- C:\Windows\servicing
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files\Windows Defender
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Media Player
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Mail
2012-04-20 20:00:52 ----D---- C:\Program Files (x86)\Windows Defender
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2012-04-20 20:00:51 ----D---- C:\Windows\SYSWOW64\drivers
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\WCN
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\wbem
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\DriverStore
2012-04-20 20:00:49 ----D---- C:\Windows\SYSWOW64\Dism
2012-04-20 20:00:48 ----D---- C:\Windows\system32\winrm
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sysprep
2012-04-20 20:00:48 ----D---- C:\Windows\system32\slmgr
2012-04-20 20:00:48 ----D---- C:\Windows\system32\sk-SK
2012-04-20 20:00:48 ----D---- C:\Windows\system32\oobe
2012-04-20 20:00:48 ----D---- C:\Windows\system32\migwiz
2012-04-20 20:00:48 ----D---- C:\Windows\system32\en
2012-04-20 20:00:48 ----D---- C:\Windows\system32\Boot
2012-04-20 20:00:48 ----D---- C:\Windows\PolicyDefinitions
2012-04-20 20:00:48 ----D---- C:\Windows\en-US
2012-04-20 20:00:46 ----D---- C:\Windows\system32\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\WCN
2012-04-20 20:00:42 ----D---- C:\Windows\system32\DriverStore
2012-04-20 20:00:42 ----D---- C:\Windows\system32\drivers\en-US
2012-04-20 20:00:42 ----D---- C:\Windows\system32\Dism
2012-04-20 20:00:41 ----D---- C:\Windows\system32\wbem
2012-04-20 20:00:41 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2012-04-20 19:54:09 ----A---- C:\Windows\win.ini
2012-04-20 19:38:20 ----D---- C:\Program Files (x86)\Microsoft
2012-04-20 18:14:21 ----D---- C:\Program Files (x86)\Microsoft Office
2012-04-20 15:51:14 ----D---- C:\Windows\ShellNew
2012-04-20 15:51:05 ----D---- C:\Program Files (x86)\MSBuild
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-04-20 15:50:30 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-04-20 15:49:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-04-20 15:06:20 ----RD---- C:\Users
2012-04-20 14:31:33 ----D---- C:\Windows\system32\restore
2012-04-20 14:08:54 ----D---- C:\Windows\system32\NDF
2012-04-20 13:45:24 ----SHD---- C:\$Recycle.Bin
2012-04-20 13:45:17 ----D---- C:\Windows\system32\Recovery
2012-04-20 13:45:17 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\drivers\SiWinAcc.sys [2007-10-03 22056]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\drivers\SiRemFil.sys [2007-10-03 17448]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-11-10 10567680]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-11-10 325632]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-08-04 1342064]
S3 cpuz130;cpuz130; \??\C:\Users\Milan\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 iaStor;iaStor; C:\Windows\system32\drivers\iaStor.sys [2010-09-13 437272]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
S3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\drivers\itecir.sys [2009-06-11 60416]
S3 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2010-09-07 121432]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\drivers\ASACPI.sys [2009-07-16 15416]
S3 mv91cons;mv91cons; C:\Windows\system32\drivers\mv91cons.sys [2010-11-22 24880]
S3 mv91xx;mv91xx; C:\Windows\system32\drivers\mv91xx.sys [2010-11-22 303408]
S3 mv91xxr;mv91xxr; C:\Windows\system32\drivers\mv91xxr.sys [2010-10-21 302120]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 NmPar;MosChip PCI Parallel Port; C:\Windows\system32\drivers\NmPar.sys []
S3 nmserial;MosChip PCI Serial Port; C:\Windows\system32\drivers\nmserial.sys []
S3 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2010-03-22 29800]
S3 OxSer;OxSer; C:\Windows\system32\drivers\OxSer.sys [2009-05-26 98352]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-10-29 250984]
S3 SI3112;SI3112; C:\Windows\system32\drivers\SI3112.sys [2007-06-28 83496]
S3 SI3114;SI3114; C:\Windows\system32\drivers\SI3114.sys [2008-04-14 82984]
S3 Si3114r5;Si3114r5; C:\Windows\system32\drivers\Si3114r5.sys [2008-11-24 329256]
S3 SI3124;SI3124; C:\Windows\system32\drivers\SI3124.sys [2009-10-30 92200]
S3 Si3124r5;Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [2010-04-13 340008]
S3 SI3132;SI3132; C:\Windows\system32\drivers\SI3132.sys [2007-10-03 90664]
S3 Si3132r5;Si3132r5; C:\Windows\system32\drivers\Si3132r5.sys [2008-10-30 340520]
S3 Si3531;Si3531; C:\Windows\system32\drivers\Si3531.sys [2009-02-09 333864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-11-10 204288]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-08 1255736]
S4 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-20 136176]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S4 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-10-13 935208]

-----------------EOF-----------------

Re: Prosím o kontrolu logu.

Napsal: 16 kvě 2012 21:56
od Roli
Takhle by to skoro už šlo, ale ještě přes Start >> Spustit >> napiš - services.msc >> OK. Najdi službu :

Microsoft Malware Protection Driver nebo MpFilter

BBUpdate

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.

Zase nějakou chvilku PC pozoruj a pak dej vědět stav.

Re: Prosím o kontrolu logu.

Napsal: 22 kvě 2012 18:38
od Milousek66
Zdravím, tak jsem pozoroval a počítač od Vašeho posledního návodu nezamrzl ani jednou, funguje bez jakýchkoli problémů. Jen se mi asi 2 x nebo 3 x při zapnutí objevil rámeček, kde mě "Microsoft security esential" vyhrožuje, abych si ho zapnul... Takže moc díky.

Re: Prosím o kontrolu logu.

Napsal: 22 kvě 2012 20:12
od Roli
Milousek66 píše:Zdravím, tak jsem pozoroval a počítač od Vašeho posledního návodu nezamrzl ani jednou, funguje bez jakýchkoli problémů
Ahoj, tak to je jenom dobře.
Milousek66 píše:Jen se mi asi 2 x nebo 3 x při zapnutí objevil rámeček, kde mě "Microsoft security esential" vyhrožuje, abych si ho zapnul...
Pokud nepůjde přes Odebrat programy normálně odinstalovat ZDE

je nástroj od Microsoftu který by to měl zvládnout počistit.

Nebo ZDE je postup jak toho docílit ručně

Jinak pro příště, častá změna antiviru není to pravé ořechové.
Milousek66 píše:Takže moc díky.
Není zač.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz