VIRY.CZ

Zdravim, píšu sem protože mám podezření na vir. Děkuji všem co pomůžou
Tady log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jarda at 2012-06-29 20:57:30
Microsoft Windows 7 Home Premium
System drive C: has 84 GB (18%) free of 477 GB
Total RAM: 8163 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:57:32, on 29.6.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jarda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-21-3344855712-2548836808-2162885872-1010\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3344855712-2548836808-2162885872-1010\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5791 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {31C1221E-DC7A-4C3E-957A-CC10E4F19724}
"C:\Program Files\Core Temp\Core Temp.exe"
"C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe" /s
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"taskhost.exe"
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 27133AAA-BD70-77E0-9573-0B834476B7A3 -Reinvoke
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/19/Prerender/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="4052.1.1683267352\702186141" /prefetch:3
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/19/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="4052.2.1186069798\324077878" /prefetch:3
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4052.3.1378564791\1253050975" /prefetch:12
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/19/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="4052.5.1137680297\822615880" /prefetch:3
"C:\Users\Jarda\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml

C:\Users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default\extensions\
battlefieldplay4free@ea.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-06-27 545192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-06-27 193456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-08-15 7288424]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-06-14 17425584]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-04-04 462408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2012-01-29 249344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-06-29 20:57:30 ----D---- C:\rsit
2012-06-29 20:38:05 ----D---- C:\Windows\system64
2012-06-29 18:31:40 ----SHD---- C:\Config.Msi
2012-06-29 18:29:12 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-06-29 18:29:12 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-06-29 18:29:11 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-06-29 18:29:11 ----A---- C:\Windows\system32\UIRibbon.dll
2012-06-27 09:30:25 ----A---- C:\Windows\system32\javaws.exe
2012-06-27 09:30:20 ----A---- C:\Windows\system32\javaw.exe
2012-06-27 09:30:20 ----A---- C:\Windows\system32\java.exe
2012-06-24 12:44:13 ----D---- C:\Program Files (x86)\Batman Arkham City
2012-06-22 20:18:43 ----D---- C:\Program Files (x86)\Darksiders
2012-06-21 22:26:48 ----A---- C:\Windows\AutoKMS.ini
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wups2.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wucltux.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wups.dll
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wudriver.dll
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wuapi.dll
2012-06-21 14:31:09 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-21 14:31:09 ----A---- C:\Windows\system32\wuapp.exe
2012-06-14 18:27:32 ----D---- C:\Users\Jarda\AppData\Roaming\runic games
2012-06-13 14:11:18 ----A---- C:\Windows\SYSWOW64\url.dll
2012-06-13 14:11:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-06-13 14:11:18 ----A---- C:\Windows\system32\url.dll
2012-06-13 14:11:18 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\urlmon.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\ieui.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\iertutil.dll
2012-06-13 14:11:16 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-06-13 14:11:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-06-13 14:11:16 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-13 14:11:15 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-06-13 14:11:15 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\wininet.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\jscript9.dll
2012-06-13 14:11:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-06-13 14:11:14 ----A---- C:\Windows\system32\jscript.dll
2012-06-13 14:11:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-06-13 14:11:13 ----A---- C:\Windows\system32\mshtml.dll
2012-06-13 14:11:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-06-13 14:11:12 ----A---- C:\Windows\system32\ieframe.dll
2012-06-13 14:10:36 ----A---- C:\Windows\system32\profsvc.dll
2012-06-13 14:10:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-06-13 14:10:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-06-13 14:10:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-06-13 14:10:27 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-06-13 14:10:26 ----A---- C:\Windows\system32\rdpwsx.dll
2012-06-13 14:10:24 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-06-13 14:10:21 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-06-13 14:10:21 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\crypt32.dll
2012-06-13 14:10:20 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-06-13 14:10:09 ----A---- C:\Windows\system32\win32k.sys
2012-06-13 14:10:01 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-13 14:09:52 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-06-13 14:09:52 ----A---- C:\Windows\system32\msi.dll
2012-06-10 12:29:15 ----D---- C:\Users\Jarda\AppData\Roaming\DarknessII
2012-06-07 16:12:34 ----D---- C:\Program Files (x86)\Diablo III
2012-06-07 16:08:49 ----D---- C:\ProgramData\Battle.net
2012-06-03 13:43:38 ----D---- C:\ProgramData\Rockstar Games
2012-06-01 22:23:35 ----HD---- C:\Windows\msdownld.tmp
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvvsvc.exe
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvsvcr.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvsvc64.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvshext.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvmctray.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvcpl.dll
2012-06-01 22:20:58 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-06-01 22:20:58 ----A---- C:\Windows\system32\OpenCL.dll
2012-06-01 22:20:54 ----D---- C:\ProgramData\NVIDIA Corporation
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvumdshimx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvoglv64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvinitx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvhdap64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvgenco64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvdispco64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvdecodemft.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuvid.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuda.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcompiler.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvapi64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-06-01 22:20:18 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2012-06-01 17:46:03 ----D---- C:\Program Files\Java
2012-06-01 11:53:04 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2012-06-01 11:52:49 ----DC---- C:\Windows\system32\DRVSTORE
2012-06-01 11:52:49 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2012-06-01 11:52:46 ----D---- C:\Program Files\Oracle
2012-05-30 08:17:46 ----A---- C:\Windows\system32\frapsv64.dll
2012-05-30 08:17:44 ----A---- C:\Windows\SYSWOW64\frapsvid.dll

======List of files/folders modified in the last 1 month======

2012-06-29 20:57:32 ----D---- C:\Program Files\trend micro
2012-06-29 20:55:47 ----D---- C:\Windows\temp
2012-06-29 20:52:35 ----D---- C:\Users\Jarda\AppData\Roaming\Skype
2012-06-29 20:52:19 ----D---- C:\Users\Jarda\AppData\Roaming\uTorrent
2012-06-29 20:51:53 ----D---- C:\Users\Jarda\AppData\Roaming\DAEMON Tools Lite
2012-06-29 20:51:53 ----D---- C:\Program Files (x86)\Steam
2012-06-29 20:51:52 ----D---- C:\Windows\System32
2012-06-29 20:51:52 ----D---- C:\Windows\Logs
2012-06-29 20:51:52 ----D---- C:\Windows\inf
2012-06-29 20:51:52 ----D---- C:\Windows
2012-06-29 20:50:51 ----RD---- C:\Program Files (x86)
2012-06-29 20:50:43 ----D---- C:\Windows\Prefetch
2012-06-29 20:49:43 ----D---- C:\Windows\system32\config
2012-06-29 20:36:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-29 20:27:52 ----D---- C:\Program Files (x86)\MSI Afterburner
2012-06-29 20:27:22 ----D---- C:\Program Files\Core Temp
2012-06-29 20:26:26 ----D---- C:\ProgramData\NVIDIA
2012-06-29 20:25:35 ----D---- C:\Windows\system32\Tasks
2012-06-29 20:24:00 ----SHD---- C:\Windows\Installer
2012-06-29 20:16:40 ----D---- C:\DOWNLOAD
2012-06-29 19:52:10 ----D---- C:\Program Files (x86)\The KMPlayer
2012-06-29 19:03:57 ----D---- C:\Windows\winsxs
2012-06-29 18:53:57 ----RSD---- C:\Windows\assembly
2012-06-29 18:53:40 ----SD---- C:\ProgramData\Microsoft
2012-06-29 18:53:19 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-06-29 18:53:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-06-29 18:52:45 ----SHD---- C:\System Volume Information
2012-06-29 18:52:40 ----D---- C:\Windows\SysWOW64
2012-06-29 18:52:10 ----RD---- C:\Program Files (x86)\Skype
2012-06-29 18:52:10 ----D---- C:\ProgramData\Skype
2012-06-29 18:29:14 ----D---- C:\Windows\system32\catroot
2012-06-29 18:27:16 ----D---- C:\Program Files (x86)\Common Files
2012-06-28 12:45:13 ----D---- C:\Windows\Tasks
2012-06-28 12:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-06-27 13:16:11 ----D---- C:\Program Files (x86)\World of Warcraft 3.3.5
2012-06-27 09:30:17 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-06-27 09:30:17 ----A---- C:\Windows\system32\deployJava1.dll
2012-06-27 09:29:58 ----D---- C:\Windows\system32\catroot2
2012-06-27 09:29:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-06-27 09:28:04 ----D---- C:\Program Files\CCleaner
2012-06-25 23:26:20 ----D---- C:\Program Files (x86)\World of Warcraft 4.0.6
2012-06-25 23:15:29 ----D---- C:\Windows\system32\NDF
2012-06-25 22:44:24 ----D---- C:\Windows\rescache
2012-06-25 20:46:58 ----D---- C:\Windows\system32\cs-CZ
2012-06-24 01:11:27 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-06-19 21:05:28 ----D---- C:\Program Files (x86)\Mass Effect 3
2012-06-18 23:07:33 ----D---- C:\Windows\debug
2012-06-15 22:59:58 ----D---- C:\Program Files\WinRAR
2012-06-14 16:55:00 ----D---- C:\Windows\Microsoft.NET
2012-06-14 00:02:43 ----D---- C:\Windows\SYSWOW64\migration
2012-06-14 00:02:43 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-06-14 00:02:43 ----D---- C:\Windows\system32\migration
2012-06-14 00:02:43 ----D---- C:\Windows\system32\drivers
2012-06-14 00:02:43 ----D---- C:\Program Files\Internet Explorer
2012-06-14 00:02:43 ----D---- C:\Program Files (x86)\Internet Explorer
2012-06-13 14:20:13 ----D---- C:\ProgramData\Microsoft Help
2012-06-13 14:16:39 ----A---- C:\Windows\system32\MRT.exe
2012-06-11 23:29:51 ----D---- C:\Program Files (x86)\FreeRapid-0.86u1
2012-06-10 00:57:00 ----AD---- C:\ProgramData
2012-06-09 01:07:08 ----D---- C:\ProgramData\Codemasters
2012-06-09 00:02:54 ----D---- C:\ProgramData\Tunngle
2012-06-08 23:21:04 ----D---- C:\Program Files (x86)\Tunngle
2012-06-08 23:21:01 ----D---- C:\Users\Jarda\AppData\Roaming\Tunngle
2012-06-07 19:46:15 ----D---- C:\Users\Jarda\AppData\Roaming\.minecraft
2012-06-03 14:10:30 ----D---- C:\Program Files (x86)\Rockstar Games
2012-06-01 22:23:43 ----D---- C:\Windows\SYSWOW64\directx
2012-06-01 22:22:10 ----RD---- C:\Users
2012-06-01 22:22:09 ----D---- C:\Program Files\NVIDIA Corporation
2012-06-01 22:22:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-06-01 22:22:02 ----D---- C:\Windows\system32\DriverStore
2012-06-01 22:21:07 ----D---- C:\Windows\Help
2012-06-01 17:46:03 ----RD---- C:\Program Files
2012-06-01 17:15:56 ----D---- C:\Windows\SoftwareDistribution
2012-06-01 13:24:36 ----D---- C:\Windows\system32\drivers\etc
2012-06-01 11:34:09 ----D---- C:\Users\Jarda\AppData\Roaming\CorsixTH

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-02 283200]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-03-13 88480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-03-13 46400]
R3 ALSysIO;ALSysIO; \??\C:\Users\Jarda\AppData\Local\Temp\ALSysIO64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
R3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2012-05-14 10568]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-10-27 36328]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2012-02-16 99384]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-10-27 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 177640]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2011-10-27 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2011-10-27 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2011-10-27 172104]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2012-02-16 203320]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-06-14 160944]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-05-01 489256]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-06-01 736104]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Také zdravím!
V logu není vidět nic nebezpečného. Z čeho usuzujete na virus?

MSE detekuje vir v C:\Windows\assembly\temp\U\80000032.$. Přesný název viru je Trojan:Win32 někdy 64/Sirefef.J někdy P,AN,AB.
Při pokusu odstranit mi to vypne antivir a poprosí o restart. Nepomůže to.
Spouští se mi aktualizace Adobe Flash Playeru ale pod procesem FP_AX_CAB_INSTALLER.exe . Nainstalovaný mám nejnovější tuším ze středy.
U procesu svchost.exe je vytížení procesoru na 25%.
Malwarebytes Anti-Malware nic nenašel. Dával sem rychlou kontrolu.
A při startu se mi u hodin ukazuje málo programů. Třeba antivir tam vůbec není. A ještě nějaké programy, které ale jsou puštěné.

Zatím vše na co sem přišel

To, že nemáte antivir jsem se všiml a považuji to za základní bezpečnostní problém. Dejte log ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Před spuštěním sem se koukal na Windows Firewall a ten byl taky vypnutý a je furt. Po pokusu zapnout vyhodí chybu s kodem 0x80070433
Teď mi běží jak svchost.exe tak i services.exe. Oba tak na 15%...
MSE běží v pořádku. Mám zkusit kontrolu?
Zde je log:

ComboFix 12-06-28.03 - Jarda 29.06.2012 22:05:41.6.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.8163.6358 [GMT 2:00]
Spuštěný z: c:\users\Jarda\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\GAC_32\Desktop.ini
c:\windows\assembly\GAC_64\Desktop.ini
c:\windows\assembly\temp\@
c:\windows\assembly\temp\cfg.ini
c:\windows\System64
c:\windows\SysWow64\DEBUG.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-28 do 2012-06-29 )))))))))))))))))))))))))))))))
.
.
2012-06-29 18:57 . 2012-06-29 18:57 -------- d-----w- C:\rsit
2012-06-29 18:39 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1490F043-FD7B-4463-8760-EBE293FCB75D}\mpengine.dll
2012-06-29 16:29 . 2010-08-11 05:13 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2012-06-29 16:29 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\SysWow64\UIRibbonRes.dll
2012-06-29 16:29 . 2010-08-11 05:19 3860992 ----a-w- c:\windows\system32\UIRibbon.dll
2012-06-29 16:29 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\SysWow64\UIRibbon.dll
2012-06-29 16:27 . 2012-06-29 16:42 -------- d-----w- c:\users\Jarda\AppData\Local\Windows Live
2012-06-29 16:27 . 2012-06-29 16:27 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2012-06-28 10:53 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-06-27 07:29 . 2012-06-14 22:20 85472 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2012-06-27 07:29 . 2012-06-14 22:20 157608 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2012-06-27 07:29 . 2012-06-14 22:20 113120 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice.exe
2012-06-27 07:29 . 2012-06-14 22:19 770384 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-27 07:29 . 2012-06-14 22:19 421200 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-24 10:44 . 2012-06-24 11:07 -------- d-----w- c:\program files (x86)\Batman Arkham City
2012-06-22 18:46 . 2012-06-22 18:47 -------- d-----w- c:\users\Jarda\AppData\Local\Darksiders
2012-06-22 18:18 . 2012-06-22 18:18 -------- d-----w- c:\program files (x86)\Darksiders
2012-06-21 12:31 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-21 12:31 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-21 12:31 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-21 12:31 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-21 12:31 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-21 12:31 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-21 12:31 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-21 12:31 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-21 12:31 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-14 16:27 . 2012-06-14 16:27 -------- d-----w- c:\users\Jarda\AppData\Roaming\runic games
2012-06-13 12:10 . 2012-05-02 05:32 208896 ----a-w- c:\windows\system32\profsvc.dll
2012-06-13 12:09 . 2012-04-07 12:18 3213824 ----a-w- c:\windows\system32\msi.dll
2012-06-13 12:09 . 2012-04-07 11:34 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2012-06-12 16:14 . 2012-02-10 12:24 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{067A2741-81AB-48A2-9102-9BB8314314CF}\gapaengine.dll
2012-06-10 10:29 . 2012-06-13 18:13 -------- d-----w- c:\users\Jarda\AppData\Roaming\DarknessII
2012-06-07 14:12 . 2012-06-27 22:37 -------- d-----w- c:\program files (x86)\Diablo III
2012-06-07 14:08 . 2012-06-07 14:11 -------- d-----w- c:\programdata\Battle.net
2012-06-03 11:43 . 2012-06-03 11:43 -------- d-----w- c:\programdata\Rockstar Games
2012-06-01 20:23 . 2012-06-01 20:23 -------- d--h--w- c:\windows\msdownld.tmp
2012-06-01 20:22 . 2012-06-21 19:08 -------- d-----w- c:\users\UpdatusUser
2012-06-01 20:21 . 2012-05-15 09:29 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-06-01 20:21 . 2012-05-15 09:29 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-06-01 20:21 . 2012-05-15 09:29 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-06-01 20:21 . 2012-05-15 09:29 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-06-01 20:21 . 2012-05-15 09:29 2621723 ----a-w- c:\windows\system32\nvcoproc.bin
2012-06-01 20:21 . 2012-05-15 09:29 3149632 ----a-w- c:\windows\system32\nvsvc64.dll
2012-06-01 20:21 . 2012-05-15 09:28 6151488 ----a-w- c:\windows\system32\nvcpl.dll
2012-06-01 17:40 . 2012-06-01 17:40 -------- d-----w- c:\users\Jarda\AppData\Local\LucasArts
2012-06-01 15:46 . 2012-06-01 15:46 -------- d-----w- c:\program files\Java
2012-06-01 09:53 . 2012-06-01 09:53 -------- d-----w- c:\users\Jarda\VirtualBox VMs
2012-06-01 09:53 . 2012-06-29 16:09 -------- d-----w- c:\users\Jarda\.VirtualBox
2012-06-01 09:53 . 2012-05-22 12:26 224088 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-06-01 09:52 . 2012-06-01 09:53 -------- dc----w- c:\windows\system32\DRVSTORE
2012-06-01 09:52 . 2012-05-22 12:26 130904 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2012-06-01 09:52 . 2012-06-01 09:52 -------- d-----w- c:\program files\Oracle
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-28 10:45 . 2012-03-22 20:29 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-28 10:45 . 2011-12-08 22:57 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-27 07:30 . 2012-01-05 11:20 955840 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-27 07:30 . 2012-01-05 11:20 839096 ----a-w- c:\windows\system32\deployJava1.dll
2012-05-30 06:17 . 2012-05-30 06:17 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-05-30 06:17 . 2012-05-30 06:17 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-05-22 12:26 . 2012-05-22 12:26 147288 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-05-22 12:26 . 2012-05-22 12:26 117080 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-05-22 12:25 . 2012-05-22 12:25 320856 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
2012-05-22 12:25 . 2012-05-22 12:25 166232 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2012-05-15 00:21 . 2012-05-15 00:21 423744 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-05-02 20:45 . 2012-05-02 20:45 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-05-02 19:07 . 2012-01-15 11:12 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-05-02 19:07 . 2012-01-15 11:12 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-04-24 21:31 . 2012-04-24 21:31 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-04-24 21:31 . 2012-04-24 21:31 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-24 21:31 . 2012-04-24 21:31 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-04-13 17:08 . 2011-12-09 14:24 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2011-12-20 22:31 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-14 17425584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer9"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-10-27 36328]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-02-15 99384]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-02 283200]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-11-17 32344]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ALSYSIO
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-08-15 7288424]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
"combofix"="c:\combofix\CF27207.3XE" [2009-07-14 344576]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default\
FF - prefs.js: browser.startup.homepage - http://www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3344855712-2548836808-2162885872-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:45,ef,af,33,c3,a5,c9,7d,8e,6f,88,28,44,a0,db,34,22,31,8f,f7,1c,ed,a9,
3a,d8,a7,0c,39,b0,5f,4f,15,02,74,2a,09,40,ef,70,8d,e9,4b,14,a0,86,70,c5,ef,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50
.
[HKEY_USERS\S-1-5-21-3344855712-2548836808-2162885872-1000\Software\SecuROM\License information*]
"datasecu"=hex:90,c5,c5,2a,1f,6f,f6,8d,31,a5,bc,0b,f7,63,d6,14,91,11,d9,68,6e,
2f,7b,c4,1f,51,2a,8e,27,e5,c0,aa,16,16,ea,3c,57,cc,42,03,7e,59,38,9e,e9,93,\
"rkeysecu"=hex:c9,3c,51,f8,c1,db,1f,cc,c5,8a,1e,ec,51,68,40,91
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe
.
**************************************************************************
.
Celkový čas: 2012-06-29 22:15:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-06-29 20:15
.
Před spuštěním: Volných bajtů: 87 760 162 816
Po spuštění: Volných bajtů: 88 252 690 432
.
- - End Of File - - 44ED8B6141087A0E9885967F9152539C

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Folder::
C:\Windows\assembly\temp\U

Regnull::
[HKEY_USERS\S-1-5-21-3344855712-2548836808-2162885872-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
[HKEY_USERS\S-1-5-21-3344855712-2548836808-2162885872-1000\Software\SecuROM\License information*]

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]

Reboot::

Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

PC už jede líp. Firewall je zapnutý, MSE taky. Procesy se uklidnili. Mám to ještě nějak dočistit?
Zde je log:

ComboFix 12-06-28.03 - Jarda 29.06.2012 23:03:49.7.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.8163.6533 [GMT 2:00]
Spuštěný z: c:\users\Jarda\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jarda\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\temp\U
c:\windows\assembly\temp\U\00000001.@
c:\windows\assembly\temp\U\00000002.$
c:\windows\assembly\temp\U\00000004.@
c:\windows\assembly\temp\U\000000c0.@
c:\windows\assembly\temp\U\000000cb.@
c:\windows\assembly\temp\U\000000cf.@
c:\windows\assembly\temp\U\80000000.@
c:\windows\assembly\temp\U\80000004.@
c:\windows\assembly\temp\U\80000064.$
c:\windows\assembly\temp\U\800000c0.@
c:\windows\assembly\temp\U\800000cb.@
c:\windows\assembly\temp\U\800000cf.@
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-28 do 2012-06-29 )))))))))))))))))))))))))))))))
.
.
2012-06-29 21:06 . 2012-06-29 21:06 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-06-29 21:06 . 2012-06-29 21:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-29 18:57 . 2012-06-29 18:57 -------- d-----w- C:\rsit
2012-06-29 18:39 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1490F043-FD7B-4463-8760-EBE293FCB75D}\mpengine.dll
2012-06-29 16:29 . 2010-08-11 05:13 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2012-06-29 16:29 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\SysWow64\UIRibbonRes.dll
2012-06-29 16:29 . 2010-08-11 05:19 3860992 ----a-w- c:\windows\system32\UIRibbon.dll
2012-06-29 16:29 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\SysWow64\UIRibbon.dll
2012-06-29 16:27 . 2012-06-29 16:42 -------- d-----w- c:\users\Jarda\AppData\Local\Windows Live
2012-06-29 16:27 . 2012-06-29 16:27 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2012-06-28 10:53 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-06-27 07:29 . 2012-06-14 22:20 85472 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2012-06-27 07:29 . 2012-06-14 22:20 157608 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2012-06-27 07:29 . 2012-06-14 22:20 113120 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice.exe
2012-06-27 07:29 . 2012-06-14 22:19 770384 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-27 07:29 . 2012-06-14 22:19 421200 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-24 10:44 . 2012-06-24 11:07 -------- d-----w- c:\program files (x86)\Batman Arkham City
2012-06-22 18:46 . 2012-06-22 18:47 -------- d-----w- c:\users\Jarda\AppData\Local\Darksiders
2012-06-22 18:18 . 2012-06-22 18:18 -------- d-----w- c:\program files (x86)\Darksiders
2012-06-21 12:31 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-21 12:31 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-21 12:31 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-21 12:31 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-21 12:31 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-21 12:31 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-21 12:31 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-21 12:31 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-21 12:31 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-14 16:27 . 2012-06-14 16:27 -------- d-----w- c:\users\Jarda\AppData\Roaming\runic games
2012-06-13 12:10 . 2012-05-02 05:32 208896 ----a-w- c:\windows\system32\profsvc.dll
2012-06-13 12:09 . 2012-04-07 12:18 3213824 ----a-w- c:\windows\system32\msi.dll
2012-06-13 12:09 . 2012-04-07 11:34 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2012-06-12 16:14 . 2012-02-10 12:24 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{067A2741-81AB-48A2-9102-9BB8314314CF}\gapaengine.dll
2012-06-10 10:29 . 2012-06-13 18:13 -------- d-----w- c:\users\Jarda\AppData\Roaming\DarknessII
2012-06-07 14:12 . 2012-06-27 22:37 -------- d-----w- c:\program files (x86)\Diablo III
2012-06-07 14:08 . 2012-06-07 14:11 -------- d-----w- c:\programdata\Battle.net
2012-06-03 11:43 . 2012-06-03 11:43 -------- d-----w- c:\programdata\Rockstar Games
2012-06-01 20:23 . 2012-06-01 20:23 -------- d--h--w- c:\windows\msdownld.tmp
2012-06-01 20:22 . 2012-06-21 19:08 -------- d-----w- c:\users\UpdatusUser
2012-06-01 20:21 . 2012-05-15 09:29 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-06-01 20:21 . 2012-05-15 09:29 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-06-01 20:21 . 2012-05-15 09:29 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-06-01 20:21 . 2012-05-15 09:29 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-06-01 20:21 . 2012-05-15 09:29 2621723 ----a-w- c:\windows\system32\nvcoproc.bin
2012-06-01 20:21 . 2012-05-15 09:29 3149632 ----a-w- c:\windows\system32\nvsvc64.dll
2012-06-01 20:21 . 2012-05-15 09:28 6151488 ----a-w- c:\windows\system32\nvcpl.dll
2012-06-01 17:40 . 2012-06-01 17:40 -------- d-----w- c:\users\Jarda\AppData\Local\LucasArts
2012-06-01 15:46 . 2012-06-01 15:46 -------- d-----w- c:\program files\Java
2012-06-01 09:53 . 2012-06-01 09:53 -------- d-----w- c:\users\Jarda\VirtualBox VMs
2012-06-01 09:53 . 2012-06-29 16:09 -------- d-----w- c:\users\Jarda\.VirtualBox
2012-06-01 09:53 . 2012-05-22 12:26 224088 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-06-01 09:52 . 2012-06-01 09:53 -------- dc----w- c:\windows\system32\DRVSTORE
2012-06-01 09:52 . 2012-05-22 12:26 130904 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2012-06-01 09:52 . 2012-06-01 09:52 -------- d-----w- c:\program files\Oracle
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-28 10:45 . 2012-03-22 20:29 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-28 10:45 . 2011-12-08 22:57 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-27 07:30 . 2012-01-05 11:20 955840 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-27 07:30 . 2012-01-05 11:20 839096 ----a-w- c:\windows\system32\deployJava1.dll
2012-05-30 06:17 . 2012-05-30 06:17 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-05-30 06:17 . 2012-05-30 06:17 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-05-22 12:26 . 2012-05-22 12:26 147288 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-05-22 12:26 . 2012-05-22 12:26 117080 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-05-22 12:25 . 2012-05-22 12:25 320856 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
2012-05-22 12:25 . 2012-05-22 12:25 166232 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2012-05-15 00:21 . 2012-05-15 00:21 423744 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-05-02 20:45 . 2012-05-02 20:45 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-05-02 19:07 . 2012-01-15 11:12 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-05-02 19:07 . 2012-01-15 11:12 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-04-24 21:31 . 2012-04-24 21:31 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-04-24 21:31 . 2012-04-24 21:31 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-24 21:31 . 2012-04-24 21:31 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-04-13 17:08 . 2011-12-09 14:24 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2011-12-20 22:31 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-29_20.10.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 04:46 . 2012-06-29 20:17 78720 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2012-06-29 20:09 . 2012-06-29 20:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-29 21:07 . 2012-06-29 21:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-06-29 20:09 . 2012-06-29 20:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-06-29 21:07 . 2012-06-29 21:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 02:36 . 2012-06-29 20:14 654278 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-06-29 18:36 654278 c:\windows\system32\perfh009.dat
- 2009-07-14 15:18 . 2012-06-29 18:36 668534 c:\windows\system32\perfh005.dat
+ 2009-07-14 15:18 . 2012-06-29 20:14 668534 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-06-29 20:14 122110 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-06-29 18:36 122110 c:\windows\system32\perfc009.dat
- 2009-07-14 15:18 . 2012-06-29 18:36 141130 c:\windows\system32\perfc005.dat
+ 2009-07-14 15:18 . 2012-06-29 20:14 141130 c:\windows\system32\perfc005.dat
+ 2012-06-29 20:09 . 2012-06-29 20:11 339048 c:\windows\system32\FNTCACHE.DAT
- 2009-07-14 05:01 . 2012-06-29 20:09 315588 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-06-29 21:06 315588 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-14 17425584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer9"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-14 160944]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-10-27 36328]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-02-15 99384]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-10-27 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 177640]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-02-15 203320]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-06-01 736104]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-02 283200]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S3 ALSysIO;ALSysIO;c:\users\Jarda\AppData\Local\Temp\ALSysIO64.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-11-17 32344]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
S3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys [2012-05-14 10568]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-08-15 7288424]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default\
FF - prefs.js: browser.startup.homepage - http://www.seznam.cz
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe
.
**************************************************************************
.
Celkový čas: 2012-06-29 23:12:41 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-06-29 21:12
ComboFix2.txt 2012-06-29 20:15
.
Před spuštěním: Volných bajtů: 88 305 049 600
Po spuštění: Volných bajtů: 88 054 140 928
.
- - End Of File - - 61A57EB4D6302FA972D11F9C5411AB0E

Log je již OK. Můžete ještě vyčistit od balastu CCleanerem: http://forum.viry.cz/viewtopic.php?f=46&t=7478 , příp. defragmentovat disk. CF odinstalujte přes startmenu>přík. řádek>(napsat) comobofix /uninstall>Enter.

Combofix odinstalován.
Tady dávám pro jistotu ještě poslední log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jarda at 2012-06-30 14:06:08
Microsoft Windows 7 Home Premium
System drive C: has 90 GB (19%) free of 477 GB
Total RAM: 8163 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:06:10, on 30.6.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jarda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-21-3344855712-2548836808-2162885872-1010\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3344855712-2548836808-2162885872-1010\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\nwprovau.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5797 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {7CBB2138-C82E-4B1B-8DA0-C585D956ECA1}
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Core Temp\Core Temp.exe"
"C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe" /s
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Microsoft Security Client\msseces.exe"
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/0/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="2196.1.33907643\1266830717" /prefetch:3
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/0/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="2196.2.920482593\319967530" /prefetch:3
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Hidden/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/0/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="2196.3.2056069261\1404248517" /prefetch:3
"C:\Users\Jarda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2196.4.1177866218\244281100" /prefetch:12
"C:\Users\Jarda\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml

C:\Users\Jarda\AppData\Roaming\Mozilla\Firefox\Profiles\bmqwkvg7.default\extensions\
battlefieldplay4free@ea.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-06-27 545192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-06-27 193456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-08-15 7288424]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-06-14 17425584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-04-04 462408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2012-01-29 249344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-06-29 23:40:27 ----D---- C:\Program Files (x86)\Electronic Arts
2012-06-29 23:12:42 ----D---- C:\Windows\temp
2012-06-29 23:12:41 ----A---- C:\ComboFix.txt
2012-06-29 23:07:42 ----SHD---- C:\$RECYCLE.BIN
2012-06-29 22:04:44 ----D---- C:\Windows\erdnt
2012-06-29 20:57:30 ----D---- C:\rsit
2012-06-29 18:29:12 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-06-29 18:29:12 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-06-29 18:29:11 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-06-29 18:29:11 ----A---- C:\Windows\system32\UIRibbon.dll
2012-06-27 09:30:25 ----A---- C:\Windows\system32\javaws.exe
2012-06-27 09:30:20 ----A---- C:\Windows\system32\javaw.exe
2012-06-27 09:30:20 ----A---- C:\Windows\system32\java.exe
2012-06-24 12:44:13 ----D---- C:\Program Files (x86)\Batman Arkham City
2012-06-22 20:18:43 ----D---- C:\Program Files (x86)\Darksiders
2012-06-21 22:26:48 ----A---- C:\Windows\AutoKMS.ini
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wups2.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wucltux.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-21 14:31:30 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wups.dll
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wudriver.dll
2012-06-21 14:31:20 ----A---- C:\Windows\system32\wuapi.dll
2012-06-21 14:31:09 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-21 14:31:09 ----A---- C:\Windows\system32\wuapp.exe
2012-06-14 18:27:32 ----D---- C:\Users\Jarda\AppData\Roaming\runic games
2012-06-13 14:11:18 ----A---- C:\Windows\SYSWOW64\url.dll
2012-06-13 14:11:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-06-13 14:11:18 ----A---- C:\Windows\system32\url.dll
2012-06-13 14:11:18 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-06-13 14:11:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\urlmon.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\ieui.dll
2012-06-13 14:11:17 ----A---- C:\Windows\system32\iertutil.dll
2012-06-13 14:11:16 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-06-13 14:11:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-06-13 14:11:16 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-13 14:11:15 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-06-13 14:11:15 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\wininet.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-13 14:11:15 ----A---- C:\Windows\system32\jscript9.dll
2012-06-13 14:11:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-06-13 14:11:14 ----A---- C:\Windows\system32\jscript.dll
2012-06-13 14:11:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-06-13 14:11:13 ----A---- C:\Windows\system32\mshtml.dll
2012-06-13 14:11:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-06-13 14:11:12 ----A---- C:\Windows\system32\ieframe.dll
2012-06-13 14:10:36 ----A---- C:\Windows\system32\profsvc.dll
2012-06-13 14:10:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-06-13 14:10:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-06-13 14:10:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-06-13 14:10:27 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-06-13 14:10:26 ----A---- C:\Windows\system32\rdpwsx.dll
2012-06-13 14:10:24 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-06-13 14:10:21 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-06-13 14:10:21 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-13 14:10:21 ----A---- C:\Windows\system32\crypt32.dll
2012-06-13 14:10:20 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-06-13 14:10:09 ----A---- C:\Windows\system32\win32k.sys
2012-06-13 14:10:01 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-13 14:09:52 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-06-13 14:09:52 ----A---- C:\Windows\system32\msi.dll
2012-06-10 12:29:15 ----D---- C:\Users\Jarda\AppData\Roaming\DarknessII
2012-06-07 16:12:34 ----D---- C:\Program Files (x86)\Diablo III
2012-06-07 16:08:49 ----D---- C:\ProgramData\Battle.net
2012-06-03 13:43:38 ----D---- C:\ProgramData\Rockstar Games
2012-06-01 22:23:35 ----HD---- C:\Windows\msdownld.tmp
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvvsvc.exe
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvsvcr.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvsvc64.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvshext.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvmctray.dll
2012-06-01 22:21:11 ----A---- C:\Windows\system32\nvcpl.dll
2012-06-01 22:20:58 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-06-01 22:20:58 ----A---- C:\Windows\system32\OpenCL.dll
2012-06-01 22:20:54 ----D---- C:\ProgramData\NVIDIA Corporation
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-06-01 22:20:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvumdshimx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvoglv64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvinitx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvhdap64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvgenco64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvdispco64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvdecodemft.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuvid.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcuda.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvcompiler.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\nvapi64.dll
2012-06-01 22:20:18 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-06-01 22:20:18 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2012-06-01 17:46:03 ----D---- C:\Program Files\Java
2012-06-01 11:53:04 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2012-06-01 11:52:49 ----DC---- C:\Windows\system32\DRVSTORE
2012-06-01 11:52:49 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2012-06-01 11:52:46 ----D---- C:\Program Files\Oracle

======List of files/folders modified in the last 1 month======

2012-06-30 14:06:10 ----D---- C:\Program Files\trend micro
2012-06-30 14:05:43 ----D---- C:\Windows\System32
2012-06-30 14:05:43 ----D---- C:\Windows\Logs
2012-06-30 14:05:43 ----D---- C:\Windows\inf
2012-06-30 14:05:43 ----D---- C:\Windows
2012-06-30 14:05:43 ----D---- C:\Users\Jarda\AppData\Roaming\DAEMON Tools Lite
2012-06-30 14:03:48 ----D---- C:\Windows\Prefetch
2012-06-30 14:03:46 ----SHD---- C:\System Volume Information
2012-06-30 14:02:26 ----D---- C:\Windows\system32\drivers
2012-06-30 13:57:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-30 13:56:01 ----D---- C:\Windows\system32\config
2012-06-30 13:53:59 ----D---- C:\Users\Jarda\AppData\Roaming\Skype
2012-06-30 13:53:08 ----D---- C:\Program Files\Core Temp
2012-06-30 13:52:54 ----D---- C:\ProgramData\NVIDIA
2012-06-30 02:46:17 ----D---- C:\Windows\system32\Tasks
2012-06-30 02:46:16 ----D---- C:\Users\Jarda\AppData\Roaming\uTorrent
2012-06-30 02:08:28 ----D---- C:\Program Files (x86)\MSI Afterburner
2012-06-30 01:21:38 ----D---- C:\Program Files (x86)\The KMPlayer
2012-06-30 01:20:50 ----RD---- C:\Program Files (x86)
2012-06-30 00:47:10 ----D---- C:\Windows\system32\catroot2
2012-06-29 23:45:21 ----SHD---- C:\Windows\Installer
2012-06-29 23:39:53 ----RSD---- C:\Windows\assembly
2012-06-29 23:35:35 ----D---- C:\DOWNLOAD
2012-06-29 23:07:40 ----A---- C:\Windows\system.ini
2012-06-29 23:07:34 ----D---- C:\Windows\system32\drivers\etc
2012-06-29 23:05:13 ----D---- C:\Windows\SYSWOW64\drivers
2012-06-29 23:05:13 ----D---- C:\Windows\SysWOW64
2012-06-29 23:05:13 ----D---- C:\Windows\AppPatch
2012-06-29 23:05:13 ----D---- C:\Program Files\Common Files
2012-06-29 23:05:13 ----D---- C:\Program Files (x86)\Common Files
2012-06-29 20:51:53 ----D---- C:\Program Files (x86)\Steam
2012-06-29 19:03:57 ----D---- C:\Windows\winsxs
2012-06-29 18:53:40 ----SD---- C:\ProgramData\Microsoft
2012-06-29 18:53:19 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-06-29 18:53:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-06-29 18:52:10 ----RD---- C:\Program Files (x86)\Skype
2012-06-29 18:52:10 ----D---- C:\ProgramData\Skype
2012-06-29 18:29:14 ----D---- C:\Windows\system32\catroot
2012-06-28 12:45:13 ----D---- C:\Windows\Tasks
2012-06-28 12:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-06-27 13:16:11 ----D---- C:\Program Files (x86)\World of Warcraft 3.3.5
2012-06-27 09:30:17 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-06-27 09:30:17 ----A---- C:\Windows\system32\deployJava1.dll
2012-06-27 09:29:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-06-27 09:28:04 ----D---- C:\Program Files\CCleaner
2012-06-25 23:26:20 ----D---- C:\Program Files (x86)\World of Warcraft 4.0.6
2012-06-25 23:15:29 ----D---- C:\Windows\system32\NDF
2012-06-25 22:44:24 ----D---- C:\Windows\rescache
2012-06-25 20:46:58 ----D---- C:\Windows\system32\cs-CZ
2012-06-24 01:11:27 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-06-19 21:05:28 ----D---- C:\Program Files (x86)\Mass Effect 3
2012-06-18 23:07:33 ----D---- C:\Windows\debug
2012-06-15 22:59:58 ----D---- C:\Program Files\WinRAR
2012-06-14 16:55:00 ----D---- C:\Windows\Microsoft.NET
2012-06-14 00:02:43 ----D---- C:\Windows\SYSWOW64\migration
2012-06-14 00:02:43 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-06-14 00:02:43 ----D---- C:\Windows\system32\migration
2012-06-14 00:02:43 ----D---- C:\Program Files\Internet Explorer
2012-06-14 00:02:43 ----D---- C:\Program Files (x86)\Internet Explorer
2012-06-13 14:20:13 ----D---- C:\ProgramData\Microsoft Help
2012-06-13 14:16:39 ----A---- C:\Windows\system32\MRT.exe
2012-06-11 23:29:51 ----D---- C:\Program Files (x86)\FreeRapid-0.86u1
2012-06-10 00:57:00 ----AD---- C:\ProgramData
2012-06-09 01:07:08 ----D---- C:\ProgramData\Codemasters
2012-06-09 00:02:54 ----D---- C:\ProgramData\Tunngle
2012-06-08 23:21:04 ----D---- C:\Program Files (x86)\Tunngle
2012-06-08 23:21:01 ----D---- C:\Users\Jarda\AppData\Roaming\Tunngle
2012-06-07 19:46:15 ----D---- C:\Users\Jarda\AppData\Roaming\.minecraft
2012-06-03 14:10:30 ----D---- C:\Program Files (x86)\Rockstar Games
2012-06-01 22:23:43 ----D---- C:\Windows\SYSWOW64\directx
2012-06-01 22:22:10 ----RD---- C:\Users
2012-06-01 22:22:09 ----D---- C:\Program Files\NVIDIA Corporation
2012-06-01 22:22:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-06-01 22:22:02 ----D---- C:\Windows\system32\DriverStore
2012-06-01 22:21:07 ----D---- C:\Windows\Help
2012-06-01 17:46:03 ----RD---- C:\Program Files
2012-06-01 17:15:56 ----D---- C:\Windows\SoftwareDistribution
2012-06-01 11:34:09 ----D---- C:\Users\Jarda\AppData\Roaming\CorsixTH

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-02 283200]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-03-13 88480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-03-13 46400]
R3 ALSysIO;ALSysIO; \??\C:\Users\Jarda\AppData\Local\Temp\ALSysIO64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
R3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2012-05-14 10568]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-10-27 36328]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2012-02-16 99384]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-10-27 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 177640]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2011-10-27 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2011-10-27 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2011-10-27 172104]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2012-02-16 203320]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-06-14 160944]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-05-01 489256]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-06-01 736104]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Máte čisto.

Děkuji moc. PC jede zase jako předtím.

Rádo se stalo!