VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Fjodor at 2012-08-17 16:42:53
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 18 GB (6%) free of 305 GB
Total RAM: 3071 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:43:18, on 17.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Inbox Toolbar\Inbox.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\HTC Home\Clock.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iTV\iTV.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Users\Fjodor\APPDATA\LOCAL\TEMP\wz39f2\DesktopOK.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fjodor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\IELowutil.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Fjodor\Downloads\Programs\RSIT_2.exe
C:\Program Files\trend micro\Fjodor.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - mscoree.dll (file missing)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [InboxToolbar] "C:\Program Files\Inbox Toolbar\Inbox.exe" /STARTUP
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Clock Widget (HTC Home)] "C:\Program Files\HTC Home\Clock.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [iTV] C:\Program Files\iTV\iTV.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-21-3444113751-2294134068-3891119924-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3444113751-2294134068-3891119924-1003\..\Run: [Google Update] "C:\Users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe" /c (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3444113751-2294134068-3891119924-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{51F71F3F-127E-4191-98DC-9EE95C94CCB2}: NameServer = 8.8.4.4,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{70D36FB9-6BBE-4461-A1C6-805F63E5683B}: NameServer = 194.228.41.65,194.228.41.113
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5A90B2E-1C63-4B52-8C04-1E813223E668}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\..\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NitroPDFDriverCreatorReadSpool2 (NitroDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Realtek11nSU - Realtek - C:\Program Files\Realtek\Wireless LAN Utility\RtlService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

--
End of file - 14681 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\DriverEasy Scheduled Scan.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDM integration (IDMIEHlprObj Class) - C:\Program Files\Internet Download Manager\IDMIECC.dll [2012-08-09 226776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}]
AVG Do Not Track - C:\Program Files\AVG\AVG2012\avgdtiex.dll [2012-06-13 937592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2012-06-24 1417336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}]
IEExtension.VDownloaderBHO - C:\Windows\system32\mscoree.dll [2010-11-05 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll [2012-07-09 2074208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-08-12 192144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2012-07-12 1027816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D7E97865-918F-41E4-9CD0-25AB1C574CE8} - &Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2012-07-12 1027816]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-08-12 192144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-07-09 1107552]
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10 1313640]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-04-05 2587008]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2010-07-04 17408]
"SDTray"=C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [2012-07-04 3921432]
"InboxToolbar"=C:\Program Files\Inbox Toolbar\Inbox.exe [2012-07-12 1641192]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01 1821576]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2012-08-09 3519936]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Clock Widget (HTC Home)"=C:\Program Files\HTC Home\Clock.exe [2011-11-28 2036736]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-07-10 1022352]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"iTV"=C:\Program Files\iTV\iTV.exe [2012-08-04 685568]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2012-04-26 3111744]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2012-08-12 39408]
"Google Update"=C:\Users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 116648]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"vidc.dvsd"=pdvcodec.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-08-17 07:38:50 ----D---- C:\Program Files\Xirrus
2012-08-17 07:38:21 ----D---- C:\Users\Fjodor\AppData\Roaming\Xirrus
2012-08-17 03:01:41 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-08-17 03:01:08 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-17 03:01:08 ----A---- C:\Windows\system32\ieui.dll
2012-08-17 03:01:08 ----A---- C:\Windows\system32\iertutil.dll
2012-08-17 03:01:07 ----A---- C:\Windows\system32\wininet.dll
2012-08-17 03:01:07 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-17 03:01:07 ----A---- C:\Windows\system32\jscript9.dll
2012-08-17 03:01:07 ----A---- C:\Windows\system32\jscript.dll
2012-08-17 03:01:07 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-17 03:01:06 ----A---- C:\Windows\system32\urlmon.dll
2012-08-17 03:01:06 ----A---- C:\Windows\system32\url.dll
2012-08-17 03:01:05 ----A---- C:\Windows\system32\mshtml.dll
2012-08-17 03:01:04 ----A---- C:\Windows\system32\ieframe.dll
2012-08-17 03:00:47 ----SHD---- C:\Windows\system32\%APPDATA%
2012-08-16 03:45:38 ----A---- C:\Windows\system32\srcore.dll
2012-08-16 03:45:37 ----A---- C:\Windows\system32\win32k.sys
2012-08-16 03:45:36 ----A---- C:\Windows\system32\win32spl.dll
2012-08-16 03:45:36 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-16 03:45:33 ----A---- C:\Windows\system32\netapi32.dll
2012-08-16 03:45:33 ----A---- C:\Windows\system32\browser.dll
2012-08-16 03:45:33 ----A---- C:\Windows\system32\browcli.dll
2012-08-16 03:45:32 ----A---- C:\Windows\system32\localspl.dll
2012-08-15 20:16:08 ----D---- C:\Users\Fjodor\AppData\Roaming\Media Player Classic
2012-08-15 17:53:43 ----D---- C:\Program Files\WinPcap
2012-08-15 17:51:06 ----D---- C:\ProgramData\Freemake
2012-08-15 17:50:47 ----D---- C:\Program Files\Freemake
2012-08-15 00:11:36 ----D---- C:\ProgramData\Movavi Video Suite 10 SE
2012-08-14 23:56:16 ----D---- C:\Program Files\MPC-HC
2012-08-14 18:36:08 ----D---- C:\Users\Fjodor\AppData\Roaming\Xilisoft
2012-08-14 18:32:26 ----D---- C:\ProgramData\Xilisoft
2012-08-14 18:32:26 ----D---- C:\Program Files\Xilisoft
2012-08-14 18:18:06 ----D---- C:\Users\Fjodor\AppData\Roaming\MOVAVI
2012-08-13 17:00:28 ----D---- C:\Users\Fjodor\AppData\Roaming\AnvSoft
2012-08-13 16:58:39 ----D---- C:\Program Files\AnvSoft
2012-08-13 06:26:16 ----D---- C:\Users\Fjodor\AppData\Roaming\Nitro PDF
2012-08-13 06:25:38 ----A---- C:\Windows\system32\nitrolocalui2.dll
2012-08-13 06:25:38 ----A---- C:\Windows\system32\nitrolocalmon2.dll
2012-08-13 06:25:24 ----D---- C:\Program Files\Common Files\Nitro PDF
2012-08-13 06:25:23 ----D---- C:\ProgramData\Nitro PDF
2012-08-13 06:25:23 ----D---- C:\Program Files\Nitro PDF
2012-08-13 06:24:54 ----D---- C:\Users\Fjodor\AppData\Roaming\Downloaded Installations
2012-08-12 14:12:10 ----D---- C:\Users\Fjodor\AppData\Roaming\Google
2012-08-12 14:11:14 ----D---- C:\ProgramData\Google
2012-08-12 14:10:46 ----D---- C:\Program Files\Google
2012-08-12 13:25:49 ----A---- C:\Windows\system32\msvcr71.dll
2012-08-12 13:25:49 ----A---- C:\Windows\system32\mfc71.dll
2012-08-12 13:25:49 ----A---- C:\Windows\system32\gdiplus.dll
2012-08-12 11:39:47 ----HD---- C:\$AVG
2012-08-12 09:32:47 ----A---- C:\Windows\system32\Rtlihvs.dll
2012-08-12 09:32:47 ----A---- C:\Windows\system32\RTLExtUI.dll
2012-08-12 09:32:47 ----A---- C:\Windows\RtlUI2.exe
2012-08-12 09:21:27 ----D---- C:\Program Files\Ekahau
2012-08-12 07:46:11 ----D---- C:\Users\Fjodor\AppData\Roaming\GMap.NET
2012-08-09 11:45:29 ----A---- C:\Windows\system32\drivers\idmwfp.sys
2012-08-08 20:53:14 ----A---- C:\Windows\system32\NLSSRV32.EXE
2012-08-08 04:28:33 ----A---- C:\Windows\system32\nvoglv32.dll
2012-08-08 04:28:33 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-08-08 04:28:32 ----A---- C:\Windows\system32\nvcuvid.dll
2012-08-08 04:28:32 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-08-08 04:28:32 ----A---- C:\Windows\system32\nvcuda.dll
2012-08-08 04:28:31 ----A---- C:\Windows\system32\nvcompiler.dll
2012-08-08 04:23:04 ----D---- C:\Program Files\Microsoft IntelliPoint
2012-08-08 04:21:31 ----D---- C:\Program Files\Belkin
2012-08-08 04:21:07 ----D---- C:\Windows\{B251C9DD-FCEA-4039-966F-B989C65D2302}
2012-08-07 18:43:37 ----D---- C:\Users\Fjodor\AppData\Roaming\Easeware
2012-08-07 18:43:32 ----D---- C:\Program Files\Easeware
2012-08-06 19:12:53 ----D---- C:\Temp
2012-08-05 10:40:51 ----D---- C:\Program Files\MediaInfo
2012-08-04 21:47:42 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-08-04 21:47:37 ----D---- C:\Program Files\DAEMON Tools Pro
2012-08-04 16:30:27 ----D---- C:\ProgramData\4Videosoft Studio
2012-08-04 09:17:30 ----D---- C:\Program Files\CCleaner
2012-08-04 08:41:04 ----D---- C:\Users\Fjodor\AppData\Roaming\Yandex
2012-08-04 08:41:03 ----D---- C:\Users\Fjodor\AppData\Roaming\Opera
2012-08-04 06:14:32 ----D---- C:\Users\Fjodor\AppData\Roaming\avidemux
2012-08-01 19:29:57 ----D---- C:\Users\Fjodor\AppData\Roaming\YouTube Downloader
2012-08-01 19:29:05 ----D---- C:\Program Files\YTD
2012-08-01 18:39:58 ----D---- C:\Users\Fjodor\AppData\Roaming\VDownloader
2012-08-01 18:39:53 ----A---- C:\Program Files\Common Files\WinPcapNmap.exe
2012-08-01 05:06:17 ----D---- C:\Program Files\Inbox Toolbar
2012-07-31 18:13:47 ----D---- C:\Program Files\Common Files\eBay
2012-07-31 17:48:42 ----D---- C:\Program Files\Common Files\Nero
2012-07-31 17:41:56 ----A---- C:\Windows\system32\drivers\NBVolUp.sys
2012-07-31 17:41:45 ----A---- C:\Windows\system32\drivers\NBVol.sys
2012-07-31 17:41:44 ----D---- C:\Program Files\Nero
2012-07-30 18:19:17 ----D---- C:\Program Files\DNS Jumper
2012-07-30 18:16:53 ----D---- C:\ProgramData\Ask
2012-07-30 17:49:05 ----N---- C:\Windows\system32\sdnclean.exe
2012-07-30 17:49:02 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2012-07-30 04:17:30 ----D---- C:\rsit
2012-07-29 22:05:28 ----N---- C:\Windows\system32\RTSUSTORicon.dll
2012-07-29 21:40:40 ----D---- C:\ProgramData\Tarma Installer
2012-07-29 21:40:34 ----D---- C:\Users\Fjodor\AppData\Roaming\Mozilla
2012-07-29 21:36:36 ----D---- C:\ProgramData\PassMark
2012-07-29 21:36:36 ----D---- C:\Program Files\WirelessMon
2012-07-29 20:45:16 ----N---- C:\Windows\system32\drivers\RtsUStor.sys
2012-07-29 20:45:16 ----N---- C:\Windows\system32\drivers\RtsUIr.sys
2012-07-29 20:45:16 ----N---- C:\Windows\system32\drivers\RtsUCcid.sys
2012-07-29 20:36:08 ----D---- C:\ProgramData\Atheros Driver
2012-07-29 19:42:02 ----D---- C:\ProgramData\AVG
2012-07-29 19:25:36 ----SHD---- C:\Config.Msi
2012-07-29 16:42:20 ----D---- C:\ProgramData\SuperOvladac
2012-07-29 14:33:03 ----D---- C:\Windows\temp
2012-07-29 14:25:21 ----D---- C:\Windows\erdnt
2012-07-29 13:44:17 ----D---- C:\Program Files\trend micro

======List of files/folders modified in the last 1 month======

2012-08-17 16:43:15 ----AD---- C:\ProgramData\TEMP
2012-08-17 16:42:50 ----D---- C:\Windows\system32\drivers
2012-08-17 16:24:02 ----D---- C:\Users\Fjodor\AppData\Roaming\IDM
2012-08-17 16:14:17 ----D---- C:\Windows\inf
2012-08-17 16:06:37 ----D---- C:\Users\Fjodor\AppData\Roaming\DMCache
2012-08-17 15:52:22 ----D---- C:\Users\Fjodor\AppData\Roaming\uTorrent
2012-08-17 15:49:34 ----D---- C:\Windows\debug
2012-08-17 15:49:34 ----AD---- C:\Windows
2012-08-17 15:48:10 ----D---- C:\Windows\system32\catroot2
2012-08-17 15:46:05 ----D---- C:\Windows\System32
2012-08-17 15:45:37 ----SHD---- C:\System Volume Information
2012-08-17 14:02:07 ----D---- C:\Windows\system32\wdi
2012-08-17 12:32:20 ----D---- C:\ProgramData\MFAData
2012-08-17 11:30:23 ----D---- C:\Users\Fjodor\AppData\Roaming\eM Client
2012-08-17 07:49:13 ----D---- C:\Windows\system32\config
2012-08-17 07:39:14 ----SHD---- C:\Windows\Installer
2012-08-17 07:39:05 ----D---- C:\Windows\winsxs
2012-08-17 07:38:50 ----RD---- C:\Program Files
2012-08-17 06:33:12 ----D---- C:\Windows\Prefetch
2012-08-17 05:58:27 ----D---- C:\Program Files\iTV
2012-08-17 05:53:08 ----D---- C:\Program Files\HTC Home
2012-08-17 03:25:26 ----D---- C:\ProgramData\NVIDIA
2012-08-17 03:23:36 ----RSD---- C:\Windows\Fonts
2012-08-17 03:23:35 ----D---- C:\Windows\system32\migration
2012-08-17 03:23:35 ----D---- C:\Windows\system32\DriverStore
2012-08-17 03:23:35 ----D---- C:\Program Files\Internet Explorer
2012-08-17 03:03:44 ----A---- C:\Windows\system32\MRT.exe
2012-08-17 03:03:29 ----D---- C:\ProgramData\Microsoft Help
2012-08-17 03:01:45 ----D---- C:\Windows\system32\catroot
2012-08-17 00:32:57 ----D---- C:\Windows\system32\drivers\AVG
2012-08-15 19:02:32 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-08-15 17:51:06 ----HD---- C:\ProgramData
2012-08-15 17:08:12 ----D---- C:\ProgramData\AVG2012
2012-08-15 17:07:54 ----D---- C:\Program Files\Internet Download Manager
2012-08-15 00:05:38 ----D---- C:\Program Files\Windows Sidebar
2012-08-15 00:04:55 ----D---- C:\Windows\LiveKernelReports
2012-08-14 18:32:27 ----D---- C:\Program Files\Common Files
2012-08-12 17:38:43 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-08-12 17:03:27 ----D---- C:\Windows\system32\Tasks
2012-08-12 16:59:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-08-12 15:20:09 ----D---- C:\Windows\Tasks
2012-08-12 09:54:34 ----D---- C:\Windows\system32\NDF
2012-08-12 09:29:35 ----D---- C:\Windows\system32\wfp
2012-08-12 09:29:34 ----D---- C:\Windows\system32\wbem
2012-08-12 09:28:18 ----D---- C:\Windows\system32\CodeIntegrity
2012-08-12 09:28:17 ----D---- C:\Users\Fjodor\AppData\Roaming\GHISLER
2012-08-12 09:28:11 ----D---- C:\Windows\registration
2012-08-12 09:28:04 ----SD---- C:\Users\Fjodor\AppData\Roaming\Microsoft
2012-08-08 04:29:01 ----D---- C:\Program Files\NVIDIA Corporation
2012-08-08 04:21:33 ----HD---- C:\Program Files\InstallShield Installation Information
2012-08-07 18:26:12 ----D---- C:\ProgramData\Creative
2012-08-06 21:08:22 ----D---- C:\Windows\system32\drivers\UMDF
2012-08-06 21:07:05 ----D---- C:\Windows\AppCompat
2012-08-06 21:07:04 ----D---- C:\Program Files\Common Files\AVG Secure Search
2012-08-04 23:44:49 ----D---- C:\Program Files\Adobe
2012-08-04 23:27:54 ----D---- C:\ProgramData\DAEMON Tools Pro
2012-08-04 09:09:34 ----D---- C:\Program Files\Unlocker
2012-08-04 08:41:03 ----D---- C:\Program Files\AVG Secure Search
2012-08-04 06:59:36 ----D---- C:\Windows\Logs
2012-08-01 18:42:57 ----RSD---- C:\Windows\assembly
2012-07-31 17:41:56 ----DC---- C:\Windows\system32\DRVSTORE
2012-07-31 17:13:26 ----D---- C:\ProgramData\Pinnacle
2012-07-30 18:14:57 ----D---- C:\Users\Fjodor\AppData\Roaming\Creative
2012-07-30 17:58:35 ----D---- C:\Program Files\Spybot - Search & Destroy
2012-07-30 17:49:09 ----SD---- C:\ProgramData\Microsoft
2012-07-29 22:04:54 ----D---- C:\Program Files\Realtek
2012-07-29 19:26:22 ----D---- C:\Windows\SoftwareDistribution
2012-07-29 19:21:16 ----D---- C:\Windows\system32\drivers\etc
2012-07-29 19:21:06 ----D---- C:\Program Files\The KMPlayer
2012-07-29 19:21:06 ----D---- C:\Program Files\PlatinumHideIP
2012-07-29 19:20:43 ----SHD---- C:\$Recycle.Bin
2012-07-29 19:20:01 ----RD---- C:\Users
2012-07-29 19:19:58 ----D---- C:\Users\Fjodor\AppData\Roaming\Nokia Suite
2012-07-29 19:19:58 ----D---- C:\Users\Fjodor\AppData\Roaming\Nokia
2012-07-29 19:19:58 ----D---- C:\Users\Fjodor\AppData\Roaming\Nero
2012-07-29 19:19:25 ----D---- C:\ProgramData\PC Suite
2012-07-29 19:19:25 ----D---- C:\ProgramData\NokiaInstallerCache
2012-07-29 19:19:24 ----D---- C:\ProgramData\Nokia
2012-07-29 19:19:24 ----D---- C:\ProgramData\Nero
2012-07-29 19:19:19 ----D---- C:\ProgramData\Adobe
2012-07-29 19:19:19 ----D---- C:\Program Files\Zoner
2012-07-29 19:19:04 ----D---- C:\Program Files\PC Connectivity Solution
2012-07-29 19:19:04 ----D---- C:\Program Files\Oracle
2012-07-29 19:19:02 ----D---- C:\Program Files\Nokia
2012-07-29 19:17:12 ----D---- C:\Program Files\MKVToolNix
2012-07-29 19:17:11 ----D---- C:\Program Files\Java
2012-07-29 19:17:11 ----D---- C:\Program Files\eM Client
2012-07-29 19:17:09 ----D---- C:\Program Files\DIFX
2012-07-29 19:17:06 ----D---- C:\Program Files\Common Files\Pinnacle
2012-07-29 19:17:06 ----D---- C:\Program Files\Common Files\Nokia
2012-07-29 19:17:06 ----D---- C:\Program Files\Common Files\Java
2012-07-29 19:17:06 ----D---- C:\Program Files\Common Files\Deterministic Networks
2012-07-29 19:17:06 ----D---- C:\Program Files\Common Files\Adobe
2012-07-29 19:17:06 ----D---- C:\Program Files\Cisco Systems

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2011-05-19 103512]
R0 NBVol;Nero Backup Volume Filter Driver; C:\Windows\system32\DRIVERS\NBVol.sys [2011-07-13 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; C:\Windows\system32\DRIVERS\NBVolUp.sys [2011-07-13 12464]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2011-05-23 47968]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2011-12-23 41040]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2012-03-19 301248]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-04 242240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\Windows\system32\Drivers\CVPNDRVA.sys [2010-09-27 308859]
R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2012-08-02 97632]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]
R3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-02-20 522280]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-02-20 152616]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2012-02-20 175144]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-02-20 33832]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-02-20 18728]
R3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [2011-05-20 171096]
R3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2011-05-20 511064]
R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2011-05-20 528344]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [2011-05-20 1324120]
R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [2011-05-20 72792]
R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2011-05-20 14424]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2011-05-20 158808]
R3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2011-08-10 45288]
R3 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne2000.sys [2008-11-16 131984]
R3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
R3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2011-05-20 95832]
R3 ha20x2k;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [2011-05-20 1178200]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 netr28u;Belkin USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr28u.sys [2009-08-05 750592]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 62336]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 141440]
R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2011-05-20 130136]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point32.sys [2011-08-01 40936]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtl8187.sys [2010-01-07 375808]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 anvsnddrv;AnvSoft Virtual Sound Device; C:\Windows\system32\drivers\anvsnddrv.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [2011-05-20 171096]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\Windows\system32\drivers\ctdvda2k.sys [2011-05-20 347144]
S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [2011-05-20 1324120]
S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [2011-05-20 72792]
S3 CVirtA;Cisco Systems VPN Adapter; C:\Windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-04-22 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RSUSBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys [2009-08-10 44032]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-08-19 173056]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TVICHW32;TVICHW32; \??\C:\Windows\system32\DRIVERS\TVICHW32.SYS [2012-06-24 23600]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S4 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2012\avgfws.exe [2012-06-13 2321560]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\avgidsagent.exe [2012-07-04 5160568]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-02-19 775968]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [2010-09-27 1528616]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-06-18 96768]
R2 FreemakeVideoCapture;FreemakeVideoCapture; C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe [2012-06-18 8704]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2011-11-25 687400]
R2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2; C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe [2012-08-08 184840]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\system32\NLSSRV32.EXE [2012-08-08 69640]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 645440]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
R2 Realtek11nSU;Realtek11nSU; C:\Program Files\Realtek\Wireless LAN Utility\RtlService.exe [2010-04-16 36864]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-07-04 1188896]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-07-04 1395736]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-03-22 166528]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
R2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-09 935008]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-04-22 720936]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-12 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-15 250056]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-12 116648]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-12 194032]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-06-24 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím, v první řadě přes Odebrat programy odinstaluj Spybot - SD který je už za zenitem.


Tohle fixni v HJT :

O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - mscoree.dll (file missing)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-21-3444113751-2294134068-3891119924-1003\..\Run: [Google Update] "C:\Users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe" /c (User 'UpdatusUser')

HJT najdeš zde :

C:\Program Files\trend micro\Fjodor.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)

Služba Google Update (gupdatem)

Google Software Updater (gusvc)

NVIDIA Update Service Daemon

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

Malwarebytes Anti-Malware (PRO) 1.62.0.1300
www.malwarebytes.org

Verze databáze: v2012.08.18.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Fjodor :: SNEZNIK [administrátor]

Ochrana: Povolena

18.8.2012 13:39:03
mbam-log-2012-08-18 (13-39-03).txt

Typ: Úplná kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 305879
Uplynulý čas: 35 minut, 58 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Zde nic, tak že jdeme dál.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

ComboFix 12-08-18.03 - Fjodor 19.08.2012 8:47.1.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3071.1500 [GMT 2:00]
Spuštěný z: c:\users\Fjodor\Desktop\ComboFix.exe
AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Internet Security 2012 *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\WinPCap
c:\programdata\Amazon.ico
c:\programdata\MercadoLivre.ico
c:\users\Fjodor\AppData\Local\Temp\radD714A.tmp\bin\x86\sharpwrapi_Win32.dll
c:\users\Fjodor\AppData\Local\Temp\radE98A2.tmp\bin\Gadget.Interop.dll
c:\users\Fjodor\Desktop\weather.lnk
c:\users\UpdatusUser\Desktop\weather.lnk
c:\windows\iun6002.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\Packet.dll
c:\windows\system32\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-19 06:56 . 2012-08-19 07:00 -------- d-----w- c:\users\Fjodor\AppData\Local\temp
2012-08-19 06:56 . 2012-08-19 06:56 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-08-19 06:56 . 2012-08-19 06:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-19 06:22 . 2012-08-19 06:22 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AccurateRip
2012-08-19 06:17 . 2012-08-19 06:17 -------- d-----w- c:\program files\Illustrate
2012-08-19 05:45 . 2012-08-19 06:22 6908648 ----a-w- c:\windows\system32\SpoonUninstall.exe
2012-08-19 05:38 . 2011-06-24 10:48 48128 ----a-w- c:\windows\system32\ff_acm.acm
2012-08-19 05:31 . 2012-08-19 05:31 -------- d-----w- c:\program files\Haali
2012-08-19 05:30 . 2012-08-19 05:31 -------- d-----w- c:\program files\AviSynth 2.5
2012-08-19 05:30 . 2011-06-24 10:48 74752 ----a-w- c:\windows\system32\ff_vfw.dll
2012-08-19 05:24 . 2012-08-19 05:25 -------- d-----w- c:\program files\smartdl
2012-08-19 05:21 . 2012-08-19 05:21 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Twan Wintjes
2012-08-19 05:20 . 2012-08-19 05:20 -------- d-----w- c:\users\Fjodor\AVCHDCoder
2012-08-19 05:19 . 2012-08-19 05:20 -------- d-----w- c:\program files\AVCHDCoder
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Broad Intelligence
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\program files\MediaCoder
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AVCWare
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\program files\AVCWare
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\programdata\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-18 11:33 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-18 07:45 . 2012-08-18 07:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\xrecode2
2012-08-18 07:45 . 2012-08-18 07:45 -------- d-----w- c:\program files\xrecode II
2012-08-18 07:39 . 2012-08-18 14:06 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Media Player Classic
2012-08-18 07:38 . 2012-08-18 07:38 -------- d-----w- c:\program files\Combined Community Codec Pack
2012-08-18 07:27 . 2012-08-18 07:32 -------- d-----w- c:\programdata\Win7codecs
2012-08-18 05:44 . 2012-08-18 06:41 -------- d-----w- c:\program files\The KMPlayer
2012-08-18 05:34 . 2012-08-18 05:34 -------- d-----w- c:\program files\Cisco Systems
2012-08-17 05:53 . 2012-08-17 05:53 -------- d-----w- c:\users\Fjodor\AppData\Local\quicklz.com_outssider
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\program files\Xirrus
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xirrus
2012-08-17 01:02 . 2012-08-17 01:02 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-08-17 01:00 . 2012-08-17 01:00 -------- d-sh--w- c:\windows\system32\%APPDATA%
2012-08-16 23:26 . 2012-08-16 23:26 207292 ----a-w- C:\torrent.exe
2012-08-16 01:45 . 2012-05-05 07:46 400896 ----a-w- c:\windows\system32\srcore.dll
2012-08-16 01:45 . 2012-07-18 17:47 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-08-16 01:45 . 2012-02-11 05:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-08-16 01:45 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-16 01:45 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-16 01:45 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-16 01:45 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-08-15 15:51 . 2012-08-15 15:58 -------- d-----w- c:\programdata\Freemake
2012-08-15 15:50 . 2012-08-15 15:58 -------- d-----w- c:\program files\Freemake
2012-08-14 22:11 . 2012-08-14 22:11 -------- d-----w- c:\programdata\Movavi Video Suite 10 SE
2012-08-14 21:56 . 2012-08-18 07:34 -------- d-----w- c:\program files\MPC-HC
2012-08-14 16:36 . 2012-08-14 16:36 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\programdata\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\program files\Xilisoft
2012-08-14 16:18 . 2012-08-14 16:18 -------- d-----w- c:\users\Fjodor\AppData\Roaming\MOVAVI
2012-08-13 15:00 . 2012-08-13 15:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AnvSoft
2012-08-13 14:58 . 2012-08-13 14:58 -------- d-----w- c:\program files\AnvSoft
2012-08-13 04:26 . 2012-08-13 14:54 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Nitro PDF
2012-08-13 04:25 . 2012-08-08 18:52 27144 ----a-w- c:\windows\system32\nitrolocalmon2.dll
2012-08-13 04:25 . 2012-08-08 18:52 18440 ----a-w- c:\windows\system32\nitrolocalui2.dll
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Common Files\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\programdata\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Nitro PDF
2012-08-13 04:24 . 2012-08-13 04:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Downloaded Installations
2012-08-13 03:44 . 2012-08-13 03:48 -------- d-----w- c:\users\Fjodor\AppData\Local\vghd
2012-08-12 12:10 . 2012-08-12 14:58 -------- d-----w- c:\program files\Google
2012-08-12 11:26 . 2012-08-12 11:26 -------- d-----w- c:\users\Fjodor\AppData\Local\Comodo
2012-08-12 11:25 . 2012-08-12 11:25 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-08-12 11:25 . 2012-08-12 11:25 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-08-12 09:39 . 2012-08-12 09:39 -------- d-----w- C:\$AVG
2012-08-12 07:32 . 2009-04-02 08:27 188416 ----a-w- c:\windows\system32\RTLExtUI.dll
2012-08-12 07:32 . 2009-03-31 12:31 380928 ----a-w- c:\windows\RtlUI2.exe
2012-08-12 07:32 . 2008-07-01 10:31 614400 ----a-w- c:\windows\system32\Rtlihvs.dll
2012-08-12 07:22 . 2012-08-12 07:24 -------- d-----w- c:\users\Fjodor\Ekahau Site Survey
2012-08-12 07:21 . 2012-08-12 07:21 -------- d-----w- c:\program files\Ekahau
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\GMap.NET
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Local\GMap.NET
2012-08-09 09:45 . 2012-08-02 00:23 97632 ----a-w- c:\windows\system32\drivers\idmwfp.sys
2012-08-08 18:53 . 2012-08-08 18:53 69640 ----a-w- c:\windows\system32\NLSSRV32.EXE
2012-08-08 02:28 . 2012-05-15 10:26 19607872 ----a-w- c:\windows\system32\nvoglv32.dll
2012-08-08 02:28 . 2012-05-15 10:26 11354944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-08-08 02:28 . 2012-05-15 10:26 5982528 ----a-w- c:\windows\system32\nvcuda.dll
2012-08-08 02:28 . 2012-05-15 10:26 2524992 ----a-w- c:\windows\system32\nvcuvid.dll
2012-08-08 02:28 . 2012-05-15 10:26 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-08-08 02:28 . 2012-05-15 10:26 17551680 ----a-w- c:\windows\system32\nvcompiler.dll
2012-08-08 02:23 . 2012-08-08 02:23 -------- d-----w- c:\program files\Microsoft IntelliPoint
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\program files\Belkin
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\windows\{B251C9DD-FCEA-4039-966F-B989C65D2302}
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Easeware
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\program files\Easeware
2012-08-06 17:12 . 2012-08-18 05:35 -------- d-----w- C:\Temp
2012-08-05 08:40 . 2012-08-14 22:46 -------- d-----w- c:\program files\MediaInfo
2012-08-04 19:47 . 2012-08-04 19:47 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-04 19:47 . 2012-08-04 21:44 -------- d-----w- c:\program files\DAEMON Tools Pro
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\users\Fjodor\AppData\Local\4Videosoft Studio
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\programdata\4Videosoft Studio
2012-08-04 07:17 . 2012-08-04 07:18 -------- d-----w- c:\program files\CCleaner
2012-08-04 06:41 . 2012-08-04 07:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Opera
2012-08-04 06:40 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Chromium
2012-08-04 04:14 . 2012-08-04 04:14 -------- d-----w- c:\users\Fjodor\AppData\Roaming\avidemux
2012-08-01 17:29 . 2012-08-01 17:29 -------- d-----w- c:\users\Fjodor\AppData\Roaming\YouTube Downloader
2012-08-01 17:29 . 2012-08-04 11:24 -------- d-----w- c:\program files\YTD
2012-08-01 16:39 . 2012-08-04 03:37 -------- d-----w- c:\users\Fjodor\AppData\Local\VDownloader
2012-08-01 16:39 . 2012-08-01 16:44 -------- d-----w- c:\users\Fjodor\AppData\Roaming\VDownloader
2012-08-01 16:39 . 2010-01-26 09:11 444283 ----a-w- c:\program files\Common Files\WinPcapNmap.exe
2012-08-01 03:06 . 2012-08-01 03:06 -------- d-----w- c:\program files\Inbox Toolbar
2012-07-31 16:13 . 2012-08-04 03:42 -------- d-----w- c:\program files\Common Files\eBay
2012-07-31 15:48 . 2012-07-31 16:28 -------- d-----w- c:\program files\Common Files\Nero
2012-07-31 15:41 . 2011-07-13 11:39 12464 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2012-07-31 15:41 . 2011-07-13 11:39 56496 ----a-w- c:\windows\system32\drivers\NBVol.sys
2012-07-31 15:41 . 2012-07-31 15:53 -------- d-----w- c:\program files\Nero
2012-07-30 16:26 . 2012-08-05 16:02 -------- d-----w- c:\users\Fjodor\AppData\Local\Nero
2012-07-30 16:19 . 2012-07-30 16:37 -------- d-----w- c:\program files\DNS Jumper
2012-07-30 16:16 . 2012-07-30 16:16 -------- d-----w- c:\programdata\Ask
2012-07-30 02:17 . 2012-07-30 02:17 -------- d-----w- C:\rsit
2012-07-29 20:05 . 2009-02-02 16:27 7360512 ------w- c:\windows\system32\RTSUSTORicon.dll
2012-07-29 19:40 . 2012-07-30 03:16 -------- d-----w- c:\programdata\Tarma Installer
2012-07-29 19:36 . 2012-08-12 09:51 -------- d-----w- c:\program files\WirelessMon
2012-07-29 19:36 . 2012-07-29 19:36 -------- d-----w- c:\programdata\PassMark
2012-07-29 18:45 . 2009-08-19 19:13 173056 ------w- c:\windows\system32\drivers\RtsUStor.sys
2012-07-29 18:45 . 2009-08-10 10:45 44032 ------w- c:\windows\system32\drivers\RtsUCcid.sys
2012-07-29 18:45 . 2009-03-04 14:45 17536 ------w- c:\windows\system32\drivers\RtsUIr.sys
2012-07-29 18:36 . 2012-07-29 18:36 -------- d-----w- c:\programdata\Atheros Driver
2012-07-29 17:42 . 2012-07-29 17:42 -------- d-----w- c:\programdata\AVG
2012-07-29 14:42 . 2012-07-29 15:28 -------- d-----w- c:\programdata\SuperOvladac
2012-07-29 11:44 . 2012-08-18 11:17 -------- d-----w- c:\program files\trend micro
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 17:02 . 2012-06-24 03:25 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 17:02 . 2012-06-24 03:25 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-24 07:28 . 2012-06-24 03:31 445016 ------w- c:\windows\system32\wrap_oal.dll
2012-06-24 07:28 . 2012-06-24 03:31 109144 ------w- c:\windows\system32\OpenAL32.dll
2012-06-24 06:15 . 2012-06-24 06:15 23600 ------w- c:\windows\system32\drivers\TVICHW32.SYS
2012-06-24 05:33 . 2009-07-14 02:05 152576 ------w- c:\windows\system32\msclmd.dll
2012-06-24 02:37 . 2012-06-24 02:37 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-06-24 02:37 . 2012-06-24 02:37 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-06-24 02:37 . 2012-06-24 02:37 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-06-24 02:37 . 2012-06-24 02:37 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-06-24 02:37 . 2012-06-24 02:37 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-06-24 02:37 . 2012-06-24 02:37 367104 ----a-w- c:\windows\system32\html.iec
2012-06-24 02:37 . 2012-06-24 02:37 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-06-24 02:37 . 2012-06-24 02:37 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-06-24 02:37 . 2012-06-24 02:37 161792 ----a-w- c:\windows\system32\msls31.dll
2012-06-24 02:37 . 2012-06-24 02:37 152064 ----a-w- c:\windows\system32\wextract.exe
2012-06-24 02:37 . 2012-06-24 02:37 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-06-24 02:37 . 2012-06-24 02:37 11776 ----a-w- c:\windows\system32\mshta.exe
2012-06-24 02:37 . 2012-06-24 02:37 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-06-24 02:37 . 2012-06-24 02:37 101888 ----a-w- c:\windows\system32\admparse.dll
2012-06-18 01:14 . 2012-06-24 02:37 6762896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E4D48E1A-7066-4FF6-9B7C-FFC0EC23AD15}\mpengine.dll
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-06 05:05 . 2012-07-11 10:17 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-06-06 05:05 . 2012-07-11 10:17 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-06-06 05:03 . 2012-07-11 10:17 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-06-06 04:06 . 2012-06-06 04:06 2174976 ----a-w- c:\program files\Common Files\atimpenc.dll
2012-06-02 22:19 . 2012-06-24 03:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-24 03:00 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-24 03:00 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-24 03:00 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-24 03:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-24 03:00 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-24 03:00 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-24 03:00 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-24 03:00 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 04:45 . 2012-07-11 10:17 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-06-02 04:45 . 2012-07-11 10:17 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 04:40 . 2012-07-11 10:17 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2012-06-02 04:40 . 2012-07-11 10:17 225280 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 04:39 . 2012-07-11 10:17 219136 ----a-w- c:\windows\system32\ncrypt.dll
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\UC.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\RAR.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\LHA.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\ARJ.PIF
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-02-08 00:49 22376 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2012-08-09 3519936]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Clock Widget (HTC Home)"="c:\program files\HTC Home\Clock.exe" [2011-11-28 2036736]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-07-10 1022352]
"iTV"="c:\program files\iTV\iTV.exe" [2012-08-04 685568]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2012-04-26 3111744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-09 1107552]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
"InboxToolbar"="c:\program files\Inbox Toolbar\Inbox.exe" [2012-07-12 1641192]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-19 1102624]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 RSUSBCCID;Realtek Smartcard Reader Driver;c:\windows\system32\DRIVERS\RtsUCcid.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW32;TVICHW32;c:\windows\system32\DRIVERS\TVICHW32.SYS [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [x]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [x]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [x]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [x]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2012\avgfws.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [x]
S2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files\Freemake\CaptureLib\CaptureLibService.exe [x]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [x]
S2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2;c:\program files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\NLSSRV32.EXE [x]
S2 Realtek11nSU;Realtek11nSU;c:\program files\Realtek\Wireless LAN Utility\RtlService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [x]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netr28u;Belkin USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtl8187.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 17:02]
.
2012-08-10 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2012-08-07 14:26]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000Core.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000UA.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Stáhnout s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stáhnout s IDM všechny odkazy - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: Interfaces\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{51F71F3F-127E-4191-98DC-9EE95C94CCB2}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{70D36FB9-6BBE-4461-A1C6-805F63E5683B}: NameServer = 194.228.41.65,194.228.41.113
TCP: Interfaces\{C5A90B2E-1C63-4B52-8C04-1E813223E668}: NameServer = 8.8.8.8,8.8.4.4
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{069aaa0e-4023-4839-9b80-68354426cc66}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e6
"Therad"=dword:00000001
"MData"=hex(0):c8,ab,d2,92,9a,74,18,83,e3,61,3d,f1,c9,0a,a2,b6,f5,2b,66,d0,13,
67,d2,cd,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e4,b7,f9,d9,6f,7b,f2,8a,00,fa,73,d4,d7,43,52,24,b8,96,96,8d,cf,
a0,8e,01,6e,a2,a3,33,b1,40,29,8c,12,02,b9,6f,94,2d,cc,1c,00,00,00,00,00,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG2012\avgrsx.exe
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\AVG\AVG2012\avgnsx.exe
c:\program files\AVG\AVG2012\avgemcx.exe
c:\windows\system32\WUDFHost.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Realtek\Wireless LAN Utility\RtWlan.exe
c:\program files\AVG\AVG PC Tuneup\BoostSpeed.exe
c:\program files\DAEMON Tools Pro\DTShellHlp.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
c:\windows\system32\RunDll32.exe
.
**************************************************************************
.
Celkový čas: 2012-08-19 09:13:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-19 07:13
.
Před spuštěním: Volných bajtů: 51 919 081 472
Po spuštění: Volných bajtů: 51 601 530 880
.
- - End Of File - - F67A5D239A8A6171A3458E7A3E6383EF

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

ComboFix 12-08-18.03 - Fjodor 20.08.2012 1:09.2.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3071.1837 [GMT 2:00]
Spuštěný z: c:\users\Fjodor\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Fjodor\Desktop\CFScript.txt
AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Internet Security 2012 *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Ask
c:\programdata\Ask\APN-Stub\PTV\APNIC.dll
c:\users\Fjodor\AppData\Local\Microsoft\Windows\Temporary Internet Files\www.leawo.com_favicon.ico
c:\users\Fjodor\AppData\Local\Temp\rad71823.tmp\bin\Gadget.Interop.dll
c:\users\Fjodor\AppData\Local\Temp\rad8A85F.tmp\bin\x86\sharpwrapi_Win32.dll
c:\windows\system32\drivers\RKHit.sys
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_RKHIT
-------\Service_RkHit
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-19 23:17 . 2012-08-19 23:20 -------- d-----w- c:\users\Fjodor\AppData\Local\temp
2012-08-19 23:17 . 2012-08-19 23:17 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-08-19 23:17 . 2012-08-19 23:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-19 18:28 . 2012-08-19 18:28 -------- d-----w- c:\program files\SDA
2012-08-19 10:06 . 2012-08-19 10:13 -------- d-----w- c:\program files\PCSafeDoctor
2012-08-19 09:18 . 2012-01-10 08:18 66944 ----a-w- c:\windows\system32\thdudf.sys
2012-08-19 09:18 . 2012-01-10 08:18 66944 ----a-w- c:\windows\system32\drivers\thdudf.sys
2012-08-19 09:05 . 2012-08-19 09:06 -------- d-----w- c:\users\Fjodor\AppData\Roaming\tiger-k
2012-08-19 09:05 . 2012-08-19 09:36 -------- d-----w- c:\programdata\Leawo
2012-08-19 09:05 . 2012-08-19 09:36 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Leawo
2012-08-19 09:05 . 2011-03-02 10:43 175616 ----a-w- c:\windows\system32\unrar.dll
2012-08-19 09:05 . 2012-08-19 09:05 -------- d-----w- c:\program files\K-Lite Codec Pack
2012-08-19 09:05 . 2012-01-09 09:34 606208 ----a-w- c:\windows\system32\xvidcore.dll
2012-08-19 09:05 . 2012-01-09 09:34 139264 ----a-w- c:\windows\system32\xvid.ax
2012-08-19 09:05 . 2012-08-19 09:18 -------- d-----w- c:\program files\Leawo
2012-08-19 07:25 . 2012-08-19 07:25 -------- d-----w- c:\program files\Illustrate
2012-08-19 06:22 . 2012-08-19 06:22 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AccurateRip
2012-08-19 05:45 . 2012-08-19 07:24 6908648 ----a-w- c:\windows\system32\SpoonUninstall.exe
2012-08-19 05:38 . 2011-06-24 10:48 48128 ----a-w- c:\windows\system32\ff_acm.acm
2012-08-19 05:31 . 2012-08-19 05:31 -------- d-----w- c:\program files\Haali
2012-08-19 05:30 . 2012-08-19 05:31 -------- d-----w- c:\program files\AviSynth 2.5
2012-08-19 05:30 . 2011-06-24 10:48 74752 ----a-w- c:\windows\system32\ff_vfw.dll
2012-08-19 05:24 . 2012-08-19 05:25 -------- d-----w- c:\program files\smartdl
2012-08-19 05:21 . 2012-08-19 05:21 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Twan Wintjes
2012-08-19 05:20 . 2012-08-19 05:20 -------- d-----w- c:\users\Fjodor\AVCHDCoder
2012-08-19 05:19 . 2012-08-19 05:20 -------- d-----w- c:\program files\AVCHDCoder
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Broad Intelligence
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\program files\MediaCoder
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AVCWare
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\program files\AVCWare
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\programdata\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-18 11:33 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-18 07:45 . 2012-08-18 07:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\xrecode2
2012-08-18 07:45 . 2012-08-18 07:45 -------- d-----w- c:\program files\xrecode II
2012-08-18 07:39 . 2012-08-18 14:06 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Media Player Classic
2012-08-18 07:38 . 2012-08-19 08:54 -------- d-----w- c:\program files\Combined Community Codec Pack
2012-08-18 07:27 . 2012-08-18 07:32 -------- d-----w- c:\programdata\Win7codecs
2012-08-18 05:44 . 2012-08-18 06:41 -------- d-----w- c:\program files\The KMPlayer
2012-08-18 05:34 . 2012-08-18 05:34 -------- d-----w- c:\program files\Cisco Systems
2012-08-17 05:53 . 2012-08-17 05:53 -------- d-----w- c:\users\Fjodor\AppData\Local\quicklz.com_outssider
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\program files\Xirrus
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xirrus
2012-08-17 01:02 . 2012-08-17 01:02 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-08-17 01:00 . 2012-08-17 01:00 -------- d-sh--w- c:\windows\system32\%APPDATA%
2012-08-16 01:45 . 2012-05-05 07:46 400896 ----a-w- c:\windows\system32\srcore.dll
2012-08-16 01:45 . 2012-07-18 17:47 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-08-16 01:45 . 2012-02-11 05:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-08-16 01:45 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-16 01:45 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-16 01:45 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-16 01:45 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-08-15 15:51 . 2012-08-15 15:58 -------- d-----w- c:\programdata\Freemake
2012-08-15 15:50 . 2012-08-15 15:58 -------- d-----w- c:\program files\Freemake
2012-08-14 22:11 . 2012-08-14 22:11 -------- d-----w- c:\programdata\Movavi Video Suite 10 SE
2012-08-14 21:56 . 2012-08-18 07:34 -------- d-----w- c:\program files\MPC-HC
2012-08-14 16:36 . 2012-08-14 16:36 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\programdata\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\program files\Xilisoft
2012-08-14 16:18 . 2012-08-14 16:18 -------- d-----w- c:\users\Fjodor\AppData\Roaming\MOVAVI
2012-08-13 15:00 . 2012-08-13 15:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AnvSoft
2012-08-13 14:58 . 2012-08-13 14:58 -------- d-----w- c:\program files\AnvSoft
2012-08-13 04:26 . 2012-08-13 14:54 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Nitro PDF
2012-08-13 04:25 . 2012-08-08 18:52 27144 ----a-w- c:\windows\system32\nitrolocalmon2.dll
2012-08-13 04:25 . 2012-08-08 18:52 18440 ----a-w- c:\windows\system32\nitrolocalui2.dll
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Common Files\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\programdata\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Nitro PDF
2012-08-13 04:24 . 2012-08-13 04:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Downloaded Installations
2012-08-13 03:44 . 2012-08-13 03:48 -------- d-----w- c:\users\Fjodor\AppData\Local\vghd
2012-08-12 12:10 . 2012-08-12 14:58 -------- d-----w- c:\program files\Google
2012-08-12 11:26 . 2012-08-12 11:26 -------- d-----w- c:\users\Fjodor\AppData\Local\Comodo
2012-08-12 11:25 . 2012-08-12 11:25 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-08-12 11:25 . 2012-08-12 11:25 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-08-12 07:32 . 2009-04-02 08:27 188416 ----a-w- c:\windows\system32\RTLExtUI.dll
2012-08-12 07:32 . 2009-03-31 12:31 380928 ----a-w- c:\windows\RtlUI2.exe
2012-08-12 07:32 . 2008-07-01 10:31 614400 ----a-w- c:\windows\system32\Rtlihvs.dll
2012-08-12 07:22 . 2012-08-12 07:24 -------- d-----w- c:\users\Fjodor\Ekahau Site Survey
2012-08-12 07:21 . 2012-08-12 07:21 -------- d-----w- c:\program files\Ekahau
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\GMap.NET
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Local\GMap.NET
2012-08-09 09:45 . 2012-08-02 00:23 97632 ----a-w- c:\windows\system32\drivers\idmwfp.sys
2012-08-08 18:53 . 2012-08-08 18:53 69640 ----a-w- c:\windows\system32\NLSSRV32.EXE
2012-08-08 02:28 . 2012-05-15 10:26 19607872 ----a-w- c:\windows\system32\nvoglv32.dll
2012-08-08 02:28 . 2012-05-15 10:26 11354944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-08-08 02:28 . 2012-05-15 10:26 5982528 ----a-w- c:\windows\system32\nvcuda.dll
2012-08-08 02:28 . 2012-05-15 10:26 2524992 ----a-w- c:\windows\system32\nvcuvid.dll
2012-08-08 02:28 . 2012-05-15 10:26 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-08-08 02:28 . 2012-05-15 10:26 17551680 ----a-w- c:\windows\system32\nvcompiler.dll
2012-08-08 02:23 . 2012-08-08 02:23 -------- d-----w- c:\program files\Microsoft IntelliPoint
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\program files\Belkin
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\windows\{B251C9DD-FCEA-4039-966F-B989C65D2302}
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Easeware
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\program files\Easeware
2012-08-06 17:12 . 2012-08-18 05:35 -------- d-----w- C:\Temp
2012-08-05 08:40 . 2012-08-14 22:46 -------- d-----w- c:\program files\MediaInfo
2012-08-04 19:47 . 2012-08-04 19:47 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-04 19:47 . 2012-08-04 21:44 -------- d-----w- c:\program files\DAEMON Tools Pro
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\users\Fjodor\AppData\Local\4Videosoft Studio
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\programdata\4Videosoft Studio
2012-08-04 07:17 . 2012-08-04 07:18 -------- d-----w- c:\program files\CCleaner
2012-08-04 06:41 . 2012-08-04 07:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Opera
2012-08-04 06:40 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Chromium
2012-08-04 04:14 . 2012-08-04 04:14 -------- d-----w- c:\users\Fjodor\AppData\Roaming\avidemux
2012-08-01 17:29 . 2012-08-01 17:29 -------- d-----w- c:\users\Fjodor\AppData\Roaming\YouTube Downloader
2012-08-01 17:29 . 2012-08-04 11:24 -------- d-----w- c:\program files\YTD
2012-08-01 16:39 . 2012-08-04 03:37 -------- d-----w- c:\users\Fjodor\AppData\Local\VDownloader
2012-08-01 16:39 . 2012-08-01 16:44 -------- d-----w- c:\users\Fjodor\AppData\Roaming\VDownloader
2012-08-01 16:39 . 2010-01-26 09:11 444283 ----a-w- c:\program files\Common Files\WinPcapNmap.exe
2012-08-01 03:06 . 2012-08-01 03:06 -------- d-----w- c:\program files\Inbox Toolbar
2012-07-31 16:13 . 2012-08-04 03:42 -------- d-----w- c:\program files\Common Files\eBay
2012-07-31 15:48 . 2012-07-31 16:28 -------- d-----w- c:\program files\Common Files\Nero
2012-07-31 15:41 . 2011-07-13 11:39 12464 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2012-07-31 15:41 . 2011-07-13 11:39 56496 ----a-w- c:\windows\system32\drivers\NBVol.sys
2012-07-31 15:41 . 2012-07-31 15:53 -------- d-----w- c:\program files\Nero
2012-07-30 16:26 . 2012-08-05 16:02 -------- d-----w- c:\users\Fjodor\AppData\Local\Nero
2012-07-30 16:19 . 2012-07-30 16:37 -------- d-----w- c:\program files\DNS Jumper
2012-07-30 02:17 . 2012-07-30 02:17 -------- d-----w- C:\rsit
2012-07-29 20:05 . 2009-02-02 16:27 7360512 ------w- c:\windows\system32\RTSUSTORicon.dll
2012-07-29 19:40 . 2012-07-30 03:16 -------- d-----w- c:\programdata\Tarma Installer
2012-07-29 19:36 . 2012-08-12 09:51 -------- d-----w- c:\program files\WirelessMon
2012-07-29 19:36 . 2012-07-29 19:36 -------- d-----w- c:\programdata\PassMark
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 17:02 . 2012-06-24 03:25 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 17:02 . 2012-06-24 03:25 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-24 07:28 . 2012-06-24 03:31 445016 ------w- c:\windows\system32\wrap_oal.dll
2012-06-24 07:28 . 2012-06-24 03:31 109144 ------w- c:\windows\system32\OpenAL32.dll
2012-06-24 06:15 . 2012-06-24 06:15 23600 ------w- c:\windows\system32\drivers\TVICHW32.SYS
2012-06-24 05:33 . 2009-07-14 02:05 152576 ------w- c:\windows\system32\msclmd.dll
2012-06-24 02:37 . 2012-06-24 02:37 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-06-24 02:37 . 2012-06-24 02:37 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-06-24 02:37 . 2012-06-24 02:37 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-06-24 02:37 . 2012-06-24 02:37 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-06-24 02:37 . 2012-06-24 02:37 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-06-24 02:37 . 2012-06-24 02:37 367104 ----a-w- c:\windows\system32\html.iec
2012-06-24 02:37 . 2012-06-24 02:37 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-06-24 02:37 . 2012-06-24 02:37 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-06-24 02:37 . 2012-06-24 02:37 161792 ----a-w- c:\windows\system32\msls31.dll
2012-06-24 02:37 . 2012-06-24 02:37 152064 ----a-w- c:\windows\system32\wextract.exe
2012-06-24 02:37 . 2012-06-24 02:37 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-06-24 02:37 . 2012-06-24 02:37 11776 ----a-w- c:\windows\system32\mshta.exe
2012-06-24 02:37 . 2012-06-24 02:37 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-06-24 02:37 . 2012-06-24 02:37 101888 ----a-w- c:\windows\system32\admparse.dll
2012-06-18 01:14 . 2012-06-24 02:37 6762896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E4D48E1A-7066-4FF6-9B7C-FFC0EC23AD15}\mpengine.dll
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-06 05:05 . 2012-07-11 10:17 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-06-06 05:05 . 2012-07-11 10:17 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-06-06 05:03 . 2012-07-11 10:17 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-06-06 04:06 . 2012-06-06 04:06 2174976 ----a-w- c:\program files\Common Files\atimpenc.dll
2012-06-02 22:19 . 2012-06-24 03:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-24 03:00 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-24 03:00 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-24 03:00 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-24 03:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-24 03:00 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-24 03:00 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-24 03:00 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-24 03:00 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 04:45 . 2012-07-11 10:17 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-06-02 04:45 . 2012-07-11 10:17 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 04:40 . 2012-07-11 10:17 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2012-06-02 04:40 . 2012-07-11 10:17 225280 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 04:39 . 2012-07-11 10:17 219136 ----a-w- c:\windows\system32\ncrypt.dll
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\UC.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\RAR.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\LHA.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\ARJ.PIF
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-19_06.59.47 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-19 18:29 . 2012-08-19 18:29 57856 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80u.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 69632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80.dll
+ 2012-06-24 04:16 . 2012-08-19 22:53 45456 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2012-08-19 23:21 34270 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-08-19 07:25 . 2012-08-19 07:25 17680 c:\windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
+ 2010-06-21 15:19 . 2010-06-21 15:19 36864 c:\windows\System32\SDDEVMGR.dll
- 2009-07-14 04:50 . 2012-08-18 05:34 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2012-06-23 17:36 . 2012-08-19 23:19 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-06-23 17:36 . 2012-08-19 06:58 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-07-30 11:26 . 2012-08-19 23:19 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-07-30 11:26 . 2012-08-19 06:58 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:41 . 2012-08-19 23:19 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:41 . 2012-08-19 06:58 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 62840 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\SDFormatter.exe1_CBA6F8460E1248E4BC2DD7DD0D45ECD0.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 62840 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\SDFormatter.exe_EAEA4BE396CA4AF29556C9C15430F124.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 58744 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\ARPPRODUCTICON.exe
+ 2012-06-24 02:41 . 2012-08-19 22:53 9860 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3444113751-2294134068-3891119924-1000_UserData.bin
+ 2012-08-19 07:22 . 2012-08-19 07:22 3184 c:\windows\System32\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.dat
+ 2012-08-19 22:51 . 2012-08-19 23:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-08-19 05:49 . 2012-08-19 06:57 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-08-19 05:49 . 2012-08-19 06:57 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-19 22:51 . 2012-08-19 23:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-19 22:46 . 2012-08-19 22:46 6144 c:\windows\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED1.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 626688 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcr80.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 548864 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcp80.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcm80.dll
- 2009-07-14 02:05 . 2012-08-12 14:59 651538 c:\windows\System32\perfh009.dat
+ 2009-07-14 02:05 . 2012-08-19 22:57 651538 c:\windows\System32\perfh009.dat
+ 2009-07-14 08:44 . 2012-08-19 22:57 665794 c:\windows\System32\perfh005.dat
- 2009-07-14 08:44 . 2012-08-12 14:59 665794 c:\windows\System32\perfh005.dat
- 2009-07-14 02:05 . 2012-08-12 14:59 120470 c:\windows\System32\perfc009.dat
+ 2009-07-14 02:05 . 2012-08-19 22:57 120470 c:\windows\System32\perfc009.dat
- 2009-07-14 08:44 . 2012-08-12 14:59 139490 c:\windows\System32\perfc005.dat
+ 2009-07-14 08:44 . 2012-08-19 22:57 139490 c:\windows\System32\perfc005.dat
- 2009-07-14 04:50 . 2012-08-18 05:34 143360 c:\windows\System32\DriverStore\infstrng.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 143360 c:\windows\System32\DriverStore\infstrng.dat
- 2009-07-14 04:50 . 2012-08-18 05:34 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2010-09-27 09:56 . 2010-09-27 09:56 308859 c:\windows\System32\drivers\CVPNDRVA.sys
+ 2012-06-24 02:22 . 2012-08-19 23:19 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2012-06-24 02:22 . 2012-08-19 06:58 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 04:34 . 2012-08-19 22:54 112488 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2009-07-14 04:47 . 2012-08-19 05:47 420028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 04:47 . 2012-08-19 22:49 420028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 1093120 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80u.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 1101824 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80.dll
+ 2009-07-14 04:34 . 2012-08-19 22:53 7374566 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:34 . 2012-08-17 15:45 7374566 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2012-06-24 04:18 . 2012-08-19 22:49 4991652 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-8192.dat
- 2012-06-24 06:48 . 2012-08-19 05:47 1255948 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-12288.dat
+ 2012-06-24 06:48 . 2012-08-19 22:49 1255948 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-12288.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 6277120 c:\windows\Installer\278d884.msi
+ 2010-09-27 10:05 . 2010-09-27 10:05 10401280 c:\windows\Installer\3646d95.msi
+ 2012-06-24 04:15 . 2012-08-19 18:29 123058806 c:\windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-02-08 00:49 22376 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2012-08-09 3519936]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Clock Widget (HTC Home)"="c:\program files\HTC Home\Clock.exe" [2011-11-28 2036736]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-07-10 1022352]
"iTV"="c:\program files\iTV\iTV.exe" [2012-08-04 685568]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2012-04-26 3111744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-09 1107552]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
"InboxToolbar"="c:\program files\Inbox Toolbar\Inbox.exe" [2012-07-12 1641192]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
"pcsafedoctor.exe"="c:\program files\PCSafeDoctor\pcsafedoctor.exe" [2012-08-13 2052608]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-19 1102624]
VPN Client.lnk - c:\windows\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED7.ico [2012-8-20 6144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 RSUSBCCID;Realtek Smartcard Reader Driver;c:\windows\system32\DRIVERS\RtsUCcid.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW32;TVICHW32;c:\windows\system32\DRIVERS\TVICHW32.SYS [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [x]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [x]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [x]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [x]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2012\avgfws.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [x]
S2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files\Freemake\CaptureLib\CaptureLibService.exe [x]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [x]
S2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2;c:\program files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\NLSSRV32.EXE [x]
S2 Realtek11nSU;Realtek11nSU;c:\program files\Realtek\Wireless LAN Utility\RtlService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\DRIVERS\thdudf.sys [x]
S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [x]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netr28u;Belkin USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtl8187.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 17:02]
.
2012-08-10 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2012-08-07 14:26]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000Core.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000UA.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Stáhnout s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stáhnout s IDM všechny odkazy - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: Interfaces\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{51F71F3F-127E-4191-98DC-9EE95C94CCB2}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{70D36FB9-6BBE-4461-A1C6-805F63E5683B}: NameServer = 194.228.41.65,194.228.41.113
TCP: Interfaces\{C5A90B2E-1C63-4B52-8C04-1E813223E668}: NameServer = 8.8.8.8,8.8.4.4
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-ffdshow_is1 - c:\program files\Combined Community Codec Pack\Filters\FFDShow\unins000.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{069aaa0e-4023-4839-9b80-68354426cc66}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e6
"Therad"=dword:00000001
"MData"=hex(0):c8,ab,d2,92,9a,74,18,83,e3,61,3d,f1,c9,0a,a2,b6,f5,2b,66,d0,13,
67,d2,cd,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e4,b7,f9,d9,6f,7b,f2,8a,00,fa,73,d4,d7,43,52,24,b8,96,96,8d,cf,
a0,8e,01,6e,a2,a3,33,b1,40,29,8c,12,02,b9,6f,94,2d,cc,1c,00,00,00,00,00,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG2012\avgrsx.exe
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\windows\system32\taskhost.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\Realtek\Wireless LAN Utility\RtWlan.exe
c:\program files\AVG\AVG2012\avgnsx.exe
c:\program files\AVG\AVG2012\avgemcx.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\AVG\AVG PC Tuneup\BoostSpeed.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\DAEMON Tools Pro\DTShellHlp.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
.
**************************************************************************
.
Celkový čas: 2012-08-20 01:32:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-19 23:32
.
Před spuštěním: Volných bajtů: 41 621 168 128
Po spuštění: Volných bajtů: 41 239 150 592
.
- - End Of File - - 7923112AB681B1D70196367CC582DD2F

ComboFix 12-08-18.03 - Fjodor 20.08.2012 1:09.2.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3071.1837 [GMT 2:00]
Spuštěný z: c:\users\Fjodor\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Fjodor\Desktop\CFScript.txt
AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Internet Security 2012 *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Ask
c:\programdata\Ask\APN-Stub\PTV\APNIC.dll
c:\users\Fjodor\AppData\Local\Microsoft\Windows\Temporary Internet Files\www.leawo.com_favicon.ico
c:\users\Fjodor\AppData\Local\Temp\rad71823.tmp\bin\Gadget.Interop.dll
c:\users\Fjodor\AppData\Local\Temp\rad8A85F.tmp\bin\x86\sharpwrapi_Win32.dll
c:\windows\system32\drivers\RKHit.sys
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_RKHIT
-------\Service_RkHit
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-19 23:17 . 2012-08-19 23:20 -------- d-----w- c:\users\Fjodor\AppData\Local\temp
2012-08-19 23:17 . 2012-08-19 23:17 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-08-19 23:17 . 2012-08-19 23:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-19 18:28 . 2012-08-19 18:28 -------- d-----w- c:\program files\SDA
2012-08-19 10:06 . 2012-08-19 10:13 -------- d-----w- c:\program files\PCSafeDoctor
2012-08-19 09:18 . 2012-01-10 08:18 66944 ----a-w- c:\windows\system32\thdudf.sys
2012-08-19 09:18 . 2012-01-10 08:18 66944 ----a-w- c:\windows\system32\drivers\thdudf.sys
2012-08-19 09:05 . 2012-08-19 09:06 -------- d-----w- c:\users\Fjodor\AppData\Roaming\tiger-k
2012-08-19 09:05 . 2012-08-19 09:36 -------- d-----w- c:\programdata\Leawo
2012-08-19 09:05 . 2012-08-19 09:36 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Leawo
2012-08-19 09:05 . 2011-03-02 10:43 175616 ----a-w- c:\windows\system32\unrar.dll
2012-08-19 09:05 . 2012-08-19 09:05 -------- d-----w- c:\program files\K-Lite Codec Pack
2012-08-19 09:05 . 2012-01-09 09:34 606208 ----a-w- c:\windows\system32\xvidcore.dll
2012-08-19 09:05 . 2012-01-09 09:34 139264 ----a-w- c:\windows\system32\xvid.ax
2012-08-19 09:05 . 2012-08-19 09:18 -------- d-----w- c:\program files\Leawo
2012-08-19 07:25 . 2012-08-19 07:25 -------- d-----w- c:\program files\Illustrate
2012-08-19 06:22 . 2012-08-19 06:22 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AccurateRip
2012-08-19 05:45 . 2012-08-19 07:24 6908648 ----a-w- c:\windows\system32\SpoonUninstall.exe
2012-08-19 05:38 . 2011-06-24 10:48 48128 ----a-w- c:\windows\system32\ff_acm.acm
2012-08-19 05:31 . 2012-08-19 05:31 -------- d-----w- c:\program files\Haali
2012-08-19 05:30 . 2012-08-19 05:31 -------- d-----w- c:\program files\AviSynth 2.5
2012-08-19 05:30 . 2011-06-24 10:48 74752 ----a-w- c:\windows\system32\ff_vfw.dll
2012-08-19 05:24 . 2012-08-19 05:25 -------- d-----w- c:\program files\smartdl
2012-08-19 05:21 . 2012-08-19 05:21 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Twan Wintjes
2012-08-19 05:20 . 2012-08-19 05:20 -------- d-----w- c:\users\Fjodor\AVCHDCoder
2012-08-19 05:19 . 2012-08-19 05:20 -------- d-----w- c:\program files\AVCHDCoder
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Broad Intelligence
2012-08-19 05:09 . 2012-08-19 06:24 -------- d-----w- c:\program files\MediaCoder
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AVCWare
2012-08-19 04:42 . 2012-08-19 04:42 -------- d-----w- c:\program files\AVCWare
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\programdata\Malwarebytes
2012-08-18 11:33 . 2012-08-18 11:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-18 11:33 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-18 07:45 . 2012-08-18 07:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\xrecode2
2012-08-18 07:45 . 2012-08-18 07:45 -------- d-----w- c:\program files\xrecode II
2012-08-18 07:39 . 2012-08-18 14:06 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Media Player Classic
2012-08-18 07:38 . 2012-08-19 08:54 -------- d-----w- c:\program files\Combined Community Codec Pack
2012-08-18 07:27 . 2012-08-18 07:32 -------- d-----w- c:\programdata\Win7codecs
2012-08-18 05:44 . 2012-08-18 06:41 -------- d-----w- c:\program files\The KMPlayer
2012-08-18 05:34 . 2012-08-18 05:34 -------- d-----w- c:\program files\Cisco Systems
2012-08-17 05:53 . 2012-08-17 05:53 -------- d-----w- c:\users\Fjodor\AppData\Local\quicklz.com_outssider
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\program files\Xirrus
2012-08-17 05:38 . 2012-08-17 05:38 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xirrus
2012-08-17 01:02 . 2012-08-17 01:02 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-08-17 01:00 . 2012-08-17 01:00 -------- d-sh--w- c:\windows\system32\%APPDATA%
2012-08-16 01:45 . 2012-05-05 07:46 400896 ----a-w- c:\windows\system32\srcore.dll
2012-08-16 01:45 . 2012-07-18 17:47 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-08-16 01:45 . 2012-02-11 05:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-08-16 01:45 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-16 01:45 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-16 01:45 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-16 01:45 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-08-15 15:51 . 2012-08-15 15:58 -------- d-----w- c:\programdata\Freemake
2012-08-15 15:50 . 2012-08-15 15:58 -------- d-----w- c:\program files\Freemake
2012-08-14 22:11 . 2012-08-14 22:11 -------- d-----w- c:\programdata\Movavi Video Suite 10 SE
2012-08-14 21:56 . 2012-08-18 07:34 -------- d-----w- c:\program files\MPC-HC
2012-08-14 16:36 . 2012-08-14 16:36 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\programdata\Xilisoft
2012-08-14 16:32 . 2012-08-14 16:32 -------- d-----w- c:\program files\Xilisoft
2012-08-14 16:18 . 2012-08-14 16:18 -------- d-----w- c:\users\Fjodor\AppData\Roaming\MOVAVI
2012-08-13 15:00 . 2012-08-13 15:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\AnvSoft
2012-08-13 14:58 . 2012-08-13 14:58 -------- d-----w- c:\program files\AnvSoft
2012-08-13 04:26 . 2012-08-13 14:54 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Nitro PDF
2012-08-13 04:25 . 2012-08-08 18:52 27144 ----a-w- c:\windows\system32\nitrolocalmon2.dll
2012-08-13 04:25 . 2012-08-08 18:52 18440 ----a-w- c:\windows\system32\nitrolocalui2.dll
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Common Files\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\programdata\Nitro PDF
2012-08-13 04:25 . 2012-08-13 04:25 -------- d-----w- c:\program files\Nitro PDF
2012-08-13 04:24 . 2012-08-13 04:24 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Downloaded Installations
2012-08-13 03:44 . 2012-08-13 03:48 -------- d-----w- c:\users\Fjodor\AppData\Local\vghd
2012-08-12 12:10 . 2012-08-12 14:58 -------- d-----w- c:\program files\Google
2012-08-12 11:26 . 2012-08-12 11:26 -------- d-----w- c:\users\Fjodor\AppData\Local\Comodo
2012-08-12 11:25 . 2012-08-12 11:25 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-08-12 11:25 . 2012-08-12 11:25 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-08-12 07:32 . 2009-04-02 08:27 188416 ----a-w- c:\windows\system32\RTLExtUI.dll
2012-08-12 07:32 . 2009-03-31 12:31 380928 ----a-w- c:\windows\RtlUI2.exe
2012-08-12 07:32 . 2008-07-01 10:31 614400 ----a-w- c:\windows\system32\Rtlihvs.dll
2012-08-12 07:22 . 2012-08-12 07:24 -------- d-----w- c:\users\Fjodor\Ekahau Site Survey
2012-08-12 07:21 . 2012-08-12 07:21 -------- d-----w- c:\program files\Ekahau
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Roaming\GMap.NET
2012-08-12 05:46 . 2012-08-12 05:46 -------- d-----w- c:\users\Fjodor\AppData\Local\GMap.NET
2012-08-09 09:45 . 2012-08-02 00:23 97632 ----a-w- c:\windows\system32\drivers\idmwfp.sys
2012-08-08 18:53 . 2012-08-08 18:53 69640 ----a-w- c:\windows\system32\NLSSRV32.EXE
2012-08-08 02:28 . 2012-05-15 10:26 19607872 ----a-w- c:\windows\system32\nvoglv32.dll
2012-08-08 02:28 . 2012-05-15 10:26 11354944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-08-08 02:28 . 2012-05-15 10:26 5982528 ----a-w- c:\windows\system32\nvcuda.dll
2012-08-08 02:28 . 2012-05-15 10:26 2524992 ----a-w- c:\windows\system32\nvcuvid.dll
2012-08-08 02:28 . 2012-05-15 10:26 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-08-08 02:28 . 2012-05-15 10:26 17551680 ----a-w- c:\windows\system32\nvcompiler.dll
2012-08-08 02:23 . 2012-08-08 02:23 -------- d-----w- c:\program files\Microsoft IntelliPoint
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\program files\Belkin
2012-08-08 02:21 . 2012-08-08 02:21 -------- d-----w- c:\windows\{B251C9DD-FCEA-4039-966F-B989C65D2302}
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Easeware
2012-08-07 16:43 . 2012-08-07 16:43 -------- d-----w- c:\program files\Easeware
2012-08-06 17:12 . 2012-08-18 05:35 -------- d-----w- C:\Temp
2012-08-05 08:40 . 2012-08-14 22:46 -------- d-----w- c:\program files\MediaInfo
2012-08-04 19:47 . 2012-08-04 19:47 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-04 19:47 . 2012-08-04 21:44 -------- d-----w- c:\program files\DAEMON Tools Pro
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\users\Fjodor\AppData\Local\4Videosoft Studio
2012-08-04 14:30 . 2012-08-04 14:30 -------- d-----w- c:\programdata\4Videosoft Studio
2012-08-04 07:17 . 2012-08-04 07:18 -------- d-----w- c:\program files\CCleaner
2012-08-04 06:41 . 2012-08-04 07:00 -------- d-----w- c:\users\Fjodor\AppData\Roaming\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Yandex
2012-08-04 06:41 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Opera
2012-08-04 06:40 . 2012-08-04 06:41 -------- d-----w- c:\users\Fjodor\AppData\Local\Chromium
2012-08-04 04:14 . 2012-08-04 04:14 -------- d-----w- c:\users\Fjodor\AppData\Roaming\avidemux
2012-08-01 17:29 . 2012-08-01 17:29 -------- d-----w- c:\users\Fjodor\AppData\Roaming\YouTube Downloader
2012-08-01 17:29 . 2012-08-04 11:24 -------- d-----w- c:\program files\YTD
2012-08-01 16:39 . 2012-08-04 03:37 -------- d-----w- c:\users\Fjodor\AppData\Local\VDownloader
2012-08-01 16:39 . 2012-08-01 16:44 -------- d-----w- c:\users\Fjodor\AppData\Roaming\VDownloader
2012-08-01 16:39 . 2010-01-26 09:11 444283 ----a-w- c:\program files\Common Files\WinPcapNmap.exe
2012-08-01 03:06 . 2012-08-01 03:06 -------- d-----w- c:\program files\Inbox Toolbar
2012-07-31 16:13 . 2012-08-04 03:42 -------- d-----w- c:\program files\Common Files\eBay
2012-07-31 15:48 . 2012-07-31 16:28 -------- d-----w- c:\program files\Common Files\Nero
2012-07-31 15:41 . 2011-07-13 11:39 12464 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2012-07-31 15:41 . 2011-07-13 11:39 56496 ----a-w- c:\windows\system32\drivers\NBVol.sys
2012-07-31 15:41 . 2012-07-31 15:53 -------- d-----w- c:\program files\Nero
2012-07-30 16:26 . 2012-08-05 16:02 -------- d-----w- c:\users\Fjodor\AppData\Local\Nero
2012-07-30 16:19 . 2012-07-30 16:37 -------- d-----w- c:\program files\DNS Jumper
2012-07-30 02:17 . 2012-07-30 02:17 -------- d-----w- C:\rsit
2012-07-29 20:05 . 2009-02-02 16:27 7360512 ------w- c:\windows\system32\RTSUSTORicon.dll
2012-07-29 19:40 . 2012-07-30 03:16 -------- d-----w- c:\programdata\Tarma Installer
2012-07-29 19:36 . 2012-08-12 09:51 -------- d-----w- c:\program files\WirelessMon
2012-07-29 19:36 . 2012-07-29 19:36 -------- d-----w- c:\programdata\PassMark
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 17:02 . 2012-06-24 03:25 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 17:02 . 2012-06-24 03:25 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-24 07:28 . 2012-06-24 03:31 445016 ------w- c:\windows\system32\wrap_oal.dll
2012-06-24 07:28 . 2012-06-24 03:31 109144 ------w- c:\windows\system32\OpenAL32.dll
2012-06-24 06:15 . 2012-06-24 06:15 23600 ------w- c:\windows\system32\drivers\TVICHW32.SYS
2012-06-24 05:33 . 2009-07-14 02:05 152576 ------w- c:\windows\system32\msclmd.dll
2012-06-24 02:37 . 2012-06-24 02:37 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-06-24 02:37 . 2012-06-24 02:37 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-06-24 02:37 . 2012-06-24 02:37 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-06-24 02:37 . 2012-06-24 02:37 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-06-24 02:37 . 2012-06-24 02:37 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-06-24 02:37 . 2012-06-24 02:37 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-06-24 02:37 . 2012-06-24 02:37 367104 ----a-w- c:\windows\system32\html.iec
2012-06-24 02:37 . 2012-06-24 02:37 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-06-24 02:37 . 2012-06-24 02:37 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-06-24 02:37 . 2012-06-24 02:37 161792 ----a-w- c:\windows\system32\msls31.dll
2012-06-24 02:37 . 2012-06-24 02:37 152064 ----a-w- c:\windows\system32\wextract.exe
2012-06-24 02:37 . 2012-06-24 02:37 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-06-24 02:37 . 2012-06-24 02:37 11776 ----a-w- c:\windows\system32\mshta.exe
2012-06-24 02:37 . 2012-06-24 02:37 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-06-24 02:37 . 2012-06-24 02:37 101888 ----a-w- c:\windows\system32\admparse.dll
2012-06-18 01:14 . 2012-06-24 02:37 6762896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E4D48E1A-7066-4FF6-9B7C-FFC0EC23AD15}\mpengine.dll
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-06 05:05 . 2012-07-11 10:17 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-06-06 05:05 . 2012-07-11 10:17 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-06-06 05:03 . 2012-07-11 10:17 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-06-06 04:06 . 2012-06-06 04:06 2174976 ----a-w- c:\program files\Common Files\atimpenc.dll
2012-06-02 22:19 . 2012-06-24 03:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-24 03:00 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-24 03:00 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-24 03:00 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-24 03:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-24 03:00 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-24 03:00 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-24 03:00 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-24 03:00 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 04:45 . 2012-07-11 10:17 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-06-02 04:45 . 2012-07-11 10:17 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 04:40 . 2012-07-11 10:17 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2012-06-02 04:40 . 2012-07-11 10:17 225280 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 04:39 . 2012-07-11 10:17 219136 ----a-w- c:\windows\system32\ncrypt.dll
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\UC.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\RAR.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\LHA.PIF
2012-05-23 06:00 . 2012-06-24 03:10 545 ----a-w- c:\windows\ARJ.PIF
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-19_06.59.47 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-19 18:29 . 2012-08-19 18:29 57856 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80u.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 69632 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80.dll
+ 2012-06-24 04:16 . 2012-08-19 22:53 45456 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2012-08-19 23:21 34270 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-08-19 07:25 . 2012-08-19 07:25 17680 c:\windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
+ 2010-06-21 15:19 . 2010-06-21 15:19 36864 c:\windows\System32\SDDEVMGR.dll
- 2009-07-14 04:50 . 2012-08-18 05:34 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2012-06-23 17:36 . 2012-08-19 23:19 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-06-23 17:36 . 2012-08-19 06:58 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-07-30 11:26 . 2012-08-19 23:19 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-07-30 11:26 . 2012-08-19 06:58 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:41 . 2012-08-19 23:19 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:41 . 2012-08-19 06:58 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 62840 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\SDFormatter.exe1_CBA6F8460E1248E4BC2DD7DD0D45ECD0.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 62840 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\SDFormatter.exe_EAEA4BE396CA4AF29556C9C15430F124.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 58744 c:\windows\Installer\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}\ARPPRODUCTICON.exe
+ 2012-06-24 02:41 . 2012-08-19 22:53 9860 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3444113751-2294134068-3891119924-1000_UserData.bin
+ 2012-08-19 07:22 . 2012-08-19 07:22 3184 c:\windows\System32\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.dat
+ 2012-08-19 22:51 . 2012-08-19 23:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-08-19 05:49 . 2012-08-19 06:57 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-08-19 05:49 . 2012-08-19 06:57 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-19 22:51 . 2012-08-19 23:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-19 22:46 . 2012-08-19 22:46 6144 c:\windows\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED1.exe
+ 2012-08-19 18:28 . 2012-08-19 18:28 626688 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcr80.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 548864 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcp80.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcm80.dll
- 2009-07-14 02:05 . 2012-08-12 14:59 651538 c:\windows\System32\perfh009.dat
+ 2009-07-14 02:05 . 2012-08-19 22:57 651538 c:\windows\System32\perfh009.dat
+ 2009-07-14 08:44 . 2012-08-19 22:57 665794 c:\windows\System32\perfh005.dat
- 2009-07-14 08:44 . 2012-08-12 14:59 665794 c:\windows\System32\perfh005.dat
- 2009-07-14 02:05 . 2012-08-12 14:59 120470 c:\windows\System32\perfc009.dat
+ 2009-07-14 02:05 . 2012-08-19 22:57 120470 c:\windows\System32\perfc009.dat
- 2009-07-14 08:44 . 2012-08-12 14:59 139490 c:\windows\System32\perfc005.dat
+ 2009-07-14 08:44 . 2012-08-19 22:57 139490 c:\windows\System32\perfc005.dat
- 2009-07-14 04:50 . 2012-08-18 05:34 143360 c:\windows\System32\DriverStore\infstrng.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 143360 c:\windows\System32\DriverStore\infstrng.dat
- 2009-07-14 04:50 . 2012-08-18 05:34 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2009-07-14 04:50 . 2012-08-19 22:46 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2010-09-27 09:56 . 2010-09-27 09:56 308859 c:\windows\System32\drivers\CVPNDRVA.sys
+ 2012-06-24 02:22 . 2012-08-19 23:19 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2012-06-24 02:22 . 2012-08-19 06:58 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 04:34 . 2012-08-19 22:54 112488 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2009-07-14 04:47 . 2012-08-19 05:47 420028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 04:47 . 2012-08-19 22:49 420028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 1093120 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80u.dll
+ 2012-08-19 18:28 . 2012-08-19 18:28 1101824 c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80.dll
+ 2009-07-14 04:34 . 2012-08-19 22:53 7374566 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:34 . 2012-08-17 15:45 7374566 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2012-06-24 04:18 . 2012-08-19 22:49 4991652 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-8192.dat
- 2012-06-24 06:48 . 2012-08-19 05:47 1255948 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-12288.dat
+ 2012-06-24 06:48 . 2012-08-19 22:49 1255948 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3444113751-2294134068-3891119924-1000-12288.dat
+ 2012-08-19 18:28 . 2012-08-19 18:28 6277120 c:\windows\Installer\278d884.msi
+ 2010-09-27 10:05 . 2010-09-27 10:05 10401280 c:\windows\Installer\3646d95.msi
+ 2012-06-24 04:15 . 2012-08-19 18:29 123058806 c:\windows\winsxs\ManifestCache\a786a517e28d5687_blobs.bin
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-02-08 00:49 22376 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2012-08-09 3519936]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Clock Widget (HTC Home)"="c:\program files\HTC Home\Clock.exe" [2011-11-28 2036736]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-07-10 1022352]
"iTV"="c:\program files\iTV\iTV.exe" [2012-08-04 685568]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2012-04-26 3111744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-09 1107552]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
"InboxToolbar"="c:\program files\Inbox Toolbar\Inbox.exe" [2012-07-12 1641192]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
"pcsafedoctor.exe"="c:\program files\PCSafeDoctor\pcsafedoctor.exe" [2012-08-13 2052608]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-19 1102624]
VPN Client.lnk - c:\windows\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED7.ico [2012-8-20 6144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 RSUSBCCID;Realtek Smartcard Reader Driver;c:\windows\system32\DRIVERS\RtsUCcid.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW32;TVICHW32;c:\windows\system32\DRIVERS\TVICHW32.SYS [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R4 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [x]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [x]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [x]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [x]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2012\avgfws.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [x]
S2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files\Freemake\CaptureLib\CaptureLibService.exe [x]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [x]
S2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2;c:\program files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\NLSSRV32.EXE [x]
S2 Realtek11nSU;Realtek11nSU;c:\program files\Realtek\Wireless LAN Utility\RtlService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\DRIVERS\thdudf.sys [x]
S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [x]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netr28u;Belkin USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtl8187.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 17:02]
.
2012-08-10 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2012-08-07 14:26]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-12 12:10]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000Core.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
2012-08-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3444113751-2294134068-3891119924-1000UA.job
- c:\users\Fjodor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-12 13:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Stáhnout s IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Stáhnout s IDM všechny odkazy - c:\program files\Internet Download Manager\IEGetAll.htm
TCP: Interfaces\{4B652A4C-CB8F-491C-9D2B-535BBFBDBFFD}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{51F71F3F-127E-4191-98DC-9EE95C94CCB2}: NameServer = 8.8.4.4,208.67.222.222
TCP: Interfaces\{70D36FB9-6BBE-4461-A1C6-805F63E5683B}: NameServer = 194.228.41.65,194.228.41.113
TCP: Interfaces\{C5A90B2E-1C63-4B52-8C04-1E813223E668}: NameServer = 8.8.8.8,8.8.4.4
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-ffdshow_is1 - c:\program files\Combined Community Codec Pack\Filters\FFDShow\unins000.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{069aaa0e-4023-4839-9b80-68354426cc66}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000e6
"Therad"=dword:00000001
"MData"=hex(0):c8,ab,d2,92,9a,74,18,83,e3,61,3d,f1,c9,0a,a2,b6,f5,2b,66,d0,13,
67,d2,cd,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_USERS\S-1-5-21-3444113751-2294134068-3891119924-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e4,b7,f9,d9,6f,7b,f2,8a,00,fa,73,d4,d7,43,52,24,b8,96,96,8d,cf,
a0,8e,01,6e,a2,a3,33,b1,40,29,8c,12,02,b9,6f,94,2d,cc,1c,00,00,00,00,00,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG2012\avgrsx.exe
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\windows\system32\taskhost.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\Realtek\Wireless LAN Utility\RtWlan.exe
c:\program files\AVG\AVG2012\avgnsx.exe
c:\program files\AVG\AVG2012\avgemcx.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\AVG\AVG PC Tuneup\BoostSpeed.exe
c:\program files\AVG\AVG2012\avgcsrvx.exe
c:\program files\DAEMON Tools Pro\DTShellHlp.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
.
**************************************************************************
.
Celkový čas: 2012-08-20 01:32:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-19 23:32
.
Před spuštěním: Volných bajtů: 41 621 168 128
Po spuštění: Volných bajtů: 41 239 150 592
.
- - End Of File - - 7923112AB681B1D70196367CC582DD2F

Log by mi stačil jednou

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jaký je stav PC.

Podstatně se chod zlepšil, děkuji za spolupráci a přeji vše OK.
FF

Není zač a měj se.