VIRY.CZ

Zdravím, chtěl bych poprosit o kontrolu logu. Zhruba před dvěma týdny jsem přeinstaloval systém z XP na Win7. Od začátku se po naběhnutí systému procesor vytíží na 90-100%, cca dvě minuty musím počkat, jinak jakýkoli spuštěný program přestane pracovat. Poté již jde s počítačem pracovat, ale procesor se mi zdá pořád nadměrně vytížen (nevšiml jsem si, že by se dostal pod 50%, většinou > 65%). Ve správci úloh nejvíce procesor vytěžují dva procesy svchost.exe. Přikládán log a předem děkuji za kontrolu.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Radek at 2012-09-08 20:27:49
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 69 GB (66%) free of 105 GB
Total RAM: 4094 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:27:55, on 8.9.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\FreeCommander\FreeCommander.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Radek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\SysWOW64\dvmurl.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Radek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\Windows\SysWOW64\brsvc01a.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7555 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SysWOW64\brsvc01a.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k imgsvc
brss01a.exe
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\RAVCpl64.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
HydraDM64.exe -h:131648 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Program Files (x86)\FreeCommander\FreeCommander.exe"
"C:\Program Files (x86)\FreeCommander\FcContextMenu64.exe" "-POSITION=22,907" "-FILE=C:\Users\Radek\AppData\Local\Temp\FreeCommander3632\C4FC.tmp" -SENDER=918048 -AUTOCLOSE=10
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Radek\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.5, {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, elemhidehelper@adblockplus.org:1.1.1, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {D6D05E6F-D5C1-4e03-8E33-73F92B05E262}:10.2, foxmarks@kei.com:3.9.8, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default\extensions\
foxmarks@kei.com
{20a82645-c095-46ed-80e3-08825760534b}

C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default\searchplugins\
icqplugin.xml
torrentz-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-07 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-07 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-07 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-07 157672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RAVCpl64.exe [2008-07-03 6430208]
"Skytel"=C:\Windows\Skytel.exe [2008-06-25 1826816]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-03-07 4081008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Radek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-13 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2008-06-02 380928]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"BrMfcWnd"=C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [2009-05-26 1159168]
"ControlCenter3"=C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [2008-12-24 114688]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-09-08 20:27:50 ----D---- C:\Program Files\trend micro
2012-09-08 20:27:49 ----D---- C:\rsit
2012-09-08 13:26:09 ----RD---- C:\Program Files (x86)\Skype
2012-09-08 13:21:53 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-09-08 13:21:53 ----A---- C:\Windows\system32\qdvd.dll
2012-09-08 13:21:48 ----A---- C:\Windows\system32\FntCache.dll
2012-09-08 13:21:47 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-09-08 13:21:47 ----A---- C:\Windows\system32\d2d1.dll
2012-09-08 13:20:22 ----D---- C:\Windows\system32\appmgmt
2012-09-08 13:05:26 ----A---- C:\Windows\IsUninst.exe
2012-09-08 13:05:25 ----A---- C:\Windows\_delis32.ini
2012-09-07 21:54:10 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-09-07 16:44:42 ----D---- C:\ProgramData\ATI
2012-09-07 16:31:41 ----SHD---- C:\Config.Msi
2012-09-07 15:24:15 ----D---- C:\Program Files\Microsoft Silverlight
2012-09-07 15:24:15 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-09-07 15:07:43 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-09-07 15:07:43 ----A---- C:\Windows\system32\javaws.exe
2012-09-07 15:07:43 ----A---- C:\Windows\system32\deployJava1.dll
2012-09-07 15:07:37 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-09-07 15:07:37 ----A---- C:\Windows\system32\javaw.exe
2012-09-07 15:07:37 ----A---- C:\Windows\system32\java.exe
2012-09-07 15:07:25 ----D---- C:\Program Files\Java
2012-09-07 15:06:33 ----A---- C:\Windows\SYSWOW64\javaws.exe
2012-09-07 15:06:26 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2012-09-07 15:06:26 ----A---- C:\Windows\SYSWOW64\javaw.exe
2012-09-07 15:06:26 ----A---- C:\Windows\SYSWOW64\java.exe
2012-09-07 15:06:18 ----D---- C:\Program Files (x86)\Java
2012-09-07 15:04:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-09-03 14:47:13 ----D---- C:\Program Files\GIMP 2
2012-09-03 10:35:14 ----D---- C:\Windows\Sun
2012-09-01 20:27:10 ----N---- C:\Windows\SYSWOW64\mwgfxcopy.exe
2012-09-01 20:27:10 ----N---- C:\Windows\SYSWOW64\mwgfx24.dll
2012-09-01 20:27:10 ----N---- C:\Windows\SYSWOW64\mwgfx.dll
2012-09-01 20:27:10 ----N---- C:\Windows\SYSWOW64\mwdds.dll
2012-09-01 20:27:10 ----N---- C:\Windows\SYSWOW64\mwace.dll
2012-09-01 20:27:10 ----D---- C:\Program Files (x86)\DXTBmp
2012-09-01 18:53:28 ----D---- C:\Program Files (x86)\DDS Converter 2
2012-09-01 13:38:09 ----D---- C:\Program Files (x86)\GIANTS Software
2012-09-01 13:14:49 ----D---- C:\Users\Radek\AppData\Roaming\firstobject
2012-09-01 13:14:49 ----D---- C:\Program Files (x86)\firstobject
2012-09-01 10:53:36 ----D---- C:\Program Files (x86)\Transcribe!
2012-08-25 22:51:45 ----D---- C:\Program Files\Paint.NET
2012-08-22 15:21:29 ----D---- C:\Program Files\NTCore
2012-08-22 13:40:17 ----D---- C:\Program Files (x86)\JDownloader
2012-08-20 20:03:40 ----D---- C:\Users\Radek\AppData\Roaming\PotPlayerMini64
2012-08-20 17:16:12 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-08-20 17:16:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-08-20 17:16:12 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-08-20 17:16:12 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-08-20 17:16:10 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-08-20 17:16:10 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-08-20 17:16:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-08-20 17:16:10 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-08-20 17:16:10 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-08-20 17:16:10 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-08-20 17:16:08 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-08-20 17:16:07 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-08-20 17:16:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-08-20 17:16:07 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-08-20 17:16:07 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-08-20 17:16:06 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-08-20 17:16:06 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-08-20 17:16:06 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-08-20 17:16:06 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-08-20 17:16:04 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-08-20 17:16:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-08-20 17:16:03 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-08-20 17:16:03 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-08-20 17:16:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-08-20 17:16:02 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-08-20 17:16:01 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-08-20 17:16:01 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-08-20 17:16:01 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-08-20 17:16:01 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-08-20 17:16:00 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-08-20 17:16:00 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-08-20 17:15:59 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-08-20 17:15:59 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-08-20 17:15:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-08-20 17:15:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-08-20 17:15:59 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-08-20 17:15:59 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-08-20 17:15:58 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-08-20 17:15:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-08-20 17:15:58 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-08-20 17:15:58 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-08-20 17:15:58 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-08-20 17:15:58 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-08-20 17:15:57 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-08-20 17:15:57 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-08-20 17:15:56 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-08-20 17:15:56 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-08-20 17:15:55 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-08-20 17:15:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-08-20 17:15:55 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-08-20 17:15:55 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-08-20 17:15:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-08-20 17:15:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-08-20 17:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-08-20 17:15:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-08-20 17:15:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-08-20 17:15:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-08-20 17:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-08-20 17:15:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-08-20 17:15:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-08-20 17:15:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-08-20 17:15:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-08-20 17:15:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-08-20 17:15:51 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-08-20 17:15:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-08-20 17:15:50 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-08-20 17:15:50 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-08-20 17:15:49 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-08-20 17:15:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-08-20 17:15:49 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-08-20 17:15:49 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-08-20 17:15:48 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-08-20 17:15:48 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-08-20 17:15:47 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-08-20 17:15:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-08-20 17:15:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-08-20 17:15:47 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-08-20 17:15:47 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-08-20 17:15:47 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-08-20 17:15:46 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-08-20 17:15:46 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-08-20 17:15:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-08-20 17:15:46 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-08-20 17:15:46 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-08-20 17:15:46 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-08-20 17:15:44 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-08-20 17:15:44 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-08-20 17:15:44 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-08-20 17:15:44 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-08-20 17:15:43 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-08-20 17:15:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-08-20 17:15:43 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-08-20 17:15:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-08-20 17:15:43 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-08-20 17:15:43 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-08-20 17:15:43 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-08-20 17:15:43 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-08-20 17:15:42 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-08-20 17:15:42 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-08-20 17:15:41 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-08-20 17:15:41 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-08-20 17:15:38 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-08-20 17:15:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-08-20 17:15:38 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-08-20 17:15:38 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-08-20 17:15:37 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-08-20 17:15:37 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-08-20 17:15:35 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-08-20 17:15:35 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-08-20 17:15:34 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-08-20 17:15:34 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-08-20 17:15:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-08-20 17:15:34 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-08-20 17:15:34 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-08-20 17:15:34 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-08-20 17:15:32 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-08-20 17:15:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-08-20 17:15:32 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-08-20 17:15:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-08-20 17:15:32 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-08-20 17:15:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-08-20 17:15:32 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-08-20 17:15:32 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-08-20 17:15:31 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-08-20 17:15:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-08-20 17:15:30 ----A---- C:\Windows\system32\xinput1_3.dll
2012-08-20 17:15:29 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-08-20 17:15:29 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-08-20 17:15:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-08-20 17:15:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-08-20 17:15:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-08-20 17:15:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-08-20 17:15:28 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-08-20 17:15:28 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-08-20 17:15:26 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-08-20 17:15:26 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-08-20 17:15:25 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-08-20 17:15:25 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-08-20 17:15:24 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-08-20 17:15:24 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-08-20 17:15:24 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-08-20 17:15:24 ----A---- C:\Windows\system32\d3dx10.dll
2012-08-20 17:15:23 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-08-20 17:15:23 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-08-20 17:15:23 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-08-20 17:15:23 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-08-20 17:15:22 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-08-20 17:15:22 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-08-20 17:15:21 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-08-20 17:15:21 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-08-20 17:15:21 ----A---- C:\Windows\system32\xinput1_2.dll
2012-08-20 17:15:21 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-08-20 17:15:20 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-08-20 17:15:20 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-08-20 17:15:20 ----A---- C:\Windows\system32\xinput1_1.dll
2012-08-20 17:15:20 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-08-20 17:15:18 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-08-20 17:15:18 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-08-20 17:15:09 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-08-20 17:15:09 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-08-20 17:15:09 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-08-20 17:15:09 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-08-20 17:15:09 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-08-20 17:15:09 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-08-20 17:15:08 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-08-20 17:15:08 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-08-20 17:15:08 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-08-20 17:15:08 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-08-20 17:15:07 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-08-20 17:15:07 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-08-20 17:15:06 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-08-20 17:15:06 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-08-20 17:15:06 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-08-20 17:15:06 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-08-20 17:15:05 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-08-20 17:15:05 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-08-20 17:11:43 ----D---- C:\Program Files\DAUM
2012-08-18 09:03:44 ----D---- C:\ProgramData\Sun
2012-08-18 09:03:22 ----D---- C:\Program Files (x86)\Oracle
2012-08-18 09:02:38 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2012-08-18 09:02:38 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2012-08-18 08:45:03 ----A---- C:\Windows\system32\MRT.exe
2012-08-17 13:46:02 ----D---- C:\Users\Radek\AppData\Roaming\Guitar Pro 6
2012-08-17 13:46:02 ----D---- C:\ProgramData\Guitar Pro 6
2012-08-17 13:44:19 ----D---- C:\Program Files (x86)\Guitar Pro 6
2012-08-15 19:10:20 ----D---- C:\Users\Radek\AppData\Roaming\Mirillis
2012-08-15 19:10:20 ----D---- C:\ProgramData\Mirillis
2012-08-15 19:08:23 ----D---- C:\Program Files (x86)\Mirillis
2012-08-14 23:49:22 ----A---- C:\Windows\SYSWOW64\url.dll
2012-08-14 23:49:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-08-14 23:49:22 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-14 23:49:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-08-14 23:49:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-08-14 23:49:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-08-14 23:49:21 ----A---- C:\Windows\system32\urlmon.dll
2012-08-14 23:49:21 ----A---- C:\Windows\system32\url.dll
2012-08-14 23:49:21 ----A---- C:\Windows\system32\ieui.dll
2012-08-14 23:49:21 ----A---- C:\Windows\system32\iertutil.dll
2012-08-14 23:49:20 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-08-14 23:49:20 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-14 23:49:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-08-14 23:49:19 ----A---- C:\Windows\system32\wininet.dll
2012-08-14 23:49:19 ----A---- C:\Windows\system32\jscript9.dll
2012-08-14 23:49:18 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-08-14 23:49:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-08-14 23:49:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-08-14 23:49:18 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-14 23:49:18 ----A---- C:\Windows\system32\jscript.dll
2012-08-14 23:49:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-08-14 23:49:16 ----A---- C:\Windows\system32\mshtml.dll
2012-08-14 23:49:15 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-08-14 23:49:15 ----A---- C:\Windows\system32\ieframe.dll
2012-08-14 20:56:22 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-08-14 20:56:21 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-08-14 20:56:18 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-08-14 20:56:18 ----A---- C:\Windows\system32\srcore.dll
2012-08-14 20:56:17 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-08-14 20:56:17 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-08-14 20:56:17 ----A---- C:\Windows\system32\netapi32.dll
2012-08-14 20:56:17 ----A---- C:\Windows\system32\browser.dll
2012-08-14 20:56:17 ----A---- C:\Windows\system32\browcli.dll
2012-08-14 20:56:16 ----A---- C:\Windows\system32\win32spl.dll
2012-08-14 20:56:16 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-14 20:56:15 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-08-14 20:56:15 ----A---- C:\Windows\splwow64.exe
2012-08-14 20:56:14 ----A---- C:\Windows\system32\localspl.dll
2012-08-14 20:56:13 ----A---- C:\Windows\system32\win32k.sys
2012-08-14 20:56:07 ----A---- C:\Windows\system32\fsutil.exe
2012-08-14 20:56:07 ----A---- C:\Windows\system32\esent.dll
2012-08-14 20:56:07 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-08-14 20:56:06 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-08-14 20:56:06 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\storport.sys
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-08-14 20:56:06 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-08-14 18:51:01 ----D---- C:\Windows\SYSWOW64\Wat
2012-08-14 18:51:01 ----D---- C:\Windows\system32\Wat
2012-08-14 12:14:56 ----A---- C:\Windows\system32\browserchoice.exe
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-08-14 12:12:31 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-08-14 12:12:30 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-08-14 12:12:29 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-08-14 12:12:29 ----A---- C:\Windows\system32\pngfilt.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\occache.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\msrating.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\msls31.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\mshtmler.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\mshta.exe
2012-08-14 12:12:29 ----A---- C:\Windows\system32\msfeedssync.exe
2012-08-14 12:12:29 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\imgutil.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\iesysprep.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\iepeers.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\ieapfltr.dat
2012-08-14 12:12:29 ----A---- C:\Windows\system32\ieakui.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\ieaksie.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\ieakeng.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\dxtrans.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\dxtmsft.dll
2012-08-14 12:12:29 ----A---- C:\Windows\system32\admparse.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\wextract.exe
2012-08-14 12:12:28 ----A---- C:\Windows\system32\webcheck.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\vbscript.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\msfeeds.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\licmgr10.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\inseng.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\iexpress.exe
2012-08-14 12:12:28 ----A---- C:\Windows\system32\iesetup.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\iernonce.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\iedkcs32.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\ieapfltr.dll
2012-08-14 12:12:28 ----A---- C:\Windows\system32\ie4uinit.exe
2012-08-14 12:12:28 ----A---- C:\Windows\system32\icardie.dll
2012-08-14 12:04:11 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-08-14 12:04:11 ----A---- C:\Windows\system32\imagehlp.dll
2012-08-14 12:04:11 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-08-14 12:04:10 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-08-14 12:04:10 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-08-14 12:04:10 ----A---- C:\Windows\system32\wmi.dll
2012-08-14 12:04:10 ----A---- C:\Windows\system32\wintrust.dll
2012-08-14 10:26:39 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-08-14 10:26:39 ----A---- C:\Windows\system32\xmllite.dll
2012-08-14 10:26:37 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-08-14 10:26:37 ----A---- C:\Windows\system32\kerberos.dll
2012-08-14 10:26:35 ----A---- C:\Windows\system32\odbctrac.dll
2012-08-14 10:26:35 ----A---- C:\Windows\system32\odbccu32.dll
2012-08-14 10:26:35 ----A---- C:\Windows\system32\odbccr32.dll
2012-08-14 10:26:35 ----A---- C:\Windows\system32\odbccp32.dll
2012-08-14 10:26:34 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-08-14 10:26:34 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-08-14 10:26:34 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-08-14 10:26:34 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-08-14 10:26:34 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-08-14 10:26:32 ----A---- C:\Windows\system32\DWrite.dll
2012-08-14 10:26:31 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-08-14 10:26:26 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-08-14 10:26:26 ----A---- C:\Windows\system32\poqexec.exe
2012-08-14 10:26:25 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-08-14 10:26:25 ----A---- C:\Windows\explorer.exe
2012-08-14 10:26:23 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-08-14 10:26:23 ----A---- C:\Windows\system32\sbe.dll
2012-08-14 10:26:23 ----A---- C:\Windows\system32\CPFilters.dll
2012-08-14 10:26:22 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-08-14 10:26:21 ----A---- C:\Windows\system32\quartz.dll
2012-08-14 10:26:20 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-08-14 10:26:15 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-08-14 10:26:15 ----A---- C:\Windows\system32\ntshrui.dll
2012-08-14 10:26:14 ----A---- C:\Windows\system32\tquery.dll
2012-08-14 10:26:14 ----A---- C:\Windows\system32\mssrch.dll
2012-08-14 10:26:13 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-08-14 10:26:13 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-08-14 10:26:13 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-08-14 10:26:13 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-08-14 10:26:12 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-08-14 10:26:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-08-14 10:26:12 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-08-14 10:26:12 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-08-14 10:26:12 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-08-14 10:26:12 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-08-14 10:26:12 ----A---- C:\Windows\system32\mssvp.dll
2012-08-14 10:26:12 ----A---- C:\Windows\system32\mssphtb.dll
2012-08-14 10:26:12 ----A---- C:\Windows\system32\mssph.dll
2012-08-14 10:26:12 ----A---- C:\Windows\system32\msscntrs.dll
2012-08-14 10:26:11 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-08-14 10:26:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-08-14 10:26:10 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-08-14 10:26:10 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-08-14 10:26:10 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-08-14 10:26:08 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-08-14 10:26:08 ----A---- C:\Windows\system32\webio.dll
2012-08-14 10:26:05 ----A---- C:\Windows\system32\csrsrv.dll
2012-08-14 10:26:04 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-08-14 10:26:04 ----A---- C:\Windows\system32\msxml6.dll
2012-08-14 10:26:03 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2012-08-14 10:26:03 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-08-14 10:26:03 ----A---- C:\Windows\system32\msxml3r.dll
2012-08-14 10:26:03 ----A---- C:\Windows\system32\msxml3.dll
2012-08-14 10:25:55 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-08-14 10:25:55 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-08-14 10:25:51 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-08-14 10:25:51 ----A---- C:\Windows\system32\XpsPrint.dll
2012-08-14 10:25:49 ----A---- C:\Windows\system32\shell32.dll
2012-08-14 10:25:45 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-08-14 10:25:43 ----A---- C:\Windows\system32\mfc42u.dll
2012-08-14 10:25:43 ----A---- C:\Windows\system32\mfc42.dll
2012-08-14 10:25:42 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-08-14 10:25:42 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-08-14 10:25:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-08-14 10:25:18 ----A---- C:\Windows\system32\rdpwsx.dll
2012-08-14 10:25:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-08-14 10:25:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-08-14 10:25:02 ----A---- C:\Windows\system32\schannel.dll
2012-08-14 10:25:02 ----A---- C:\Windows\system32\ncrypt.dll
2012-08-14 10:25:02 ----A---- C:\Windows\system32\lsasrv.dll
2012-08-14 10:25:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-08-14 10:25:02 ----A---- C:\Windows\system32\drivers\cng.sys
2012-08-14 10:25:01 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-08-14 10:25:01 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-08-14 10:25:01 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-08-14 10:25:01 ----A---- C:\Windows\system32\sspisrv.dll
2012-08-14 10:25:01 ----A---- C:\Windows\system32\sspicli.dll
2012-08-14 10:25:01 ----A---- C:\Windows\system32\secur32.dll
2012-08-14 10:25:01 ----A---- C:\Windows\system32\lsass.exe
2012-08-14 10:25:01 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-08-14 10:24:57 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-08-14 10:24:57 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-08-14 10:24:57 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-08-14 10:24:57 ----A---- C:\Windows\system32\fontsub.dll
2012-08-14 10:24:57 ----A---- C:\Windows\system32\atmlib.dll
2012-08-14 10:24:57 ----A---- C:\Windows\system32\atmfd.dll
2012-08-14 10:24:45 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-08-14 10:24:44 ----A---- C:\Windows\system32\profsvc.dll
2012-08-14 10:24:43 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-08-14 10:24:43 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-08-14 10:24:43 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-08-14 10:24:43 ----A---- C:\Windows\system32\dnsapi.dll
2012-08-14 10:24:42 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-08-14 10:24:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-08-14 10:24:39 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-08-14 10:24:38 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-08-14 10:23:51 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-08-14 10:23:51 ----A---- C:\Windows\system32\psisdecd.dll
2012-08-14 10:23:50 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-08-14 10:23:50 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-08-14 10:23:50 ----A---- C:\Windows\system32\drivers\srv.sys
2012-08-14 10:23:49 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-08-14 10:23:49 ----A---- C:\Windows\system32\d3d10_1.dll
2012-08-14 10:23:48 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-08-14 10:23:47 ----A---- C:\Windows\system32\drivers\afd.sys
2012-08-14 10:23:45 ----A---- C:\Windows\system32\winresume.exe
2012-08-14 10:23:45 ----A---- C:\Windows\system32\winload.exe
2012-08-14 10:23:45 ----A---- C:\Windows\system32\kdusb.dll
2012-08-14 10:23:45 ----A---- C:\Windows\system32\kdcom.dll
2012-08-14 10:23:45 ----A---- C:\Windows\system32\kd1394.dll
2012-08-14 10:23:44 ----A---- C:\Windows\system32\msi.dll
2012-08-14 10:23:43 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-08-14 10:23:41 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-08-14 10:23:30 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-08-14 10:23:30 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-08-14 10:23:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-08-14 10:23:30 ----A---- C:\Windows\system32\cryptsvc.dll
2012-08-14 10:23:30 ----A---- C:\Windows\system32\cryptnet.dll
2012-08-14 10:23:30 ----A---- C:\Windows\system32\crypt32.dll
2012-08-14 10:23:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-08-14 10:23:16 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-08-14 10:23:16 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-08-14 10:23:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-08-14 10:23:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-08-14 10:23:12 ----A---- C:\Windows\system32\KernelBase.dll
2012-08-14 10:23:12 ----A---- C:\Windows\system32\kernel32.dll
2012-08-14 10:23:11 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-08-14 10:23:11 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-08-14 10:23:11 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-08-14 10:23:11 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-08-14 10:23:11 ----A---- C:\Windows\system32\wow64win.dll
2012-08-14 10:23:11 ----A---- C:\Windows\system32\wow64.dll
2012-08-14 10:23:11 ----A---- C:\Windows\system32\winsrv.dll
2012-08-14 10:23:11 ----A---- C:\Windows\system32\ntvdm64.dll
2012-08-14 10:23:11 ----A---- C:\Windows\system32\conhost.exe
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-08-14 10:23:10 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-08-14 10:23:10 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-08-14 10:23:10 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-08-14 10:23:10 ----A---- C:\Windows\system32\wow64cpu.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-08-14 10:23:09 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-08-14 10:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-08-14 10:23:08 ----A---- C:\Windows\SYSWOW64\user.exe
2012-08-14 10:23:04 ----A---- C:\Windows\system32\prevhost.exe
2012-08-14 10:23:03 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-08-14 10:22:42 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-08-14 10:22:41 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-08-14 10:22:41 ----A---- C:\Windows\system32\inetcomm.dll
2012-08-14 10:22:40 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-08-14 10:22:40 ----A---- C:\Windows\system32\msvcrt.dll
2012-08-14 10:22:34 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-08-14 10:22:26 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-08-14 10:22:26 ----A---- C:\Windows\system32\tzres.dll
2012-08-14 10:22:11 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-08-14 10:22:11 ----A---- C:\Windows\system32\EncDec.dll
2012-08-14 10:22:10 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-08-14 10:22:10 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-08-14 10:22:10 ----A---- C:\Windows\system32\oleaut32.dll
2012-08-14 10:22:10 ----A---- C:\Windows\system32\oleacc.dll
2012-08-14 10:22:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-08-14 10:22:02 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-08-14 10:22:01 ----A---- C:\Windows\system32\cdosys.dll
2012-08-14 10:21:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-08-14 10:21:58 ----A---- C:\Windows\system32\ntdll.dll
2012-08-14 10:17:50 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-08-14 10:17:50 ----A---- C:\Windows\system32\packager.dll
2012-08-13 21:03:55 ----A---- C:\Windows\Brpfx04a.ini
2012-08-13 21:03:55 ----A---- C:\Windows\brpcfx.ini
2012-08-13 21:02:29 ----A---- C:\Windows\SYSWOW64\brss01a.ini
2012-08-13 21:02:28 ----A---- C:\Windows\BRWMARK.INI
2012-08-13 21:02:28 ----A---- C:\Windows\BRPP2KA.INI
2012-08-13 20:59:15 ----A---- C:\Windows\system32\bridf05a.dat
2012-08-13 20:58:17 ----N---- C:\Windows\SYSWOW64\BRCrypt.dll
2012-08-13 20:58:11 ----N---- C:\Windows\SYSWOW64\BrMuSNMP.dll
2012-08-13 20:58:11 ----N---- C:\Windows\SYSWOW64\BrMfNt.dll
2012-08-13 20:58:11 ----N---- C:\Windows\system32\BrfxDA5b.dll
2012-08-13 20:58:11 ----A---- C:\Windows\Brfaxrx.ini
2012-08-13 20:58:11 ----A---- C:\Windows\brdfxspd.dat
2012-08-13 20:58:10 ----N---- C:\Windows\SYSWOW64\BroSNMP.dll
2012-08-13 20:58:10 ----N---- C:\Windows\SYSWOW64\BrDctF2L.dll
2012-08-13 20:58:09 ----N---- C:\Windows\SYSWOW64\BrDctF2S.dll
2012-08-13 20:58:09 ----N---- C:\Windows\SYSWOW64\BrDctF2.dll
2012-08-13 20:58:08 ----A---- C:\Windows\system32\BrWia09a.dll
2012-08-13 20:58:08 ----A---- C:\Windows\system32\BrUsi09a.dll
2012-08-13 20:58:07 ----A---- C:\Windows\SYSWOW64\brsvc01a.exe
2012-08-13 20:58:07 ----A---- C:\Windows\SYSWOW64\brss01a.exe
2012-08-13 20:58:07 ----A---- C:\Windows\system32\bsplmz01.exe
2012-08-13 20:58:07 ----A---- C:\Windows\system32\bsplmz01.dll
2012-08-13 20:58:06 ----N---- C:\Windows\SYSWOW64\NSSearch.dll
2012-08-13 20:58:06 ----D---- C:\Program Files (x86)\Brother
2012-08-13 20:57:34 ----D---- C:\ProgramData\Brother
2012-08-13 20:57:31 ----D---- C:\Users\Radek\AppData\Roaming\InstallShield
2012-08-13 20:55:11 ----D---- C:\Users\Radek\AppData\Roaming\AIMP3
2012-08-13 20:55:08 ----D---- C:\Program Files (x86)\AIMP3
2012-08-13 20:44:20 ----D---- C:\Program Files (x86)\Microsoft Works
2012-08-13 20:44:10 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2012-08-13 20:43:56 ----D---- C:\Windows\PCHEALTH
2012-08-13 20:43:56 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-08-13 20:42:22 ----D---- C:\Program Files\Microsoft Office
2012-08-13 20:41:34 ----D---- C:\ProgramData\Microsoft Help
2012-08-13 20:41:34 ----D---- C:\Program Files (x86)\Microsoft Office
2012-08-13 20:35:11 ----RHD---- C:\MSOCache
2012-08-13 19:01:35 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-08-13 18:53:06 ----D---- C:\Program Files (x86)\AMD AVT
2012-08-13 18:53:04 ----D---- C:\Program Files (x86)\AMD APP
2012-08-13 18:52:13 ----D---- C:\ProgramData\AMD
2012-08-13 18:52:12 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2012-08-13 18:49:33 ----D---- C:\AMD
2012-08-13 18:48:59 ----D---- C:\Users\Radek\AppData\Roaming\Notepad++
2012-08-13 18:48:59 ----D---- C:\Program Files (x86)\Notepad++
2012-08-13 18:47:16 ----D---- C:\Program Files\Common Files\Bullzip
2012-08-13 18:47:16 ----A---- C:\Windows\SYSWOW64\bzpdfc.dll
2012-08-13 18:47:16 ----A---- C:\Windows\SYSWOW64\bzFlRdr.dll
2012-08-13 18:47:16 ----A---- C:\Windows\SYSWOW64\bzDCT.dll
2012-08-13 18:47:12 ----A---- C:\Windows\system32\bzpdf.dll
2012-08-13 18:47:04 ----D---- C:\Program Files\Bullzip
2012-08-13 18:40:23 ----D---- C:\Users\Radek\AppData\Roaming\Skype
2012-08-13 18:40:12 ----D---- C:\ProgramData\Skype
2012-08-13 18:36:24 ----D---- C:\Users\Radek\AppData\Roaming\FreeCommander
2012-08-13 18:36:24 ----D---- C:\Program Files (x86)\FreeCommander
2012-08-13 18:35:20 ----D---- C:\Users\Radek\AppData\Roaming\Macromedia
2012-08-13 18:35:20 ----D---- C:\Users\Radek\AppData\Roaming\Adobe
2012-08-13 18:35:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-08-13 18:35:14 ----D---- C:\Windows\SYSWOW64\Macromed
2012-08-13 18:35:13 ----D---- C:\Windows\system32\Macromed
2012-08-13 18:34:11 ----D---- C:\Program Files (x86)\Adobe
2012-08-13 18:33:42 ----D---- C:\ProgramData\Adobe
2012-08-13 18:30:27 ----D---- C:\Users\Radek\AppData\Roaming\Zoner
2012-08-13 18:30:03 ----D---- C:\Program Files (x86)\Zoner
2012-08-13 18:22:59 ----D---- C:\Users\Radek\AppData\Roaming\Ashampoo
2012-08-13 18:22:47 ----D---- C:\ProgramData\ashampoo
2012-08-13 18:22:25 ----D---- C:\Program Files (x86)\Ashampoo
2012-08-13 18:20:12 ----D---- C:\ProgramData\Ask
2012-08-13 18:14:17 ----D---- C:\Program Files\ESET
2012-08-13 18:14:16 ----D---- C:\ProgramData\ESET
2012-08-13 18:10:06 ----D---- C:\Users\Radek\AppData\Roaming\WinRAR
2012-08-13 18:10:05 ----D---- C:\Program Files\WinRAR
2012-08-13 18:08:39 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-08-13 18:08:37 ----D---- C:\Users\Radek\AppData\Roaming\DAEMON Tools Lite
2012-08-13 18:08:37 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-08-13 18:08:07 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-08-13 18:05:27 ----D---- C:\Users\Radek\AppData\Roaming\Mozilla
2012-08-13 18:03:15 ----D---- C:\Program Files (x86)\MozBackup
2012-08-13 18:03:01 ----D---- C:\ProgramData\Mozilla
2012-08-13 18:03:01 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-08-13 17:57:12 ----D---- C:\Users\Radek\AppData\Roaming\ATI
2012-08-13 17:54:23 ----D---- C:\Program Files (x86)\ATI Technologies
2012-08-13 17:54:18 ----D---- C:\Windows\Panther
2012-08-13 17:54:06 ----RASH---- C:\BOOTSECT.BAK
2012-08-13 17:54:04 ----SHD---- C:\Boot
2012-08-13 17:53:51 ----A---- C:\Windows\system32\drivers\amdide64.sys
2012-08-13 17:53:46 ----A---- C:\Windows\system32\drivers\AtiPcie.sys
2012-08-13 17:53:44 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-08-13 17:53:28 ----A---- C:\Windows\SYSWOW64\atiumdva.dat
2012-08-13 17:53:28 ----A---- C:\Windows\system32\atiumd6a.dat
2012-08-13 17:52:56 ----SHD---- C:\Windows\Installer
2012-08-13 17:52:55 ----D---- C:\Program Files\ATI
2012-08-13 17:51:29 ----D---- C:\Program Files\ATI Technologies
2012-08-13 17:50:31 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-08-13 17:50:31 ----A---- C:\Windows\system32\rdpcore.dll
2012-08-13 17:50:31 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-08-13 17:47:25 ----A---- C:\Windows\system32\wups2.dll
2012-08-13 17:47:25 ----A---- C:\Windows\system32\wucltux.dll
2012-08-13 17:47:25 ----A---- C:\Windows\system32\wuaueng.dll
2012-08-13 17:47:25 ----A---- C:\Windows\system32\wuauclt.exe
2012-08-13 17:47:19 ----A---- C:\Windows\system32\wups.dll
2012-08-13 17:47:19 ----A---- C:\Windows\system32\wudriver.dll
2012-08-13 17:47:19 ----A---- C:\Windows\system32\wuapi.dll
2012-08-13 17:47:14 ----A---- C:\Windows\system32\wuwebv.dll
2012-08-13 17:47:14 ----A---- C:\Windows\system32\wuapp.exe
2012-08-13 17:38:37 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-08-13 17:38:32 ----A---- C:\Windows\system32\RtkHDM64.dll
2012-08-13 17:38:32 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys
2012-08-13 17:38:32 ----A---- C:\Windows\RtkUpd64.exe
2012-08-13 17:38:32 ----A---- C:\Windows\DIFxAPI.dll
2012-08-13 17:38:31 ----A---- C:\Windows\system32\RHDMEx64.dll
2012-08-13 17:38:31 ----A---- C:\Windows\system32\RHCoInst64.dll
2012-08-13 17:38:30 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-08-13 17:38:30 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-08-13 17:38:30 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-08-13 17:38:30 ----A---- C:\Windows\system32\SRSHP64.dll
2012-08-13 17:38:30 ----A---- C:\Windows\SkyTel.exe
2012-08-13 17:38:29 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-08-13 17:38:29 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-08-13 17:38:29 ----A---- C:\Windows\system32\RtkApi64.dll
2012-08-13 17:38:29 ----A---- C:\Windows\system32\RTCOM64.dll
2012-08-13 17:38:29 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-08-13 17:38:29 ----A---- C:\Windows\RtlUpd64.exe
2012-08-13 17:38:28 ----D---- C:\Program Files (x86)\Realtek
2012-08-13 17:38:28 ----A---- C:\Windows\system32\RCoInst64.dll
2012-08-13 17:38:28 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-08-13 17:38:28 ----A---- C:\Windows\system32\FMAPO64.dll
2012-08-13 17:38:28 ----A---- C:\Windows\RAVCpl64.exe
2012-08-13 17:38:26 ----R---- C:\Windows\RtlExUpd.dll
2012-08-13 17:38:26 ----A---- C:\Windows\HideWin.exe
2012-08-13 17:38:10 ----D---- C:\Program Files (x86)\Browser Configuration Utility
2012-08-13 17:38:10 ----A---- C:\Windows\SYSWOW64\dvmurl.dll
2012-08-13 17:38:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-08-13 17:37:09 ----A---- C:\Windows\GSetup.ini
2012-08-13 17:37:08 ----A---- C:\Windows\gdrv.sys
2012-08-13 17:06:40 ----D---- C:\Users\Radek\AppData\Roaming\Identities
2012-08-13 17:06:28 ----SD---- C:\Users\Radek\AppData\Roaming\Microsoft
2012-08-13 17:06:28 ----D---- C:\Users\Radek\AppData\Roaming\Media Center Programs
2012-08-13 17:06:23 ----SHD---- C:\Recovery
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Šablony
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Plocha
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Oblíbené položky
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Nabídka Start
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Dokumenty
2012-08-13 17:06:23 ----SHD---- C:\ProgramData\Data aplikací
2012-08-13 16:57:41 ----D---- C:\Windows\SoftwareDistribution
2012-08-13 16:55:33 ----D---- C:\Windows\Prefetch
2012-08-13 16:54:59 ----ASH---- C:\pagefile.sys
2012-08-13 16:54:59 ----ASH---- C:\hiberfil.sys
2012-08-13 16:54:58 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======

2012-09-08 20:27:53 ----D---- C:\Windows\Temp
2012-09-08 20:27:50 ----RD---- C:\Program Files
2012-09-08 14:14:11 ----D---- C:\Windows\system32\config
2012-09-08 13:45:24 ----D---- C:\Windows\System32
2012-09-08 13:45:24 ----D---- C:\Windows\inf
2012-09-08 13:45:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-08 13:41:11 ----D---- C:\Windows\winsxs
2012-09-08 13:40:44 ----D---- C:\Windows\SysWOW64
2012-09-08 13:26:19 ----D---- C:\Program Files (x86)\Common Files
2012-09-08 13:26:09 ----RD---- C:\Program Files (x86)
2012-09-08 13:24:30 ----D---- C:\Windows
2012-09-08 13:22:25 ----D---- C:\Windows\system32\drivers
2012-09-08 13:22:11 ----D---- C:\Windows\system32\catroot
2012-09-08 13:22:10 ----D---- C:\Windows\system32\DriverStore
2012-09-08 13:19:30 ----D---- C:\Windows\system32\Tasks
2012-09-07 17:41:54 ----D---- C:\Windows\Tasks
2012-09-07 17:41:54 ----D---- C:\Windows\system32\wfp
2012-09-07 17:41:54 ----D---- C:\Program Files (x86)\Internet Explorer
2012-09-07 17:41:52 ----D---- C:\Windows\system32\wbem
2012-09-07 17:41:52 ----D---- C:\Windows\system32\CodeIntegrity
2012-09-07 17:41:51 ----D---- C:\Program Files\Common Files
2012-09-07 17:41:42 ----D---- C:\Windows\registration
2012-09-07 17:40:19 ----SD---- C:\ProgramData\Microsoft
2012-09-07 17:40:14 ----SHD---- C:\$Recycle.Bin
2012-09-07 17:39:36 ----D---- C:\Windows\Logs
2012-09-07 17:39:15 ----D---- C:\Windows\system32\LogFiles
2012-09-07 16:49:01 ----D---- C:\Windows\system32\catroot2
2012-09-07 16:44:42 ----HD---- C:\ProgramData
2012-09-02 19:34:36 ----RSD---- C:\Windows\Fonts
2012-08-28 22:25:16 ----D---- C:\Windows\Microsoft.NET
2012-08-28 22:25:15 ----RSD---- C:\Windows\assembly
2012-08-26 09:13:07 ----D---- C:\Windows\system32\wdi
2012-08-22 15:18:50 ----D---- C:\Windows\Resources
2012-08-18 08:45:05 ----D---- C:\Windows\debug
2012-08-17 23:08:06 ----D---- C:\Windows\LiveKernelReports
2012-08-15 18:16:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-08-15 18:16:36 ----D---- C:\Windows\system32\cs-CZ
2012-08-15 18:11:30 ----D---- C:\Windows\SYSWOW64\en-US
2012-08-15 18:11:30 ----D---- C:\Windows\system32\en-US
2012-08-15 18:03:29 ----D---- C:\Windows\SYSWOW64\migration
2012-08-15 18:03:29 ----D---- C:\Windows\system32\migration
2012-08-15 18:03:29 ----D---- C:\Program Files\Internet Explorer
2012-08-14 23:53:03 ----A---- C:\Windows\win.ini
2012-08-14 18:51:11 ----D---- C:\Program Files\Common Files\System
2012-08-14 18:51:10 ----D---- C:\Windows\ehome
2012-08-14 18:51:08 ----D---- C:\Windows\AppPatch
2012-08-14 18:51:05 ----D---- C:\Windows\PolicyDefinitions
2012-08-14 18:50:58 ----D---- C:\Windows\system32\Boot
2012-08-14 18:50:52 ----D---- C:\Program Files\Windows Journal
2012-08-13 21:16:05 ----RD---- C:\Users
2012-08-13 21:13:11 ----HD---- C:\Windows\system32\GroupPolicyUsers
2012-08-13 21:13:11 ----HD---- C:\Windows\system32\GroupPolicy
2012-08-13 21:03:06 ----D---- C:\Windows\twain_32
2012-08-13 20:43:21 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-08-13 20:42:08 ----D---- C:\Windows\ShellNew
2012-08-13 17:38:00 ----D---- C:\Windows\system32\restore
2012-08-13 17:14:05 ----D---- C:\Windows\system32\drivers\UMDF
2012-08-13 17:06:23 ----D---- C:\Windows\system32\Recovery
2012-08-13 17:06:23 ----D---- C:\Program Files\Windows NT
2012-08-13 17:04:46 ----D---- C:\Windows\rescache
2012-08-13 16:57:52 ----D---- C:\Windows\system32\sysprep
2012-08-13 16:55:29 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2007-10-12 10632]
R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-04-28 16400]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-13 283200]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-04 359936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-03 1477272]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2008-06-18 181024]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S3 androidusb;ADB Interface Driver; C:\Windows\System32\Drivers\androidusb.sys [2010-10-18 38424]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-08-13 20544]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 zghsmdm;ZTE General Handset USB Modem Proprietary; C:\Windows\system32\DRIVERS\zghsmdm.sys [2011-01-13 122624]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-04 238080]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Brother XP spl Service;BrSplService; C:\Windows\SysWOW64\brsvc01a.exe [2004-06-14 57344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-07 114144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-08-14 1255736]

-----------------EOF-----------------

Také zdravím!
Vypněte na zkoušku aut. aktualizace.

Bohužel, po vypnutí aktualizací a restartu je situace stejná...

Zkuste reinstalovat antivir.

NOD 32 - opravit instalaci - beze změny
- odinstalace také beze změny

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

ComboFix 12-09-08.02 - Radek 08.09.2012 23:04:46.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4094.2835 [GMT 2:00]
Spuštěný z: c:\users\Radek\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-08 do 2012-09-08 )))))))))))))))))))))))))))))))
.
.
2012-09-08 21:13 . 2012-09-08 21:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-08 19:51 . 2012-09-08 19:51 -------- d-----w- c:\program files\ESET
2012-09-08 18:27 . 2012-09-08 18:27 -------- d-----w- c:\program files\trend micro
2012-09-08 18:27 . 2012-09-08 18:27 -------- d-----w- C:\rsit
2012-09-08 11:26 . 2012-09-08 11:26 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-08 11:26 . 2012-09-08 11:26 -------- d-----r- c:\program files (x86)\Skype
2012-09-08 11:21 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-09-08 11:21 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-09-08 11:21 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-09-08 11:21 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-09-08 11:21 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-09-08 11:20 . 2012-09-08 11:20 -------- d-----w- c:\windows\system32\appmgmt
2012-09-08 11:05 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2012-09-07 14:44 . 2012-09-07 14:44 -------- d-----w- c:\programdata\ATI
2012-09-07 13:24 . 2012-09-08 11:23 -------- d-----w- c:\program files\Microsoft Silverlight
2012-09-07 13:24 . 2012-09-08 11:23 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-09-07 13:07 . 2012-09-07 13:07 289768 ----a-w- c:\windows\system32\javaws.exe
2012-09-07 13:07 . 2012-09-07 13:07 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-07 13:07 . 2012-09-07 13:07 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-07 13:07 . 2012-09-07 13:07 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-09-07 13:07 . 2012-09-07 13:07 189416 ----a-w- c:\windows\system32\javaw.exe
2012-09-07 13:07 . 2012-09-07 13:07 188904 ----a-w- c:\windows\system32\java.exe
2012-09-07 13:07 . 2012-09-07 13:07 -------- d-----w- c:\program files\Java
2012-09-07 13:06 . 2012-09-07 13:06 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-09-07 13:06 . 2012-09-07 13:06 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-09-07 13:06 . 2012-09-07 13:06 -------- d-----w- c:\program files (x86)\Java
2012-09-07 12:54 . 2012-08-23 08:26 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{194C438A-AF93-4570-85A4-4BDCB778F25F}\mpengine.dll
2012-09-03 12:47 . 2012-09-03 12:47 -------- d-----w- c:\program files\GIMP 2
2012-09-03 08:35 . 2012-09-03 08:35 -------- d-----w- c:\windows\Sun
2012-09-01 18:27 . 2012-09-01 18:27 -------- d-----w- c:\program files (x86)\DXTBmp
2012-09-01 18:27 . 2009-03-10 21:25 191488 ------w- c:\windows\SysWow64\mwgfx.dll
2012-09-01 18:27 . 2008-10-20 11:44 237056 ------w- c:\windows\SysWow64\mwgfx24.dll
2012-09-01 18:27 . 2008-09-05 06:32 104960 ------w- c:\windows\SysWow64\mwdds.dll
2012-09-01 18:27 . 2007-08-19 07:37 28672 ------w- c:\windows\SysWow64\mwgfxcopy.exe
2012-09-01 18:27 . 2004-05-14 09:13 56832 ------w- c:\windows\SysWow64\mwace.dll
2012-09-01 16:53 . 2012-09-01 17:06 -------- d-----w- c:\program files (x86)\DDS Converter 2
2012-09-01 11:38 . 2012-09-01 11:38 -------- d-----w- c:\program files (x86)\GIANTS Software
2012-09-01 11:14 . 2012-09-01 11:14 -------- d-----w- c:\program files (x86)\firstobject
2012-09-01 08:53 . 2012-09-01 08:53 -------- d-----w- c:\program files (x86)\Transcribe!
2012-08-25 20:51 . 2012-08-25 21:36 -------- d-----w- c:\program files\Paint.NET
2012-08-22 13:21 . 2012-08-22 13:21 -------- d-----w- c:\program files\NTCore
2012-08-22 11:40 . 2012-08-24 14:44 -------- d-----w- c:\program files (x86)\JDownloader
2012-08-20 15:15 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-08-20 15:11 . 2012-08-20 15:11 -------- d-----w- c:\program files\DAUM
2012-08-18 07:03 . 2012-08-18 07:03 -------- d-----w- c:\program files (x86)\Oracle
2012-08-18 07:02 . 2012-09-07 13:06 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-08-18 07:02 . 2012-09-07 13:06 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-08-18 06:45 . 2012-08-03 02:27 62134624 ----a-w- c:\windows\system32\MRT.exe
2012-08-17 11:46 . 2012-08-17 11:46 -------- d-----w- c:\programdata\Guitar Pro 6
2012-08-17 11:44 . 2012-08-17 11:44 -------- d-----w- c:\program files (x86)\Guitar Pro 6
2012-08-15 17:10 . 2012-08-15 17:10 -------- d-----w- c:\programdata\Mirillis
2012-08-15 17:08 . 2012-08-15 17:08 -------- d-----w- c:\program files (x86)\Mirillis
2012-08-14 18:56 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2012-08-14 16:51 . 2012-08-14 16:51 -------- d-----w- c:\windows\SysWow64\Wat
2012-08-14 16:51 . 2012-08-14 16:51 -------- d-----w- c:\windows\system32\Wat
2012-08-14 10:14 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-08-14 10:06 . 2012-08-14 10:06 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-08-14 10:04 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-08-14 10:04 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-08-14 10:04 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-08-14 10:04 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-08-14 10:04 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-08-14 10:04 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-08-14 10:04 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-08-14 08:25 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-08-14 08:24 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-08-14 08:23 . 2011-08-17 05:26 613888 ----a-w- c:\windows\system32\psisdecd.dll
2012-08-14 08:22 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-08-14 08:21 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-08-14 08:21 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-08-14 08:17 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-08-14 08:17 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-08-13 19:16 . 2012-09-08 09:13 -------- d-----w- c:\users\Zuzka
2012-08-13 18:57 . 2012-08-13 18:57 -------- d-----w- c:\programdata\Brother
2012-08-13 18:55 . 2012-08-13 18:55 -------- d-----w- c:\program files (x86)\AIMP3
2012-08-13 18:44 . 2012-08-14 10:06 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-08-13 18:43 . 2012-08-15 16:11 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-08-13 18:43 . 2012-08-13 18:43 -------- d-----w- c:\windows\PCHEALTH
2012-08-13 18:42 . 2012-08-13 18:42 -------- d-----w- c:\program files\Microsoft Office
2012-08-13 18:41 . 2012-08-14 21:55 -------- d-----w- c:\programdata\Microsoft Help
2012-08-13 18:35 . 2012-08-13 18:35 -------- d-----r- C:\MSOCache
2012-08-13 17:01 . 2007-04-04 16:53 81768 ----a-w- c:\windows\SysWow64\xinput1_3.dll
2012-08-13 16:53 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\AMD AVT
2012-08-13 16:53 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\AMD APP
2012-08-13 16:52 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-08-13 16:52 . 2012-09-07 14:44 -------- d-----w- c:\programdata\AMD
2012-08-13 16:52 . 2010-02-18 07:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-08-13 16:49 . 2012-08-13 16:49 -------- d-----w- C:\AMD
2012-08-13 16:48 . 2012-08-13 16:49 -------- d-----w- c:\program files (x86)\Notepad++
2012-08-13 16:47 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
2012-08-13 16:47 . 2012-08-13 16:47 -------- d-----w- c:\program files\Common Files\Bullzip
2012-08-13 16:47 . 2010-09-27 13:27 135168 ----a-w- c:\windows\SysWow64\bzpdfc.dll
2012-08-13 16:47 . 2008-10-30 21:15 227840 ----a-w- c:\windows\SysWow64\bzFlRdr.dll
2012-08-13 16:47 . 2008-07-09 22:19 103424 ----a-w- c:\windows\SysWow64\bzDCT.dll
2012-08-13 16:47 . 2011-05-17 18:47 214528 ----a-w- c:\windows\system32\bzpdf.dll
2012-08-13 16:47 . 2012-08-13 16:47 -------- d-----w- c:\program files\Bullzip
2012-08-13 16:47 . 1999-05-06 22:00 140288 ----a-w- c:\windows\SysWow64\comdlg32.OCX
2012-08-13 16:40 . 2012-09-08 11:26 -------- d-----w- c:\programdata\Skype
2012-08-13 16:36 . 2012-08-13 16:36 -------- d-----w- c:\program files (x86)\FreeCommander
2012-08-13 16:35 . 2012-09-02 06:30 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-13 16:35 . 2012-09-02 06:30 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-13 16:35 . 2012-08-13 16:35 -------- d-----w- c:\windows\SysWow64\Macromed
2012-08-13 16:35 . 2012-08-13 16:35 -------- d-----w- c:\windows\system32\Macromed
2012-08-13 16:34 . 2012-08-13 16:34 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-08-13 16:30 . 2012-08-13 16:30 -------- d-----w- c:\program files (x86)\Zoner
2012-08-13 16:22 . 2012-08-13 16:22 -------- d-----w- c:\programdata\ashampoo
2012-08-13 16:22 . 2012-08-13 16:22 -------- d-----w- c:\program files (x86)\Ashampoo
2012-08-13 16:20 . 2012-08-13 16:20 -------- d-----w- c:\programdata\Ask
2012-08-13 16:10 . 2011-04-04 18:27 -------- d-----w- c:\program files\WinRAR
2012-08-13 16:08 . 2012-08-13 16:08 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-13 16:08 . 2012-08-13 16:08 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-08-13 16:08 . 2012-08-13 16:59 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-08-13 16:03 . 2012-08-13 16:06 -------- d-----w- c:\program files (x86)\MozBackup
2012-08-13 16:03 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-08-13 15:54 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\ATI Technologies
2012-08-13 15:54 . 2012-08-13 15:06 -------- d-----w- c:\windows\Panther
2012-08-13 15:54 . 2012-08-13 15:54 -------- d-----w- C:\Boot
2012-08-13 15:53 . 2007-10-12 01:40 10632 ----a-w- c:\windows\system32\drivers\amdide64.sys
2012-08-13 15:53 . 2008-04-28 13:25 16400 ----a-w- c:\windows\system32\drivers\AtiPcie.sys
2012-08-13 15:53 . 2012-09-07 15:41 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-08-13 15:52 . 2012-09-08 19:53 -------- d-sh--w- c:\windows\Installer
2012-08-13 15:52 . 2012-09-07 15:41 -------- d-----w- c:\program files\ATI
2012-08-13 15:51 . 2012-09-07 15:41 -------- d-----w- c:\program files\ATI Technologies
2012-08-13 15:50 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-08-13 15:50 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-04 06:59 . 2012-07-04 06:59 11922944 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-07-04 06:52 . 2012-07-04 06:52 26016256 ----a-w- c:\windows\system32\atio6axx.dll
2012-07-04 06:35 . 2012-07-04 06:35 19586048 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-07-04 06:27 . 2012-07-04 06:27 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-07-04 06:27 . 2012-07-04 06:27 918528 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-07-04 06:25 . 2012-07-04 06:25 1081856 ----a-w- c:\windows\system32\aticfx64.dll
2012-07-04 06:21 . 2012-07-04 06:21 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-07-04 06:21 . 2012-07-04 06:21 514048 ----a-w- c:\windows\system32\atieclxx.exe
2012-07-04 06:20 . 2009-08-18 00:36 238080 ----a-w- c:\windows\system32\atiesrxx.exe
2012-07-04 06:19 . 2012-07-04 06:19 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-07-04 06:19 . 2012-07-04 06:19 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-07-04 06:19 . 2008-06-03 03:34 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-07-04 06:19 . 2012-07-04 06:19 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-07-04 06:18 . 2012-07-04 06:18 6811648 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-07-04 05:57 . 2009-07-13 21:59 7510528 ----a-w- c:\windows\system32\atidxx64.dll
2012-07-04 05:36 . 2012-07-04 05:36 1053696 ----a-w- c:\windows\system32\atiumd6v.dll
2012-07-04 05:36 . 2012-07-04 05:36 69632 ----a-w- c:\windows\system32\coinst_8.97.100.3.dll
2012-07-04 05:36 . 2012-07-04 05:36 1960960 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2012-07-04 05:35 . 2008-06-03 03:05 4261376 ----a-w- c:\windows\system32\atiumd6a.dll
2012-07-04 05:35 . 2008-06-03 03:19 6245888 ----a-w- c:\windows\SysWow64\atiumdag.dll
2012-07-04 05:28 . 2008-06-03 03:02 4749312 ----a-w- c:\windows\SysWow64\atiumdva.dll
2012-07-04 05:24 . 2008-06-03 03:13 7477760 ----a-w- c:\windows\system32\atiumd64.dll
2012-07-04 05:11 . 2012-07-04 05:11 56320 ----a-w- c:\windows\system32\atimpc64.dll
2012-07-04 05:11 . 2012-07-04 05:11 56320 ----a-w- c:\windows\system32\amdpcom64.dll
2012-07-04 05:11 . 2012-07-04 05:11 535552 ----a-w- c:\windows\system32\atiadlxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
2012-07-04 05:11 . 2012-07-04 05:11 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2012-07-04 05:11 . 2012-07-04 05:11 364544 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2012-07-04 05:11 . 2012-07-04 05:11 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 41984 ----a-w- c:\windows\system32\atig6txx.dll
2012-07-04 05:11 . 2012-07-04 05:11 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
2012-07-04 05:10 . 2012-07-04 05:10 359936 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-07-04 05:10 . 2012-07-04 05:10 55296 ----a-w- c:\windows\system32\atiuxp64.dll
2012-07-04 05:09 . 2012-07-04 05:09 42496 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2012-07-04 05:09 . 2012-07-04 05:09 45056 ----a-w- c:\windows\system32\atiu9p64.dll
2012-07-04 05:09 . 2012-07-04 05:09 32768 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2012-07-04 05:09 . 2012-07-04 05:09 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-07-04 05:04 . 2012-07-04 05:04 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-07-04 05:04 . 2012-07-04 05:04 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2012-07-04 05:04 . 2012-07-04 05:04 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-07-04 05:04 . 2012-07-04 05:04 44544 ----a-w- c:\windows\SysWow64\aticalcl.dll
2012-07-04 05:04 . 2012-07-04 05:04 15827456 ----a-w- c:\windows\system32\aticaldd64.dll
2012-07-04 04:59 . 2012-07-04 04:59 13402112 ----a-w- c:\windows\SysWow64\aticaldd.dll
2012-07-04 00:32 . 2012-07-04 00:32 187392 ----a-w- c:\windows\system32\clinfo.exe
2012-07-04 00:32 . 2012-07-04 00:32 75264 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-07-04 00:32 . 2012-07-04 00:32 65024 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2012-07-04 00:31 . 2012-07-04 00:31 63488 ----a-w- c:\windows\system32\OVDecode64.dll
2012-07-04 00:31 . 2012-07-04 00:31 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2012-07-04 00:31 . 2012-07-04 00:31 16457216 ----a-w- c:\windows\system32\amdocl64.dll
2012-07-04 00:30 . 2012-07-04 00:30 13008384 ----a-w- c:\windows\SysWow64\amdocl.dll
2012-07-04 00:30 . 2012-07-04 00:30 54784 ----a-w- c:\windows\system32\OpenCL.dll
2012-07-04 00:30 . 2012-07-04 00:30 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 641704]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys [2010-10-18 38424]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-07 114144]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-14 1255736]
R3 zghsmdm;ZTE General Handset USB Modem Proprietary;c:\windows\system32\DRIVERS\zghsmdm.sys [2011-01-13 122624]
S0 amdide64;amdide64;c:\windows\system32\DRIVERS\amdide64.sys [2007-10-12 10632]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-13 283200]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-04 238080]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-03 361984]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-07-04 359936]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000Core.job
- c:\users\Radek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-13 15:45]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000UA.job
- c:\users\Radek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-13 15:45]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004Core.job
- c:\users\Zuzka\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-13 19:24]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004UA.job
- c:\users\Zuzka\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-13 19:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2008-07-03 6430208]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 4081008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2207613&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\brsvc01a.exe
c:\windows\SysWOW64\brss01a.exe
.
**************************************************************************
.
Celkový čas: 2012-09-08 23:33:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-09-08 21:32
.
Před spuštěním: Volných bajtů: 71 877 906 432
Po spuštění: Volných bajtů: 71 972 007 936
.
- - End Of File - - 80EA1CED263792831DE9AC3A6F147D87

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004UA.job

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Firefox::
FF - ProfilePath - c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Vytížení je pořád >50% při nečinnosti...

ComboFix 12-09-08.02 - Radek 09.09.2012 12:03:23.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4094.2631 [GMT 2:00]
Spuštěný z: c:\users\Radek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Radek\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000UA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1706547199-1059790250-1939580296-1004UA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-09 do 2012-09-09 )))))))))))))))))))))))))))))))
.
.
2012-09-09 10:13 . 2012-09-09 10:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-08 19:51 . 2012-09-08 19:51 -------- d-----w- c:\program files\ESET
2012-09-08 18:27 . 2012-09-08 18:27 -------- d-----w- c:\program files\trend micro
2012-09-08 18:27 . 2012-09-08 18:27 -------- d-----w- C:\rsit
2012-09-08 11:26 . 2012-09-08 11:26 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-08 11:26 . 2012-09-08 11:26 -------- d-----r- c:\program files (x86)\Skype
2012-09-08 11:21 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-09-08 11:21 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-09-08 11:21 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-09-08 11:21 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-09-08 11:21 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-09-08 11:20 . 2012-09-08 11:20 -------- d-----w- c:\windows\system32\appmgmt
2012-09-08 11:05 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2012-09-07 14:44 . 2012-09-07 14:44 -------- d-----w- c:\programdata\ATI
2012-09-07 13:24 . 2012-09-08 11:23 -------- d-----w- c:\program files\Microsoft Silverlight
2012-09-07 13:24 . 2012-09-08 11:23 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-09-07 13:07 . 2012-09-07 13:07 289768 ----a-w- c:\windows\system32\javaws.exe
2012-09-07 13:07 . 2012-09-07 13:07 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-07 13:07 . 2012-09-07 13:07 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-07 13:07 . 2012-09-07 13:07 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-09-07 13:07 . 2012-09-07 13:07 189416 ----a-w- c:\windows\system32\javaw.exe
2012-09-07 13:07 . 2012-09-07 13:07 188904 ----a-w- c:\windows\system32\java.exe
2012-09-07 13:07 . 2012-09-07 13:07 -------- d-----w- c:\program files\Java
2012-09-07 13:06 . 2012-09-07 13:06 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-09-07 13:06 . 2012-09-07 13:06 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-09-07 13:06 . 2012-09-07 13:06 -------- d-----w- c:\program files (x86)\Java
2012-09-07 12:54 . 2012-08-23 08:26 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{194C438A-AF93-4570-85A4-4BDCB778F25F}\mpengine.dll
2012-09-03 12:47 . 2012-09-03 12:47 -------- d-----w- c:\program files\GIMP 2
2012-09-03 08:35 . 2012-09-03 08:35 -------- d-----w- c:\windows\Sun
2012-09-01 18:27 . 2012-09-01 18:27 -------- d-----w- c:\program files (x86)\DXTBmp
2012-09-01 18:27 . 2009-03-10 21:25 191488 ------w- c:\windows\SysWow64\mwgfx.dll
2012-09-01 18:27 . 2008-10-20 11:44 237056 ------w- c:\windows\SysWow64\mwgfx24.dll
2012-09-01 18:27 . 2008-09-05 06:32 104960 ------w- c:\windows\SysWow64\mwdds.dll
2012-09-01 18:27 . 2007-08-19 07:37 28672 ------w- c:\windows\SysWow64\mwgfxcopy.exe
2012-09-01 18:27 . 2004-05-14 09:13 56832 ------w- c:\windows\SysWow64\mwace.dll
2012-09-01 16:53 . 2012-09-01 17:06 -------- d-----w- c:\program files (x86)\DDS Converter 2
2012-09-01 11:38 . 2012-09-01 11:38 -------- d-----w- c:\program files (x86)\GIANTS Software
2012-09-01 11:14 . 2012-09-01 11:14 -------- d-----w- c:\program files (x86)\firstobject
2012-09-01 08:53 . 2012-09-01 08:53 -------- d-----w- c:\program files (x86)\Transcribe!
2012-08-25 20:51 . 2012-08-25 21:36 -------- d-----w- c:\program files\Paint.NET
2012-08-22 13:21 . 2012-08-22 13:21 -------- d-----w- c:\program files\NTCore
2012-08-22 11:40 . 2012-08-24 14:44 -------- d-----w- c:\program files (x86)\JDownloader
2012-08-20 15:15 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-08-20 15:11 . 2012-08-20 15:11 -------- d-----w- c:\program files\DAUM
2012-08-18 07:03 . 2012-08-18 07:03 -------- d-----w- c:\program files (x86)\Oracle
2012-08-18 07:02 . 2012-09-07 13:06 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-08-18 07:02 . 2012-09-07 13:06 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-08-18 06:45 . 2012-08-03 02:27 62134624 ----a-w- c:\windows\system32\MRT.exe
2012-08-17 11:46 . 2012-08-17 11:46 -------- d-----w- c:\programdata\Guitar Pro 6
2012-08-17 11:44 . 2012-08-17 11:44 -------- d-----w- c:\program files (x86)\Guitar Pro 6
2012-08-15 17:10 . 2012-08-15 17:10 -------- d-----w- c:\programdata\Mirillis
2012-08-15 17:08 . 2012-08-15 17:08 -------- d-----w- c:\program files (x86)\Mirillis
2012-08-14 18:56 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2012-08-14 16:51 . 2012-08-14 16:51 -------- d-----w- c:\windows\SysWow64\Wat
2012-08-14 16:51 . 2012-08-14 16:51 -------- d-----w- c:\windows\system32\Wat
2012-08-14 10:14 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-08-14 10:06 . 2012-08-14 10:06 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-08-14 10:04 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-08-14 10:04 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-08-14 10:04 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-08-14 10:04 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-08-14 10:04 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-08-14 10:04 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-08-14 10:04 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-08-14 08:25 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-08-14 08:24 . 2011-02-19 12:03 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-08-14 08:23 . 2011-08-17 05:26 613888 ----a-w- c:\windows\system32\psisdecd.dll
2012-08-14 08:22 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-08-14 08:21 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-08-14 08:21 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-08-14 08:17 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-08-14 08:17 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-08-13 19:16 . 2012-09-08 09:13 -------- d-----w- c:\users\Zuzka
2012-08-13 18:57 . 2012-08-13 18:57 -------- d-----w- c:\programdata\Brother
2012-08-13 18:55 . 2012-08-13 18:55 -------- d-----w- c:\program files (x86)\AIMP3
2012-08-13 18:44 . 2012-08-14 10:06 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-08-13 18:43 . 2012-08-15 16:11 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-08-13 18:43 . 2012-08-13 18:43 -------- d-----w- c:\windows\PCHEALTH
2012-08-13 18:42 . 2012-08-13 18:42 -------- d-----w- c:\program files\Microsoft Office
2012-08-13 18:41 . 2012-08-14 21:55 -------- d-----w- c:\programdata\Microsoft Help
2012-08-13 18:35 . 2012-08-13 18:35 -------- d-----r- C:\MSOCache
2012-08-13 17:01 . 2007-04-04 16:53 81768 ----a-w- c:\windows\SysWow64\xinput1_3.dll
2012-08-13 16:53 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\AMD AVT
2012-08-13 16:53 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\AMD APP
2012-08-13 16:52 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-08-13 16:52 . 2012-09-07 14:44 -------- d-----w- c:\programdata\AMD
2012-08-13 16:52 . 2010-02-18 07:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-08-13 16:49 . 2012-08-13 16:49 -------- d-----w- C:\AMD
2012-08-13 16:48 . 2012-08-13 16:49 -------- d-----w- c:\program files (x86)\Notepad++
2012-08-13 16:47 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
2012-08-13 16:47 . 2012-08-13 16:47 -------- d-----w- c:\program files\Common Files\Bullzip
2012-08-13 16:47 . 2010-09-27 13:27 135168 ----a-w- c:\windows\SysWow64\bzpdfc.dll
2012-08-13 16:47 . 2008-10-30 21:15 227840 ----a-w- c:\windows\SysWow64\bzFlRdr.dll
2012-08-13 16:47 . 2008-07-09 22:19 103424 ----a-w- c:\windows\SysWow64\bzDCT.dll
2012-08-13 16:47 . 2011-05-17 18:47 214528 ----a-w- c:\windows\system32\bzpdf.dll
2012-08-13 16:47 . 2012-08-13 16:47 -------- d-----w- c:\program files\Bullzip
2012-08-13 16:47 . 1999-05-06 22:00 140288 ----a-w- c:\windows\SysWow64\comdlg32.OCX
2012-08-13 16:40 . 2012-09-08 11:26 -------- d-----w- c:\programdata\Skype
2012-08-13 16:36 . 2012-08-13 16:36 -------- d-----w- c:\program files (x86)\FreeCommander
2012-08-13 16:35 . 2012-09-02 06:30 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-13 16:35 . 2012-09-02 06:30 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-13 16:35 . 2012-08-13 16:35 -------- d-----w- c:\windows\SysWow64\Macromed
2012-08-13 16:35 . 2012-08-13 16:35 -------- d-----w- c:\windows\system32\Macromed
2012-08-13 16:34 . 2012-08-13 16:34 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-08-13 16:30 . 2012-08-13 16:30 -------- d-----w- c:\program files (x86)\Zoner
2012-08-13 16:22 . 2012-08-13 16:22 -------- d-----w- c:\programdata\ashampoo
2012-08-13 16:22 . 2012-08-13 16:22 -------- d-----w- c:\program files (x86)\Ashampoo
2012-08-13 16:20 . 2012-08-13 16:20 -------- d-----w- c:\programdata\Ask
2012-08-13 16:10 . 2011-04-04 18:27 -------- d-----w- c:\program files\WinRAR
2012-08-13 16:08 . 2012-08-13 16:08 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-13 16:08 . 2012-08-13 16:08 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-08-13 16:08 . 2012-08-13 16:59 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-08-13 16:03 . 2012-08-13 16:06 -------- d-----w- c:\program files (x86)\MozBackup
2012-08-13 16:03 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-08-13 15:54 . 2012-09-07 15:41 -------- d-----w- c:\program files (x86)\ATI Technologies
2012-08-13 15:54 . 2012-08-13 15:06 -------- d-----w- c:\windows\Panther
2012-08-13 15:54 . 2012-08-13 15:54 -------- d-----w- C:\Boot
2012-08-13 15:53 . 2007-10-12 01:40 10632 ----a-w- c:\windows\system32\drivers\amdide64.sys
2012-08-13 15:53 . 2008-04-28 13:25 16400 ----a-w- c:\windows\system32\drivers\AtiPcie.sys
2012-08-13 15:53 . 2012-09-07 15:41 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-08-13 15:52 . 2012-09-08 19:53 -------- d-sh--w- c:\windows\Installer
2012-08-13 15:52 . 2012-09-07 15:41 -------- d-----w- c:\program files\ATI
2012-08-13 15:51 . 2012-09-07 15:41 -------- d-----w- c:\program files\ATI Technologies
2012-08-13 15:50 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-08-13 15:50 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-04 06:59 . 2012-07-04 06:59 11922944 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-07-04 06:52 . 2012-07-04 06:52 26016256 ----a-w- c:\windows\system32\atio6axx.dll
2012-07-04 06:35 . 2012-07-04 06:35 19586048 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-07-04 06:27 . 2012-07-04 06:27 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-07-04 06:27 . 2012-07-04 06:27 918528 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-07-04 06:25 . 2012-07-04 06:25 1081856 ----a-w- c:\windows\system32\aticfx64.dll
2012-07-04 06:21 . 2012-07-04 06:21 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-07-04 06:21 . 2012-07-04 06:21 514048 ----a-w- c:\windows\system32\atieclxx.exe
2012-07-04 06:20 . 2009-08-18 00:36 238080 ----a-w- c:\windows\system32\atiesrxx.exe
2012-07-04 06:19 . 2012-07-04 06:19 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-07-04 06:19 . 2012-07-04 06:19 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-07-04 06:19 . 2008-06-03 03:34 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-07-04 06:19 . 2012-07-04 06:19 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-07-04 06:18 . 2012-07-04 06:18 6811648 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-07-04 05:57 . 2009-07-13 21:59 7510528 ----a-w- c:\windows\system32\atidxx64.dll
2012-07-04 05:36 . 2012-07-04 05:36 1053696 ----a-w- c:\windows\system32\atiumd6v.dll
2012-07-04 05:36 . 2012-07-04 05:36 69632 ----a-w- c:\windows\system32\coinst_8.97.100.3.dll
2012-07-04 05:36 . 2012-07-04 05:36 1960960 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2012-07-04 05:35 . 2008-06-03 03:05 4261376 ----a-w- c:\windows\system32\atiumd6a.dll
2012-07-04 05:35 . 2008-06-03 03:19 6245888 ----a-w- c:\windows\SysWow64\atiumdag.dll
2012-07-04 05:28 . 2008-06-03 03:02 4749312 ----a-w- c:\windows\SysWow64\atiumdva.dll
2012-07-04 05:24 . 2008-06-03 03:13 7477760 ----a-w- c:\windows\system32\atiumd64.dll
2012-07-04 05:11 . 2012-07-04 05:11 56320 ----a-w- c:\windows\system32\atimpc64.dll
2012-07-04 05:11 . 2012-07-04 05:11 56320 ----a-w- c:\windows\system32\amdpcom64.dll
2012-07-04 05:11 . 2012-07-04 05:11 535552 ----a-w- c:\windows\system32\atiadlxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
2012-07-04 05:11 . 2012-07-04 05:11 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2012-07-04 05:11 . 2012-07-04 05:11 364544 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2012-07-04 05:11 . 2012-07-04 05:11 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-07-04 05:11 . 2012-07-04 05:11 41984 ----a-w- c:\windows\system32\atig6txx.dll
2012-07-04 05:11 . 2012-07-04 05:11 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
2012-07-04 05:10 . 2012-07-04 05:10 359936 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-07-04 05:10 . 2012-07-04 05:10 55296 ----a-w- c:\windows\system32\atiuxp64.dll
2012-07-04 05:09 . 2012-07-04 05:09 42496 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2012-07-04 05:09 . 2012-07-04 05:09 45056 ----a-w- c:\windows\system32\atiu9p64.dll
2012-07-04 05:09 . 2012-07-04 05:09 32768 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2012-07-04 05:09 . 2012-07-04 05:09 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-07-04 05:04 . 2012-07-04 05:04 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-07-04 05:04 . 2012-07-04 05:04 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2012-07-04 05:04 . 2012-07-04 05:04 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-07-04 05:04 . 2012-07-04 05:04 44544 ----a-w- c:\windows\SysWow64\aticalcl.dll
2012-07-04 05:04 . 2012-07-04 05:04 15827456 ----a-w- c:\windows\system32\aticaldd64.dll
2012-07-04 04:59 . 2012-07-04 04:59 13402112 ----a-w- c:\windows\SysWow64\aticaldd.dll
2012-07-04 00:32 . 2012-07-04 00:32 187392 ----a-w- c:\windows\system32\clinfo.exe
2012-07-04 00:32 . 2012-07-04 00:32 75264 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-07-04 00:32 . 2012-07-04 00:32 65024 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2012-07-04 00:31 . 2012-07-04 00:31 63488 ----a-w- c:\windows\system32\OVDecode64.dll
2012-07-04 00:31 . 2012-07-04 00:31 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2012-07-04 00:31 . 2012-07-04 00:31 16457216 ----a-w- c:\windows\system32\amdocl64.dll
2012-07-04 00:30 . 2012-07-04 00:30 13008384 ----a-w- c:\windows\SysWow64\amdocl.dll
2012-07-04 00:30 . 2012-07-04 00:30 54784 ----a-w- c:\windows\system32\OpenCL.dll
2012-07-04 00:30 . 2012-07-04 00:30 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-09-08_21.17.53 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-11-21 03:09 . 2012-09-09 07:40 30454 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-09-09 07:40 36032 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-08-13 15:26 . 2012-09-09 07:40 6746 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1706547199-1059790250-1939580296-1000_UserData.bin
+ 2012-09-09 10:15 . 2012-09-09 10:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-09-08 21:15 . 2012-09-08 21:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-09-08 21:15 . 2012-09-08 21:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-09-09 10:15 . 2012-09-09 10:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 02:36 . 2012-09-09 07:44 618714 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-09-08 19:49 618714 c:\windows\system32\perfh009.dat
- 2011-04-12 08:34 . 2012-09-08 19:49 634308 c:\windows\system32\perfh005.dat
+ 2011-04-12 08:34 . 2012-09-09 07:44 634308 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-09-09 07:44 107034 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-09-08 19:49 107034 c:\windows\system32\perfc009.dat
- 2011-04-12 08:34 . 2012-09-08 19:49 122898 c:\windows\system32\perfc005.dat
+ 2011-04-12 08:34 . 2012-09-09 07:44 122898 c:\windows\system32\perfc005.dat
+ 2009-07-14 05:01 . 2012-09-09 10:14 322188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2012-09-08 21:14 322188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-08-13 19:05 . 2012-09-09 10:14 1574352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2012-08-13 19:05 . 2012-09-08 21:14 1574352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2012-08-13 19:05 . 2012-09-09 10:14 42794375 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1706547199-1059790250-1939580296-1000-12288.dat
- 2012-08-13 19:05 . 2012-09-08 21:14 42794375 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1706547199-1059790250-1939580296-1000-12288.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2008-06-02 380928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 641704]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys [2010-10-18 38424]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-07 114144]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-14 1255736]
R3 zghsmdm;ZTE General Handset USB Modem Proprietary;c:\windows\system32\DRIVERS\zghsmdm.sys [2011-01-13 122624]
S0 amdide64;amdide64;c:\windows\system32\DRIVERS\amdide64.sys [2007-10-12 10632]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-13 283200]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-04 238080]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-03 361984]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-07-04 359936]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2008-07-03 6430208]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 4081008]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\yp8mqvye.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\brsvc01a.exe
c:\windows\SysWOW64\brss01a.exe
.
**************************************************************************
.
Celkový čas: 2012-09-09 12:31:33 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-09-09 10:31
ComboFix2.txt 2012-09-08 21:33
.
Před spuštěním: Volných bajtů: 77 113 577 472
Po spuštění: Volných bajtů: 77 033 680 896
.
- - End Of File - - 22A5EE9016C5CC26D494281635115E7B

svchost je ovládání síť. služeb. Něco regulérní se zřejmě snaží dostat na internet. Nainstalujte ProcessExplorer: http://www.stahuj.centrum.cz/utility_a_ ... -explorer/ a pomocí něho zjistěte detaily jednotlivých spuštěných služeb. Na daný svchost bude něco navázáno a to způsobuje popisovaný problém.

Procesy pod svchost zabírají nula nula nic...neví jestli z toho něco vydedukujete...

Podle mého je výpis naprosto normální, rozhodně se nejedná o virový problém. V systému neběží nic zbytečného, jen něteré procesy svchost odebírají více systémových prostředků. Svchost je spuštěn tolikrát, kolik síť. služeb obsluhuje. Co se stane, když některý z nich vypnete (zastavíte).

Když jsem ukončil svchost, který měl pod sebou proces "dwm.exe" (tento svchost bral nejvíce %), tak využití procesoru nešlo nad 15%, bohužel se asi po nějakém čase zase zapnul. Druhý nejvytěžující měl pod sebou procesy "rundll32.exe" a "WmiPrvSE.exe", po ukončení vyskočila hláška "Systém Windows musí být restartován, protože služba Spouštěč procesů serveru DCOM byla neočekávaně ukončena."

U všech procesů se jedná o regulérní systémové procesy. Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.

Log z AVPTool:

Status: Detected (events: 1)
9.9.2012 20:29:53 Detected Trojan program Trojan-Spy.Win32.Delf.hnq D:\Radek\TT utility\____.rar//Tomtom3.exe//PE_Patch.PECompact//PecBundle//PECompact High