VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by janko urda at 2012-09-25 21:09:29
Systém Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 29 GB (72%) free of 40 GB
Total RAM: 2039 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:09:40, on 25.9.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\janko urda\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\janko urda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA2.dll
O2 - BHO: MyAshampoo - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA2.dll
O2 - BHO: IEWebHook - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Documents and Settings\janko urda\Application Data\Media Finder\Extensions\IEPlugin32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll
O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA2.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /qn /I "C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MST" WISE_SETUP_EXE_PATH="E:\PhysX\PhysX_9.10.0513_SystemSoftware.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O24 - Desktop Component 0: (no name) - http://photos.living.sk/advertisers/age ... 1374_f.jpg

--
End of file - 5936 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-839522115-725345543-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-839522115-725345543-1004UA.job
C:\WINDOWS\tasks\SpeedyPC Pro.job
C:\WINDOWS\tasks\SpeedyPC Registration3.job
C:\WINDOWS\tasks\SpeedyPC Update Version3.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar - C:\Program Files\MyAshampoo\prxtbMyA2.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2}]
Plugin for Media Finder - C:\Documents and Settings\janko urda\Application Data\Media Finder\Extensions\IEPlugin32.dll [2011-12-07 307200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files\Yontoo\YontooIEClient.dll [2012-03-27 792864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - MyAshampoo Toolbar - C:\Program Files\MyAshampoo\prxtbMyA2.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-11-06 142104]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-11-06 162584]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-11-06 138008]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2007-07-10 136176]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584]
"Media Finder"=C:\Program Files\Media Finder\Media Finder.exe /opentotray []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-02-28 15360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /qn /I C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MST WISE_SETUP_EXE_PATH=E:\PhysX\PhysX_9.10.0513_SystemSoftware.exe []

C:\Documents and Settings\janko urda\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-11-06 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-09-25 21:09:30 ----D---- C:\Program Files\trend micro
2012-09-25 21:09:29 ----D---- C:\rsit
2012-09-25 20:52:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-09-25 20:49:21 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2012-09-25 20:42:39 ----HDC---- C:\WINDOWS\$NtUninstallKB914882$
2012-09-25 20:35:11 ----D---- C:\Documents and Settings\janko urda\Application Data\Origin
2012-09-25 20:20:09 ----D---- C:\Documents and Settings\janko urda\Application Data\Malwarebytes
2012-09-25 20:20:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2012-09-25 20:20:08 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-09-25 20:20:06 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2012-09-25 16:10:32 ----D---- C:\Documents and Settings\janko urda\Application Data\TeamViewer
2012-09-25 16:10:25 ----D---- C:\Program Files\TeamViewer
2012-09-25 16:07:54 ----D---- C:\Program Files\Foxit Software
2012-09-25 16:07:08 ----D---- C:\Documents and Settings\janko urda\Application Data\vlc
2012-09-25 16:05:00 ----D---- C:\Program Files\VideoLAN
2012-09-25 16:04:12 ----D---- C:\totalcmd
2012-09-25 16:04:12 ----D---- C:\Documents and Settings\janko urda\Application Data\GHISLER
2012-09-25 16:04:12 ----A---- C:\WINDOWS\UC.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\RAR.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\PKZIP.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\LHA.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\ARJ.PIF
2012-09-25 16:01:48 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-09-25 16:01:48 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-09-25 16:01:46 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-09-25 16:01:45 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-09-25 16:01:45 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-09-25 16:01:20 ----A---- C:\WINDOWS\avastSS.scr
2012-09-25 16:01:19 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-09-25 16:01:00 ----D---- C:\Program Files\AVAST Software
2012-09-25 16:01:00 ----D---- C:\Documents and Settings\All Users\Application Data\AVAST Software
2012-09-22 19:43:36 ----D---- C:\Documents and Settings\All Users\Application Data\Origin
2012-09-22 19:43:35 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2012-09-22 19:03:20 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2012-09-22 19:03:17 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2012-09-22 19:03:17 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2012-09-22 19:03:13 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2012-09-22 19:03:13 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2012-09-22 19:03:12 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2012-09-22 19:03:10 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2012-09-22 19:03:05 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2012-09-22 19:03:03 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2012-09-22 19:03:03 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2012-09-22 19:02:56 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2012-09-22 19:02:56 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2012-09-22 19:02:55 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2012-09-22 19:02:30 ----D---- C:\WINDOWS\Logs
2012-09-22 19:02:25 ----D---- C:\Program Files\Electronic Arts
2012-09-22 18:45:28 ----D---- C:\Documents and Settings\All Users\Application Data\Solidshield
2012-09-22 12:11:35 ----A---- C:\WINDOWS\system32\igfxres.dll
2012-09-22 12:06:53 ----D---- C:\WINDOWS\Prefetch
2012-09-22 11:56:56 ----A---- C:\WINDOWS\pnplog.txt
2012-09-22 11:49:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-09-22 11:49:57 ----A---- C:\WINDOWS\system32\irclass.dll
2012-09-22 11:49:43 ----RA---- C:\WINDOWS\SETDA.tmp
2012-09-22 11:49:38 ----RA---- C:\WINDOWS\SETA7.tmp
2012-09-22 11:49:33 ----RA---- C:\WINDOWS\SET9B.tmp
2012-09-22 11:49:32 ----RA---- C:\WINDOWS\SET98.tmp
2012-09-22 11:37:43 ----A---- C:\WINDOWS\UPGRADE.TXT
2012-09-22 11:37:38 ----D---- C:\WINDOWS\setup.pss
2012-09-14 10:41:46 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-09-01 22:23:27 ----A---- C:\WINDOWS\ModemLog_ZTE Proprietary USB Modem.txt
2012-09-01 22:17:27 ----D---- C:\Documents and Settings\All Users\Application Data\mquadr.at
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbnet.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\massfilter.sys
2012-09-01 22:16:54 ----A---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\wdfcoinstaller01007.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01007.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\usbccid.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_juextctrl.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcecm.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jubusenum.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_hwupgrade.sys
2012-09-01 22:16:34 ----A---- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys
2012-09-01 22:16:34 ----A---- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys
2012-09-01 22:16:29 ----HDC---- C:\Documents and Settings\All Users\Application Data\{7DECD834-973E-4B75-9B37-79105C3EA3B6}
2012-09-01 22:16:16 ----D---- C:\Program Files\bob internet

======List of files/folders modified in the last 1 month======

2012-09-25 21:09:30 ----RD---- C:\Program Files
2012-09-25 21:02:32 ----D---- C:\WINDOWS\Temp
2012-09-25 21:01:52 ----D---- C:\WINDOWS
2012-09-25 21:01:05 ----D---- C:\WINDOWS\system32\drivers
2012-09-25 21:01:05 ----D---- C:\WINDOWS\Media
2012-09-25 21:00:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-09-25 21:00:43 ----D---- C:\WINDOWS\system32\CatRoot2
2012-09-25 20:54:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-09-25 20:54:28 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-09-25 20:54:28 ----D---- C:\WINDOWS\system32
2012-09-25 20:48:39 ----SHD---- C:\WINDOWS\Installer
2012-09-25 20:48:11 ----D---- C:\WINDOWS\pchealth
2012-09-25 20:48:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-09-25 20:48:08 ----HD---- C:\WINDOWS\inf
2012-09-25 20:47:46 ----SD---- C:\WINDOWS\Tasks
2012-09-25 20:44:16 ----D---- C:\WINDOWS\system32\CatRoot
2012-09-25 20:04:37 ----D---- C:\Documents and Settings\janko urda\Application Data\PriceGong
2012-09-25 16:01:36 ----D---- C:\WINDOWS\WinSxS
2012-09-22 21:33:12 ----A---- C:\WINDOWS\imsins.BAK
2012-09-22 20:02:16 ----RD---- C:\Program Files\Common Files
2012-09-22 19:42:32 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2012-09-22 19:03:26 ----D---- C:\WINDOWS\system32\DirectX
2012-09-22 18:40:33 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2012-09-22 13:47:28 ----D---- C:\WINDOWS\system
2012-09-22 13:47:27 ----D---- C:\WINDOWS\system32\Setup
2012-09-22 13:47:24 ----D---- C:\WINDOWS\Help
2012-09-22 13:47:16 ----D---- C:\WINDOWS\system32\usmt
2012-09-22 13:47:04 ----D---- C:\WINDOWS\AppPatch
2012-09-22 13:47:01 ----D---- C:\WINDOWS\ime
2012-09-22 13:46:59 ----RSD---- C:\WINDOWS\Fonts
2012-09-22 13:46:47 ----D---- C:\WINDOWS\PeerNet
2012-09-22 13:46:32 ----D---- C:\WINDOWS\system32\npp
2012-09-22 13:46:24 ----D---- C:\WINDOWS\msagent
2012-09-22 13:42:44 ----D---- C:\WINDOWS\twain_32
2012-09-22 13:41:42 ----D---- C:\WINDOWS\system32\icsxml
2012-09-22 13:41:07 ----D---- C:\WINDOWS\system32\ias
2012-09-22 13:41:01 ----D---- C:\WINDOWS\system32\1033
2012-09-22 13:39:38 ----D---- C:\WINDOWS\Driver Cache
2012-09-22 12:20:46 ----A---- C:\WINDOWS\system.ini
2012-09-22 12:20:33 ----D---- C:\WINDOWS\mui
2012-09-22 12:19:00 ----D---- C:\Program Files\Windows Media Player
2012-09-22 12:18:58 ----D---- C:\WINDOWS\system32\1051
2012-09-22 12:16:30 ----D---- C:\WINDOWS\security
2012-09-22 12:11:52 ----D---- C:\WINDOWS\Registration
2012-09-22 12:11:13 ----A---- C:\WINDOWS\setuplog.txt
2012-09-22 12:09:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-09-22 12:06:55 ----SHD---- C:\System Volume Information
2012-09-22 12:06:55 ----D---- C:\WINDOWS\system32\Restore
2012-09-22 12:06:13 ----D---- C:\WINDOWS\system32\config
2012-09-22 12:02:08 ----A---- C:\WINDOWS\OEWABLog.txt
2012-09-22 12:02:01 ----A---- C:\WINDOWS\ODBCINST.INI
2012-09-22 12:01:45 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-09-22 12:01:19 ----RD---- C:\WINDOWS\Web
2012-09-22 12:01:10 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2012-09-22 12:00:58 ----A---- C:\WINDOWS\win.ini
2012-09-22 12:00:55 ----D---- C:\WINDOWS\system32\oobe
2012-09-22 12:00:48 ----D---- C:\Program Files\Movie Maker
2012-09-22 12:00:45 ----D---- C:\Program Files\Outlook Express
2012-09-22 12:00:40 ----D---- C:\Program Files\Internet Explorer
2012-09-22 12:00:28 ----D---- C:\WINDOWS\system32\Com
2012-09-22 11:59:28 ----D---- C:\Program Files\Messenger
2012-09-22 11:59:22 ----D---- C:\WINDOWS\system32\wbem
2012-09-22 11:58:23 ----SH---- C:\boot.ini
2012-09-22 11:49:44 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2012-09-20 15:33:55 ----D---- C:\Documents and Settings\janko urda\Application Data\Skype
2012-09-20 15:05:50 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2012-09-14 08:45:06 ----D---- C:\Program Files\MyAshampoo
2012-09-01 23:00:50 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2012-09-01 22:23:26 ----SD---- C:\Documents and Settings\janko urda\Application Data\Microsoft
2012-09-01 22:04:48 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt
2012-08-27 22:55:47 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #3.txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-08-21 25256]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-08-21 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-08-21 729752]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-08-21 355632]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-08-21 54232]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-02-28 36096]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-08-21 21256]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-08-21 97608]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-01-24 1291328]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-02-28 9600]
R3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys [2011-01-30 73216]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-11-06 5761760]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-11-06 5760]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-06 85120]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-02-28 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-02-28 20480]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-12-13 57408]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 102784]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2011-05-03 194816]
S3 hwusbfake;Huawei DataCard USB Fake; C:\WINDOWS\system32\DRIVERS\ewusbfake.sys []
S3 massfilter;MBB Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 9216]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2006-02-28 10880]
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2004-01-21 5915]
S3 PID_08A0;Labtec WebCam Pro(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2004-01-21 271360]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2006-02-28 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2006-02-28 15360]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-02-28 31616]
S3 USBET;SPEEDLINK SNAPPY Smart Webcam; C:\WINDOWS\system32\DRIVERS\ETdrv.sys []
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys [2010-03-02 105856]
S3 ZTEusbnmea;ZTE NMEA Port; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [2010-03-02 105856]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [2010-03-02 105856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-02-28 14336]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-02-29 158856]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-25 250288]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\MyAshampoo
C:\Program Files\Yontoo
C:\Documents and Settings\janko urda\Application Data\Media Finder\Extensions\IEPlugin32.dll
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-839522115-725345543-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-839522115-725345543-1004UA.job
C:\WINDOWS\SETDA.tmp
C:\WINDOWS\SETA7.tmp
C:\WINDOWS\SET9B.tmp
C:\WINDOWS\SET98.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Ďakujem za pomoc, vykonal som všetko podľa inštrukcií a pridávam nový log


Logfile of random's system information tool 1.09 (written by random/random)
Run by janko urda at 2012-09-26 09:38:24
Systém Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 28 GB (71%) free of 40 GB
Total RAM: 2039 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:38:29, on 26.9.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wscntfy.exe
C:\totalcmd\TOTALCMD.EXE
c:\Documents and Settings\janko urda\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\janko urda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /qn /I "C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MST" WISE_SETUP_EXE_PATH="E:\PhysX\PhysX_9.10.0513_SystemSoftware.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O24 - Desktop Component 0: (no name) - http://photos.living.sk/advertisers/age ... 1374_f.jpg

--
End of file - 4869 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\SpeedyPC Pro.job
C:\WINDOWS\tasks\SpeedyPC Registration3.job
C:\WINDOWS\tasks\SpeedyPC Update Version3.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-11-06 142104]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-11-06 162584]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-11-06 138008]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\janko urda\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2007-07-10 136176]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584]
"Media Finder"=C:\Program Files\Media Finder\Media Finder.exe /opentotray []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-02-28 15360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /qn /I C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WIS3F5C371F8EA24F259D3DD0B4526E3AEA_9_10_0513.MST WISE_SETUP_EXE_PATH=E:\PhysX\PhysX_9.10.0513_SystemSoftware.exe []

C:\Documents and Settings\janko urda\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-11-06 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-09-26 09:30:01 ----D---- C:\_OTM
2012-09-25 21:09:30 ----D---- C:\Program Files\trend micro
2012-09-25 21:09:29 ----D---- C:\rsit
2012-09-25 20:52:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-09-25 20:49:21 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2012-09-25 20:42:39 ----HDC---- C:\WINDOWS\$NtUninstallKB914882$
2012-09-25 20:35:11 ----D---- C:\Documents and Settings\janko urda\Application Data\Origin
2012-09-25 20:20:09 ----D---- C:\Documents and Settings\janko urda\Application Data\Malwarebytes
2012-09-25 20:20:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2012-09-25 20:20:08 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-09-25 20:20:06 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2012-09-25 16:10:32 ----D---- C:\Documents and Settings\janko urda\Application Data\TeamViewer
2012-09-25 16:10:25 ----D---- C:\Program Files\TeamViewer
2012-09-25 16:07:54 ----D---- C:\Program Files\Foxit Software
2012-09-25 16:07:08 ----D---- C:\Documents and Settings\janko urda\Application Data\vlc
2012-09-25 16:05:00 ----D---- C:\Program Files\VideoLAN
2012-09-25 16:04:12 ----D---- C:\totalcmd
2012-09-25 16:04:12 ----D---- C:\Documents and Settings\janko urda\Application Data\GHISLER
2012-09-25 16:04:12 ----A---- C:\WINDOWS\UC.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\RAR.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\PKZIP.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\LHA.PIF
2012-09-25 16:04:12 ----A---- C:\WINDOWS\ARJ.PIF
2012-09-25 16:01:48 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-09-25 16:01:48 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-09-25 16:01:46 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-09-25 16:01:45 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-09-25 16:01:45 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-09-25 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-09-25 16:01:20 ----A---- C:\WINDOWS\avastSS.scr
2012-09-25 16:01:19 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-09-25 16:01:00 ----D---- C:\Program Files\AVAST Software
2012-09-25 16:01:00 ----D---- C:\Documents and Settings\All Users\Application Data\AVAST Software
2012-09-22 19:43:36 ----D---- C:\Documents and Settings\All Users\Application Data\Origin
2012-09-22 19:43:35 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2012-09-22 19:03:24 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2012-09-22 19:03:23 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2012-09-22 19:03:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2012-09-22 19:03:21 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2012-09-22 19:03:20 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2012-09-22 19:03:19 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2012-09-22 19:03:18 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2012-09-22 19:03:17 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2012-09-22 19:03:17 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2012-09-22 19:03:16 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2012-09-22 19:03:15 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2012-09-22 19:03:14 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2012-09-22 19:03:13 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2012-09-22 19:03:13 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2012-09-22 19:03:12 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2012-09-22 19:03:11 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2012-09-22 19:03:10 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2012-09-22 19:03:09 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2012-09-22 19:03:08 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2012-09-22 19:03:07 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2012-09-22 19:03:06 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2012-09-22 19:03:05 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2012-09-22 19:03:03 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2012-09-22 19:03:03 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2012-09-22 19:03:01 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2012-09-22 19:03:00 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2012-09-22 19:02:59 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2012-09-22 19:02:58 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2012-09-22 19:02:57 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2012-09-22 19:02:56 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2012-09-22 19:02:56 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2012-09-22 19:02:55 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2012-09-22 19:02:30 ----D---- C:\WINDOWS\Logs
2012-09-22 19:02:25 ----D---- C:\Program Files\Electronic Arts
2012-09-22 18:45:28 ----D---- C:\Documents and Settings\All Users\Application Data\Solidshield
2012-09-22 12:11:35 ----A---- C:\WINDOWS\system32\igfxres.dll
2012-09-22 12:06:53 ----D---- C:\WINDOWS\Prefetch
2012-09-22 11:56:56 ----A---- C:\WINDOWS\pnplog.txt
2012-09-22 11:49:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-09-22 11:49:57 ----A---- C:\WINDOWS\system32\irclass.dll
2012-09-22 11:37:43 ----A---- C:\WINDOWS\UPGRADE.TXT
2012-09-22 11:37:38 ----D---- C:\WINDOWS\setup.pss
2012-09-14 10:41:46 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-09-01 22:23:27 ----A---- C:\WINDOWS\ModemLog_ZTE Proprietary USB Modem.txt
2012-09-01 22:17:27 ----D---- C:\Documents and Settings\All Users\Application Data\mquadr.at
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbnet.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys
2012-09-01 22:17:08 ----A---- C:\WINDOWS\system32\drivers\massfilter.sys
2012-09-01 22:16:54 ----A---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\wdfcoinstaller01007.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01007.dll
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\usbccid.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_juextctrl.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcecm.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_jubusenum.sys
2012-09-01 22:16:35 ----A---- C:\WINDOWS\system32\drivers\ew_hwupgrade.sys
2012-09-01 22:16:34 ----A---- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys
2012-09-01 22:16:34 ----A---- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys
2012-09-01 22:16:29 ----HDC---- C:\Documents and Settings\All Users\Application Data\{7DECD834-973E-4B75-9B37-79105C3EA3B6}
2012-09-01 22:16:16 ----D---- C:\Program Files\bob internet

======List of files/folders modified in the last 1 month======

2012-09-26 09:37:40 ----D---- C:\WINDOWS\Temp
2012-09-26 09:31:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-09-26 09:31:40 ----D---- C:\WINDOWS\system32
2012-09-26 09:31:40 ----D---- C:\WINDOWS
2012-09-26 09:30:02 ----SD---- C:\WINDOWS\Tasks
2012-09-26 09:30:02 ----RD---- C:\Program Files
2012-09-25 21:01:05 ----D---- C:\WINDOWS\system32\drivers
2012-09-25 21:01:05 ----D---- C:\WINDOWS\Media
2012-09-25 21:00:43 ----D---- C:\WINDOWS\system32\CatRoot2
2012-09-25 20:54:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-09-25 20:54:28 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-09-25 20:48:39 ----SHD---- C:\WINDOWS\Installer
2012-09-25 20:48:11 ----D---- C:\WINDOWS\pchealth
2012-09-25 20:48:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-09-25 20:48:08 ----HD---- C:\WINDOWS\inf
2012-09-25 20:44:16 ----D---- C:\WINDOWS\system32\CatRoot
2012-09-25 20:04:37 ----D---- C:\Documents and Settings\janko urda\Application Data\PriceGong
2012-09-25 16:01:36 ----D---- C:\WINDOWS\WinSxS
2012-09-22 21:33:12 ----A---- C:\WINDOWS\imsins.BAK
2012-09-22 20:02:16 ----RD---- C:\Program Files\Common Files
2012-09-22 19:42:32 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2012-09-22 19:03:26 ----D---- C:\WINDOWS\system32\DirectX
2012-09-22 18:40:33 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2012-09-22 13:47:28 ----D---- C:\WINDOWS\system
2012-09-22 13:47:27 ----D---- C:\WINDOWS\system32\Setup
2012-09-22 13:47:24 ----D---- C:\WINDOWS\Help
2012-09-22 13:47:16 ----D---- C:\WINDOWS\system32\usmt
2012-09-22 13:47:04 ----D---- C:\WINDOWS\AppPatch
2012-09-22 13:47:01 ----D---- C:\WINDOWS\ime
2012-09-22 13:46:59 ----RSD---- C:\WINDOWS\Fonts
2012-09-22 13:46:47 ----D---- C:\WINDOWS\PeerNet
2012-09-22 13:46:32 ----D---- C:\WINDOWS\system32\npp
2012-09-22 13:46:24 ----D---- C:\WINDOWS\msagent
2012-09-22 13:42:44 ----D---- C:\WINDOWS\twain_32
2012-09-22 13:41:42 ----D---- C:\WINDOWS\system32\icsxml
2012-09-22 13:41:07 ----D---- C:\WINDOWS\system32\ias
2012-09-22 13:41:01 ----D---- C:\WINDOWS\system32\1033
2012-09-22 13:39:38 ----D---- C:\WINDOWS\Driver Cache
2012-09-22 12:20:46 ----A---- C:\WINDOWS\system.ini
2012-09-22 12:20:33 ----D---- C:\WINDOWS\mui
2012-09-22 12:19:00 ----D---- C:\Program Files\Windows Media Player
2012-09-22 12:18:58 ----D---- C:\WINDOWS\system32\1051
2012-09-22 12:16:30 ----D---- C:\WINDOWS\security
2012-09-22 12:11:52 ----D---- C:\WINDOWS\Registration
2012-09-22 12:11:13 ----A---- C:\WINDOWS\setuplog.txt
2012-09-22 12:09:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-09-22 12:06:55 ----SHD---- C:\System Volume Information
2012-09-22 12:06:55 ----D---- C:\WINDOWS\system32\Restore
2012-09-22 12:06:13 ----D---- C:\WINDOWS\system32\config
2012-09-22 12:02:08 ----A---- C:\WINDOWS\OEWABLog.txt
2012-09-22 12:02:01 ----A---- C:\WINDOWS\ODBCINST.INI
2012-09-22 12:01:45 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-09-22 12:01:19 ----RD---- C:\WINDOWS\Web
2012-09-22 12:01:10 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2012-09-22 12:00:58 ----A---- C:\WINDOWS\win.ini
2012-09-22 12:00:55 ----D---- C:\WINDOWS\system32\oobe
2012-09-22 12:00:48 ----D---- C:\Program Files\Movie Maker
2012-09-22 12:00:45 ----D---- C:\Program Files\Outlook Express
2012-09-22 12:00:40 ----D---- C:\Program Files\Internet Explorer
2012-09-22 12:00:28 ----D---- C:\WINDOWS\system32\Com
2012-09-22 11:59:28 ----D---- C:\Program Files\Messenger
2012-09-22 11:59:22 ----D---- C:\WINDOWS\system32\wbem
2012-09-22 11:58:23 ----SH---- C:\boot.ini
2012-09-22 11:49:44 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2012-09-20 15:33:55 ----D---- C:\Documents and Settings\janko urda\Application Data\Skype
2012-09-20 15:05:50 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2012-09-01 23:00:50 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2012-09-01 22:23:26 ----SD---- C:\Documents and Settings\janko urda\Application Data\Microsoft
2012-09-01 22:04:48 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt
2012-08-27 22:55:47 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #3.txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-08-21 25256]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-08-21 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-08-21 729752]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-08-21 355632]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-08-21 54232]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-02-28 36096]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-08-21 21256]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-08-21 97608]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-01-24 1291328]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-02-28 9600]
R3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys [2011-01-30 73216]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-11-06 5761760]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-11-06 5760]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-06 85120]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-02-28 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-02-28 20480]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-12-13 57408]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 102784]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2011-05-03 194816]
S3 hwusbfake;Huawei DataCard USB Fake; C:\WINDOWS\system32\DRIVERS\ewusbfake.sys []
S3 massfilter;MBB Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 9216]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2006-02-28 10880]
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2004-01-21 5915]
S3 PID_08A0;Labtec WebCam Pro(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2004-01-21 271360]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2006-02-28 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2006-02-28 15360]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-02-28 31616]
S3 USBET;SPEEDLINK SNAPPY Smart Webcam; C:\WINDOWS\system32\DRIVERS\ETdrv.sys []
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys [2010-03-02 105856]
S3 ZTEusbnmea;ZTE NMEA Port; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [2010-03-02 105856]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [2010-03-02 105856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-02-28 14336]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-02-29 158856]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-25 250288]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\janko urda.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.