VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Radek at 2012-10-14 22:09:45
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 168 GB (84%) free of 200 GB
Total RAM: 988 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:10:04, on 14.10.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files\trend micro\Radek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.3\dealioToolbarIE.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.3\dealioToolbarIE.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.3\dealioToolbarIE.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ROC_ROC_NT] "C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8097 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe" /auto
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskeng.exe {06CEEB6C-778D-4F0B-A0C6-71EB4C0A1A6C}
C:\Windows\System32\svchost.exe -k secsvcs
taskhost.exe $(Arg0)
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2784.83e4d00.284581635 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 2784 "\\.\pipe\gecko-crash-server-pipe.2784" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe" --proxy-stub-channel=Flash1732.6C5C2A90.41 --host-broker-channel=Flash1732.6C5C2A90.18467 --host-pid=1732 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe" --channel=2292.0028F524.366481096 --proxy-stub-channel=Flash1732.6C5C2A90.41 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll" --host-npapi-version=27 --type=renderer
taskeng.exe {D8CDAB50-2275-4EA7-86BA-58CCE8B5CE6B}
"C:\Users\Radek\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\PC SpeedUp Service Deactivator.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default

prefs.js - "browser.startup.homepage" - "http://eu.ask.com/?l=dis&o=101916"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =867034&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\extensions\
toolbar@ask.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}]
Dealio Toolbar - C:\Program Files (x86)\Dealio Toolbar\IE\6.3\dealioToolbarIE.dll [2012-09-19 1215368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-04-09 1519272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - Dealio Toolbar - C:\Program Files (x86)\Dealio Toolbar\IE\6.3\dealioToolbarIE.dll [2012-09-19 1215368]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-04-09 1519272]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-04-06 166424]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-04-06 391192]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-04-06 413720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2012-06-05 188680]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]
"SDP"=C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe [2012-05-31 200784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ROC_ROC_NT"=C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe / /PROMPT /CMPID=ROC_NT []
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-09-19 1100680]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-04-09 1557160]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-03-31 269824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-14 22:09:46 ----D---- C:\Program Files\trend micro
2012-10-14 22:09:45 ----D---- C:\rsit
2012-10-14 21:43:15 ----D---- C:\Program Files\CCleaner
2012-10-14 21:41:12 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-10-14 21:41:12 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-10-14 21:41:07 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-10-14 21:41:06 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-10-14 21:41:05 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-10-14 21:40:57 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-10-14 21:40:56 ----A---- C:\Windows\system32\aswBoot.exe
2012-10-14 21:40:27 ----A---- C:\Windows\avastSS.scr
2012-10-14 21:40:26 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-10-10 04:29:52 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-10-10 04:29:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-10-10 04:29:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-10-10 04:29:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-10-10 04:29:45 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-10-10 04:29:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-10-10 04:29:45 ----A---- C:\Windows\system32\winsrv.dll
2012-10-10 04:29:45 ----A---- C:\Windows\system32\KernelBase.dll
2012-10-10 04:29:45 ----A---- C:\Windows\system32\kernel32.dll
2012-10-10 04:29:45 ----A---- C:\Windows\system32\conhost.exe
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 04:29:44 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 04:29:44 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-10-10 04:29:44 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-10-10 04:29:44 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-10-10 04:29:44 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-10-10 04:29:44 ----A---- C:\Windows\system32\wow64win.dll
2012-10-10 04:29:44 ----A---- C:\Windows\system32\wow64cpu.dll
2012-10-10 04:29:44 ----A---- C:\Windows\system32\wow64.dll
2012-10-10 04:29:44 ----A---- C:\Windows\system32\ntvdm64.dll
2012-10-10 04:29:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-10 04:29:43 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-10 04:29:43 ----A---- C:\Windows\SYSWOW64\user.exe
2012-10-10 04:29:31 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-10-10 04:29:31 ----A---- C:\Windows\system32\wintrust.dll
2012-10-10 04:29:28 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-10-10 04:29:28 ----A---- C:\Windows\system32\tzres.dll
2012-10-10 04:29:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-10-10 04:29:21 ----A---- C:\Windows\system32\kerberos.dll
2012-10-10 04:29:18 ----A---- C:\Windows\system32\crypt32.dll
2012-10-10 04:29:17 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-10-10 04:29:17 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-10-10 04:29:17 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-10-10 04:29:17 ----A---- C:\Windows\system32\cryptsvc.dll
2012-10-10 04:29:17 ----A---- C:\Windows\system32\cryptnet.dll
2012-10-09 20:42:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-10-06 16:28:20 ----AD---- C:\Program Files (x86)\FunWebProducts
2012-10-04 11:55:37 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-10-04 00:08:24 ----D---- C:\Program Files (x86)\Ask.com
2012-10-04 00:07:51 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-10-04 00:07:38 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-10-04 00:07:26 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-10-04 00:07:10 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-10-03 23:43:32 ----A---- C:\Windows\SYSWOW64\lame_enc.dll
2012-09-26 14:51:15 ----D---- C:\Users\Radek\AppData\Roaming\dvdcss
2012-09-26 14:49:49 ----D---- C:\Users\Radek\AppData\Roaming\vlc
2012-09-26 14:49:21 ----D---- C:\Program Files (x86)\VideoLAN
2012-09-26 13:46:16 ----D---- C:\Users\Radek\AppData\Roaming\MyMovieLibrary
2012-09-26 13:27:13 ----D---- C:\Program Files (x86)\My Movie Library
2012-09-26 07:51:14 ----A---- C:\Windows\system32\OxpsConverter.exe
2012-09-25 16:56:09 ----D---- C:\Program Files (x86)\FilesFrog Update Checker
2012-09-25 16:55:50 ----D---- C:\Users\Radek\AppData\Roaming\Babylon
2012-09-25 16:55:50 ----D---- C:\ProgramData\Babylon
2012-09-25 16:35:34 ----D---- C:\Users\Radek\AppData\Roaming\AnvSoft
2012-09-25 16:35:04 ----D---- C:\Program Files (x86)\AnvSoft
2012-09-25 14:17:42 ----A---- C:\Windows\system32\FntCache.dll
2012-09-25 14:17:42 ----A---- C:\Windows\system32\d2d1.dll
2012-09-25 14:17:41 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-09-25 10:16:41 ----D---- C:\Program Files (x86)\Dealio Toolbar
2012-09-25 10:16:41 ----D---- C:\Program Files (x86)\Application Updater
2012-09-25 10:15:56 ----D---- C:\Users\Radek\AppData\Roaming\FreeBurner
2012-09-25 10:15:56 ----D---- C:\Program Files (x86)\Free Easy Burner
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\VB6STKIT.DLL
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\VB6FR.DLL
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\SSubTmr6.dll
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\MSCMCFR.DLL
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\inetfr.DLL
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\GIF89.DLL
2012-09-25 10:15:56 ----A---- C:\Windows\SYSWOW64\CMDLGFR.DLL
2012-09-25 10:08:31 ----A---- C:\Users\Radek\AppData\Roaming\burnaware.ini
2012-09-25 10:07:30 ----D---- C:\Program Files (x86)\BurnAware Free
2012-09-25 10:06:44 ----HD---- C:\ProgramData\Common Files
2012-09-22 12:44:42 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-09-22 12:44:42 ----A---- C:\Windows\system32\mshtmled.dll
2012-09-22 12:44:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-09-22 12:44:39 ----A---- C:\Windows\SYSWOW64\url.dll
2012-09-22 12:44:39 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-09-22 12:44:39 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-09-22 12:44:39 ----A---- C:\Windows\system32\url.dll
2012-09-22 12:44:39 ----A---- C:\Windows\system32\ieUnatt.exe
2012-09-22 12:44:39 ----A---- C:\Windows\system32\ieui.dll
2012-09-22 12:44:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-09-22 12:44:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-09-22 12:44:38 ----A---- C:\Windows\system32\urlmon.dll
2012-09-22 12:44:38 ----A---- C:\Windows\system32\msfeeds.dll
2012-09-22 12:44:38 ----A---- C:\Windows\system32\jscript9.dll
2012-09-22 12:44:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-09-22 12:44:37 ----A---- C:\Windows\system32\wininet.dll
2012-09-22 12:44:37 ----A---- C:\Windows\system32\jsproxy.dll
2012-09-22 12:44:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-09-22 12:44:36 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-09-22 12:44:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-09-22 12:44:36 ----A---- C:\Windows\system32\vbscript.dll
2012-09-22 12:44:36 ----A---- C:\Windows\system32\jscript.dll
2012-09-22 12:44:36 ----A---- C:\Windows\system32\iertutil.dll
2012-09-22 12:44:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-09-22 12:44:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-09-22 12:44:33 ----A---- C:\Windows\system32\mshtml.dll
2012-09-22 12:44:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-09-22 12:44:32 ----A---- C:\Windows\system32\ieframe.dll
2012-09-21 00:06:27 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2012-09-20 02:07:24 ----D---- C:\Users\Radek\AppData\Roaming\Skype
2012-09-20 02:05:05 ----RD---- C:\Program Files (x86)\Skype
2012-09-20 02:04:43 ----D---- C:\ProgramData\Skype
2012-09-19 21:48:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-09-19 21:47:11 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-09-19 21:46:29 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-09-19 14:57:16 ----D---- C:\ProgramData\vsosdk
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\wvc1dmod.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\vp7vfw.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\sipr3260.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\Pncrt.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\drv43260.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\drv33260.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\drv23260.dll
2012-09-19 12:11:49 ----A---- C:\Windows\SYSWOW64\cook3260.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-09-19 02:29:50 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\wextract.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\webcheck.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\pngfilt.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\occache.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\msrating.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\msls31.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\mshtmler.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\mshta.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\msfeedssync.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\licmgr10.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\inseng.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\imgutil.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iexpress.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iesysprep.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iesetup.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iernonce.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iepeers.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\iedkcs32.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ieapfltr.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ieapfltr.dat
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ieakui.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ieaksie.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ieakeng.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\ie4uinit.exe
2012-09-19 02:29:50 ----A---- C:\Windows\system32\icardie.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\dxtrans.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\dxtmsft.dll
2012-09-19 02:29:50 ----A---- C:\Windows\system32\admparse.dll
2012-09-19 00:04:38 ----D---- C:\ProgramData\Freemake
2012-09-19 00:04:27 ----D---- C:\Users\Radek\AppData\Roaming\OpenCandy
2012-09-19 00:04:27 ----D---- C:\Program Files (x86)\Freemake
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-09-18 23:16:40 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-09-18 23:16:10 ----A---- C:\Windows\system32\esent.dll
2012-09-18 23:16:09 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-09-18 23:16:09 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-09-18 23:16:09 ----A---- C:\Windows\system32\fsutil.exe
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\storport.sys
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-09-18 23:16:09 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-09-18 23:16:08 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-09-18 23:07:41 ----D---- C:\Windows\SYSWOW64\Wat
2012-09-18 23:07:41 ----D---- C:\Windows\system32\Wat
2012-09-18 22:45:56 ----A---- C:\Windows\system32\browserchoice.exe
2012-09-18 22:39:34 ----A---- C:\Windows\system32\MRT.exe
2012-09-18 22:37:17 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-09-18 22:37:17 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-09-18 22:37:17 ----A---- C:\Windows\system32\wmi.dll
2012-09-18 22:37:17 ----A---- C:\Windows\system32\imagehlp.dll
2012-09-18 22:37:17 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-09-18 22:29:59 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-09-18 22:29:59 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2012-09-18 22:29:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-09-18 22:29:59 ----A---- C:\Windows\system32\msxml6.dll
2012-09-18 22:29:59 ----A---- C:\Windows\system32\msxml3r.dll
2012-09-18 22:29:59 ----A---- C:\Windows\system32\msxml3.dll
2012-09-18 22:29:43 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-09-18 22:29:43 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-09-18 22:29:43 ----A---- C:\Windows\system32\quartz.dll
2012-09-18 22:29:43 ----A---- C:\Windows\system32\qdvd.dll
2012-09-18 22:29:41 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-09-18 22:29:41 ----A---- C:\Windows\system32\sbe.dll
2012-09-18 22:29:41 ----A---- C:\Windows\system32\CPFilters.dll
2012-09-18 22:29:40 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-09-18 22:29:39 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-09-18 22:29:39 ----A---- C:\Windows\system32\DWrite.dll
2012-09-18 22:29:12 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-09-18 22:29:12 ----A---- C:\Windows\system32\webio.dll
2012-09-18 22:29:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-09-18 22:29:09 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-09-18 22:29:09 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-09-18 22:29:09 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\sspisrv.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\sspicli.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\schannel.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\secur32.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\ncrypt.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\lsass.exe
2012-09-18 22:29:09 ----A---- C:\Windows\system32\lsasrv.dll
2012-09-18 22:29:09 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-09-18 22:29:09 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-09-18 22:29:09 ----A---- C:\Windows\system32\drivers\cng.sys
2012-09-18 22:29:07 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-09-18 22:29:07 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-09-18 22:29:07 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-09-18 22:29:07 ----A---- C:\Windows\system32\dnsapi.dll
2012-09-18 22:29:06 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-09-18 22:28:59 ----A---- C:\Windows\system32\shell32.dll
2012-09-18 22:28:58 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-09-18 22:28:53 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-09-18 22:28:53 ----A---- C:\Windows\system32\rdpwsx.dll
2012-09-18 22:28:53 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-09-18 22:28:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-09-18 22:28:51 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-09-18 22:28:51 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-09-18 22:28:51 ----A---- C:\Windows\system32\fontsub.dll
2012-09-18 22:28:51 ----A---- C:\Windows\system32\atmlib.dll
2012-09-18 22:28:51 ----A---- C:\Windows\system32\atmfd.dll
2012-09-18 22:28:42 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-09-18 22:28:24 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-09-18 22:26:14 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-09-18 22:26:14 ----A---- C:\Windows\system32\xmllite.dll
2012-09-18 22:26:10 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-09-18 22:26:10 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-09-18 22:26:10 ----A---- C:\Windows\system32\odbctrac.dll
2012-09-18 22:26:10 ----A---- C:\Windows\system32\odbccu32.dll
2012-09-18 22:26:10 ----A---- C:\Windows\system32\odbccr32.dll
2012-09-18 22:26:10 ----A---- C:\Windows\system32\odbccp32.dll
2012-09-18 22:26:09 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-09-18 22:26:09 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-09-18 22:26:09 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-09-18 22:26:07 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-09-18 22:26:07 ----A---- C:\Windows\system32\srcore.dll
2012-09-18 22:26:03 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-09-18 22:26:03 ----A---- C:\Windows\system32\poqexec.exe
2012-09-18 22:26:01 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-09-18 22:26:01 ----A---- C:\Windows\explorer.exe
2012-09-18 22:25:56 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-09-18 22:25:56 ----A---- C:\Windows\system32\ntshrui.dll
2012-09-18 22:25:50 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-09-18 22:25:50 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-09-18 22:25:50 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-09-18 22:25:50 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-09-18 22:25:50 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-09-18 22:25:50 ----A---- C:\Windows\system32\tquery.dll
2012-09-18 22:25:50 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-09-18 22:25:50 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-09-18 22:25:50 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-09-18 22:25:50 ----A---- C:\Windows\system32\mssrch.dll
2012-09-18 22:25:50 ----A---- C:\Windows\system32\mssph.dll
2012-09-18 22:25:49 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-09-18 22:25:49 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-09-18 22:25:49 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-09-18 22:25:49 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-09-18 22:25:49 ----A---- C:\Windows\system32\mssvp.dll
2012-09-18 22:25:49 ----A---- C:\Windows\system32\mssphtb.dll
2012-09-18 22:25:49 ----A---- C:\Windows\system32\msscntrs.dll
2012-09-18 22:25:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-09-18 22:25:44 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-09-18 22:25:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-09-18 22:25:42 ----A---- C:\Windows\system32\csrsrv.dll
2012-09-18 22:25:40 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-09-18 22:25:40 ----A---- C:\Windows\system32\win32spl.dll
2012-09-18 22:25:40 ----A---- C:\Windows\system32\spoolsv.exe
2012-09-18 22:25:40 ----A---- C:\Windows\splwow64.exe
2012-09-18 22:25:37 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-09-18 22:25:37 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-09-18 22:25:34 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-09-18 22:25:34 ----A---- C:\Windows\system32\XpsPrint.dll
2012-09-18 22:25:32 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-09-18 22:25:32 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-09-18 22:25:32 ----A---- C:\Windows\system32\mfc42u.dll
2012-09-18 22:25:32 ----A---- C:\Windows\system32\mfc42.dll
2012-09-18 22:25:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-09-18 22:25:22 ----A---- C:\Windows\system32\drivers\netio.sys
2012-09-18 22:25:22 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-09-18 22:24:52 ----A---- C:\Windows\system32\profsvc.dll
2012-09-18 22:24:36 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-09-18 22:24:36 ----A---- C:\Windows\system32\d3d10_1.dll
2012-09-18 22:24:30 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-09-18 22:24:30 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-09-18 22:24:30 ----A---- C:\Windows\system32\drivers\srv.sys
2012-09-18 22:24:27 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-09-18 22:24:27 ----A---- C:\Windows\system32\psisdecd.dll
2012-09-18 22:24:23 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-09-18 22:24:19 ----A---- C:\Windows\system32\drivers\afd.sys
2012-09-18 22:24:14 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-09-18 22:24:14 ----A---- C:\Windows\system32\msi.dll
2012-09-18 22:24:11 ----A---- C:\Windows\system32\winresume.exe
2012-09-18 22:24:11 ----A---- C:\Windows\system32\winload.exe
2012-09-18 22:24:11 ----A---- C:\Windows\system32\kdusb.dll
2012-09-18 22:24:11 ----A---- C:\Windows\system32\kd1394.dll
2012-09-18 22:24:10 ----A---- C:\Windows\system32\kdcom.dll
2012-09-18 22:23:55 ----A---- C:\Windows\system32\browser.dll
2012-09-18 22:23:55 ----A---- C:\Windows\system32\browcli.dll
2012-09-18 22:23:54 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-09-18 22:23:54 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-09-18 22:23:54 ----A---- C:\Windows\system32\netapi32.dll
2012-09-18 22:22:23 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-09-18 22:22:23 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-09-18 22:22:23 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-09-18 22:22:23 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-09-18 22:22:23 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-09-18 22:22:21 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-09-18 22:22:21 ----A---- C:\Windows\system32\prevhost.exe
2012-09-18 22:22:19 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-09-18 22:22:17 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-09-18 22:22:17 ----A---- C:\Windows\system32\inetcomm.dll
2012-09-18 22:22:14 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-09-18 22:22:14 ----A---- C:\Windows\system32\msvcrt.dll
2012-09-18 22:22:04 ----A---- C:\Windows\system32\localspl.dll
2012-09-18 22:21:56 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-09-18 22:21:56 ----A---- C:\Windows\system32\oleaut32.dll
2012-09-18 22:21:56 ----A---- C:\Windows\system32\oleacc.dll
2012-09-18 22:21:55 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-09-18 22:21:50 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-09-18 22:21:50 ----A---- C:\Windows\system32\EncDec.dll
2012-09-18 22:21:15 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-09-18 22:21:15 ----A---- C:\Windows\system32\d3d10level9.dll
2012-09-18 22:20:47 ----A---- C:\Windows\system32\win32k.sys
2012-09-18 22:20:45 ----A---- C:\Windows\system32\rdpcore.dll
2012-09-18 22:20:44 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-09-18 22:20:44 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-09-18 22:20:43 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-09-18 22:20:41 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-09-18 22:20:40 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2012-09-18 22:18:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-09-18 22:11:21 ----D---- C:\Program Files\WinRAR
2012-09-18 22:10:01 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-09-18 22:10:01 ----A---- C:\Windows\system32\cdosys.dll
2012-09-18 22:09:54 ----D---- C:\Program Files (x86)\WinRAR
2012-09-18 22:09:49 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-09-18 22:09:48 ----A---- C:\Windows\system32\ntdll.dll
2012-09-18 22:09:12 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-09-18 22:09:12 ----A---- C:\Windows\system32\packager.dll
2012-09-18 22:09:07 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-09-18 22:09:04 ----D---- C:\Windows\SYSWOW64\Macromed
2012-09-18 22:09:00 ----D---- C:\Windows\system32\Macromed
2012-09-18 22:05:44 ----A---- C:\Windows\system32\wups2.dll
2012-09-18 22:05:44 ----A---- C:\Windows\system32\wucltux.dll
2012-09-18 22:05:44 ----A---- C:\Windows\system32\wuaueng.dll
2012-09-18 22:05:44 ----A---- C:\Windows\system32\wuauclt.exe
2012-09-18 22:05:25 ----A---- C:\Windows\system32\wups.dll
2012-09-18 22:05:25 ----A---- C:\Windows\system32\wudriver.dll
2012-09-18 22:05:25 ----A---- C:\Windows\system32\wuapi.dll
2012-09-18 22:05:14 ----A---- C:\Windows\system32\wuwebv.dll
2012-09-18 22:05:14 ----A---- C:\Windows\system32\wuapp.exe
2012-09-18 22:04:45 ----D---- C:\ProgramData\InstallShield
2012-09-18 22:04:00 ----A---- C:\Windows\system32\AppleChargerSrv.exe
2012-09-18 22:03:50 ----A---- C:\Windows\system32\drivers\L1C62x64.sys
2012-09-18 22:03:29 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2012-09-18 22:03:00 ----D---- C:\Program Files\Common Files\Intel
2012-09-18 22:02:39 ----A---- C:\Windows\system32\igfxdo.dll
2012-09-18 22:02:39 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2012-09-18 22:02:39 ----A---- C:\Windows\system32\hkcmd.exe
2012-09-18 22:02:39 ----A---- C:\Windows\system32\GfxUI.exe
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\SYSWOW64\ig4icd32.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\iglhsip64.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\iglhcp64.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxtray.exe
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxTMM.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxsrvc.exe
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxsrvc.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxress.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxpers.exe
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxext.exe
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxexps.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxdev.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igfxCoIn_v2104.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\igdumd64.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\ig4icd64.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\hccutils.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\gfxSrvc.dll
2012-09-18 22:02:38 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2012-09-18 13:17:06 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2012-09-18 13:16:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-09-18 12:48:13 ----D---- C:\Program Files (x86)\DeviceVM
2012-09-17 10:05:31 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-09-16 19:20:37 ----D---- C:\Users\Radek\AppData\Roaming\Vso
2012-09-16 19:20:10 ----D---- C:\Program Files (x86)\VSO
2012-09-16 18:51:00 ----D---- C:\Users\Radek\AppData\Roaming\WinAVI
2012-09-16 18:43:04 ----D---- C:\ProgramData\Google
2012-09-16 18:39:54 ----D---- C:\Users\Radek\AppData\Roaming\Macromedia
2012-09-16 18:39:54 ----D---- C:\Users\Radek\AppData\Roaming\Adobe
2012-09-16 18:36:03 ----D---- C:\Users\Radek\AppData\Roaming\Mozilla
2012-09-16 18:36:00 ----D---- C:\ProgramData\Mozilla
2012-09-16 18:33:39 ----D---- C:\Program Files (x86)\Google
2012-09-16 18:32:34 ----D---- C:\ProgramData\AVAST Software
2012-09-16 18:32:34 ----D---- C:\Program Files\AVAST Software
2012-09-16 18:28:04 ----D---- C:\Users\Radek\AppData\Roaming\WinRAR
2012-09-16 18:18:04 ----D---- C:\Windows\Panther
2012-09-16 17:30:07 ----D---- C:\Program Files\GIGABYTE
2012-09-16 17:30:07 ----D---- C:\Program Files (x86)\GIGABYTE
2012-09-16 17:30:07 ----A---- C:\Windows\system32\drivers\AppleCharger.sys
2012-09-16 17:29:29 ----D---- C:\Program Files (x86)\Intel
2012-09-16 17:29:09 ----A---- C:\Windows\system32\igfxpph.dll
2012-09-16 17:29:09 ----A---- C:\Windows\system32\difx64.exe
2012-09-16 17:28:43 ----D---- C:\Intel
2012-09-16 17:28:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-09-16 17:28:09 ----A---- C:\Windows\system32\VIASysFx.dll
2012-09-16 17:28:09 ----A---- C:\Windows\system32\nQPropPageExt.dll
2012-09-16 17:28:09 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2012-09-16 17:28:00 ----N---- C:\Windows\difxapi.dll
2012-09-16 17:28:00 ----D---- C:\Program Files (x86)\VIA
2012-09-16 17:27:41 ----SHD---- C:\Windows\Installer
2012-09-16 17:27:02 ----A---- C:\Windows\GSetup.ini
2012-09-16 17:24:39 ----D---- C:\Users\Radek\AppData\Roaming\Identities
2012-09-16 17:24:23 ----SD---- C:\Users\Radek\AppData\Roaming\Microsoft
2012-09-16 17:24:23 ----D---- C:\Users\Radek\AppData\Roaming\Media Center Programs
2012-09-16 17:23:11 ----SHD---- C:\Recovery
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Šablony
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Plocha
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Oblíbené položky
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Nabídka Start
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Dokumenty
2012-09-16 17:23:10 ----SHD---- C:\ProgramData\Data aplikací
2012-09-16 17:21:34 ----D---- C:\Windows\SoftwareDistribution
2012-09-16 17:19:19 ----D---- C:\Windows\Prefetch
2012-09-16 17:18:41 ----ASH---- C:\pagefile.sys
2012-09-16 17:18:40 ----SHD---- C:\System Volume Information
2012-09-16 17:18:40 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2012-10-14 22:09:53 ----D---- C:\Windows\Temp
2012-10-14 22:09:46 ----RD---- C:\Program Files
2012-10-14 21:59:47 ----D---- C:\Windows\system32\config
2012-10-14 21:56:09 ----D---- C:\Windows
2012-10-14 21:49:46 ----RD---- C:\Program Files (x86)
2012-10-14 21:49:45 ----HD---- C:\ProgramData
2012-10-14 21:49:45 ----D---- C:\Windows\system32\drivers
2012-10-14 21:45:57 ----D---- C:\Windows\Logs
2012-10-14 21:45:57 ----D---- C:\Windows\inf
2012-10-14 21:45:57 ----D---- C:\Windows\debug
2012-10-14 21:43:26 ----D---- C:\Windows\system32\Tasks
2012-10-14 21:40:57 ----D---- C:\Windows\SysWOW64
2012-10-14 21:40:56 ----D---- C:\Windows\System32
2012-10-11 03:23:01 ----D---- C:\Windows\rescache
2012-10-10 11:44:48 ----D---- C:\Windows\system32\catroot2
2012-10-10 11:44:28 ----D---- C:\Windows\winsxs
2012-10-10 11:43:17 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-10-10 11:43:16 ----D---- C:\Windows\system32\cs-CZ
2012-10-10 11:43:15 ----D---- C:\Windows\AppPatch
2012-10-10 04:28:52 ----D---- C:\Windows\system32\catroot
2012-10-04 00:09:45 ----D---- C:\Program Files (x86)\Common Files
2012-10-02 10:10:29 ----D---- C:\Windows\system32\wdi
2012-09-22 15:23:01 ----D---- C:\Program Files (x86)\Internet Explorer
2012-09-22 15:23:00 ----D---- C:\Windows\SYSWOW64\migration
2012-09-22 15:23:00 ----D---- C:\Windows\system32\migration
2012-09-22 15:23:00 ----D---- C:\Program Files\Internet Explorer
2012-09-20 10:33:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-20 04:56:21 ----RSD---- C:\Windows\assembly
2012-09-20 04:56:21 ----D---- C:\Windows\Microsoft.NET
2012-09-20 02:06:14 ----D---- C:\Windows\Tasks
2012-09-19 21:46:14 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-09-19 08:43:35 ----D---- C:\Windows\SYSWOW64\en-US
2012-09-19 08:43:35 ----D---- C:\Windows\system32\en-US
2012-09-19 08:36:23 ----D---- C:\Windows\PolicyDefinitions
2012-09-19 08:36:18 ----D---- C:\Windows\system32\DriverStore
2012-09-18 23:07:46 ----D---- C:\Windows\ehome
2012-09-18 23:07:46 ----D---- C:\Program Files\Common Files\System
2012-09-18 23:07:45 ----RSD---- C:\Windows\Fonts
2012-09-18 23:07:38 ----D---- C:\Windows\system32\Boot
2012-09-18 23:07:32 ----D---- C:\Program Files\Windows Journal
2012-09-18 22:09:28 ----D---- C:\Windows\system32\CodeIntegrity
2012-09-18 22:09:21 ----D---- C:\Windows\Downloaded Program Files
2012-09-18 22:03:00 ----D---- C:\Program Files\Common Files
2012-09-18 21:58:59 ----D---- C:\Windows\system32\wfp
2012-09-18 21:58:52 ----D---- C:\Windows\system32\wbem
2012-09-18 21:57:48 ----D---- C:\Windows\SYSWOW64\wbem
2012-09-18 21:57:48 ----D---- C:\Windows\ShellNew
2012-09-18 21:57:46 ----RSD---- C:\Windows\Media
2012-09-18 21:57:46 ----D---- C:\Program Files\Windows Mail
2012-09-18 21:57:46 ----D---- C:\Program Files (x86)\Windows Mail
2012-09-18 21:57:37 ----D---- C:\Windows\servicing
2012-09-18 21:57:32 ----D---- C:\Windows\AppCompat
2012-09-18 21:55:54 ----D---- C:\Windows\registration
2012-09-18 21:51:45 ----SD---- C:\ProgramData\Microsoft
2012-09-16 18:27:38 ----D---- C:\Windows\system32\LogFiles
2012-09-16 18:17:39 ----D---- C:\Windows\Setup
2012-09-16 17:27:48 ----D---- C:\Windows\system32\restore
2012-09-16 17:24:37 ----SHD---- C:\$Recycle.Bin
2012-09-16 17:24:23 ----RD---- C:\Users
2012-09-16 17:23:10 ----D---- C:\Program Files\Windows NT
2012-09-16 17:20:54 ----D---- C:\Windows\system32\sysprep
2012-09-16 17:19:15 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-03-31 10322848]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-06-25 76912]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2012-09-19 795072]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-06-05 289544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-09 115168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-18 1255736]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Search
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

# AdwCleaner v2.005 - Logfile created 10/17/2012 at 09:07:15
# Updated 14/10/2012 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (64 bits)
# User : Radek - RADEK-PC
# Boot Mode : Normal
# Running from : C:\Users\Radek\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\Users\Radek\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\searchplugins\Askcom.xml
Folder Found : C:\Program Files (x86)\Ask.com
Folder Found : C:\Program Files (x86)\FunWebProducts
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\Users\Radek\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Radek\AppData\Roaming\Babylon
Folder Found : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\extensions\toolbar@ask.com
Folder Found : C:\Users\Radek\AppData\Roaming\OpenCandy
Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Key Found : HKCU\Software\APN
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Somoto
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\Software\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKU\S-1-5-21-2325485017-4291316529-3029889907-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-2325485017-4291316529-3029889907-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-2325485017-4291316529-3029889907-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0 (cs)

Profile name : default
File : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\prefs.js

Found : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=NT_ss&mntr[...]
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("browser.startup.homepage", "hxxp://eu.ask.com/?l=dis&o=101916");
Found : user_pref("extensions.BabylonToolbar_i.newTab", true);
Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=114435&tt=3912_[...]
Found : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.yahoo.com/search?fr=greentree_f[...]

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.8] : homepage = "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Found [l.12] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e" ]
Found [l.36] : icon_url = "hxxp://www.babylon.com/favicon.ico",
Found [l.39] : keyword = "babylon.com",
Found [l.42] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=114435&tt=3912_5&babsrc=SP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Found [l.1326] : homepage = "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Found [l.1545] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e" ]

*************************

AdwCleaner[R1].txt - [8220 octets] - [17/10/2012 09:06:38]
AdwCleaner[R2].txt - [8171 octets] - [17/10/2012 09:07:15]

########## EOF - C:\AdwCleaner[R2].txt - [8231 octets] ##########

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Delete
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

Tady to máte.

# AdwCleaner v2.005 - Logfile created 10/17/2012 at 15:07:50
# Updated 14/10/2012 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (64 bits)
# User : Radek - RADEK-PC
# Boot Mode : Normal
# Running from : C:\Users\Radek\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Users\Radek\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\searchplugins\Askcom.xml
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Program Files (x86)\FunWebProducts
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Users\Radek\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Radek\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\extensions\toolbar@ask.com
Folder Deleted : C:\Users\Radek\AppData\Roaming\OpenCandy
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Somoto
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0 (cs)

Profile name : default
File : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\prefs.js

Deleted : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=NT_ss&mntr[...]
Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.order.1", "Ask.com");
Deleted : user_pref("browser.startup.homepage", "hxxp://eu.ask.com/?l=dis&o=101916");
Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=114435&tt=3912_[...]
Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.yahoo.com/search?fr=greentree_f[...]

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.8] : homepage = "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e" ]
Deleted [l.36] : icon_url = "hxxp://www.babylon.com/favicon.ico",
Deleted [l.39] : keyword = "babylon.com",
Deleted [l.42] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=114435&tt=3912_5&babsrc=SP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Deleted [l.1326] : homepage = "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e",
Deleted [l.1545] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=114435&tt=3912_5&babsrc=HP_ss&mntrId=3abccf2f0000000000001c6f65e3118e" ]

*************************

AdwCleaner[R1].txt - [8220 octets] - [17/10/2012 09:06:38]
AdwCleaner[R2].txt - [8280 octets] - [17/10/2012 09:07:15]
AdwCleaner[S1].txt - [7926 octets] - [17/10/2012 15:07:50]

########## EOF - C:\AdwCleaner[S1].txt - [7986 octets] ##########

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe

Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe

Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe
Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Na plose vznikne log Rkill.txt ten mi sem vlozte
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Tady to máte

Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 10/19/2012 08:49:50 PM in x64 mode.
Windows Version: Windows 7 Professional Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Firewall Disabled

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000000

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 10/19/2012 08:49:58 PM
Execution time: 0 hours(s), 0 minute(s), and 7 seconds(s)

----------------------------------------------------------------------------------------

ComboFix 12-10-19.01 - Radek 19.10.2012 20:53:47.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.988.368 [GMT 2:00]
Spuštěný z: c:\users\Radek\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Radek\AppData\Roaming\vso_ts_preview.xml
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-19 do 2012-10-19 )))))))))))))))))))))))))))))))
.
.
2012-10-19 18:58 . 2012-10-19 18:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-19 17:53 . 2012-10-19 17:53 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\offreg.dll
2012-10-19 07:21 . 2012-10-12 07:19 9291768 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\mpengine.dll
2012-10-14 20:53 . 2012-10-14 20:53 -------- d-----w- c:\users\Radek\AppData\Roaming\Media Player Classic
2012-10-14 20:52 . 2012-10-14 20:52 -------- d-----w- c:\program files (x86)\MPC-HC
2012-10-14 20:17 . 2012-10-14 20:17 -------- d-----w- c:\users\Radek\AppData\Roaming\SUPERAntiSpyware.com
2012-10-14 20:17 . 2012-10-19 18:47 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-10-14 20:17 . 2012-10-14 20:17 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-10-14 20:09 . 2012-10-14 20:10 -------- d-----w- c:\program files\trend micro
2012-10-14 20:09 . 2012-10-14 20:10 -------- d-----w- C:\rsit
2012-10-14 19:43 . 2012-10-14 19:43 -------- d-----w- c:\program files\CCleaner
2012-10-14 19:41 . 2012-08-21 09:13 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-14 19:41 . 2012-08-21 09:13 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-14 19:41 . 2012-08-21 09:13 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-14 19:41 . 2012-08-21 09:13 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-14 19:41 . 2012-08-21 09:13 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-14 19:40 . 2012-08-21 09:13 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-14 19:40 . 2012-08-21 09:12 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-14 19:40 . 2012-08-21 09:12 41224 ----a-w- c:\windows\avastSS.scr
2012-10-14 19:40 . 2012-08-21 09:12 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-04 09:55 . 2012-10-04 09:55 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-10-03 22:09 . 2012-10-03 22:13 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-10-03 22:07 . 2010-05-26 09:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll
2012-10-03 21:43 . 2008-09-24 18:33 484352 ----a-w- c:\windows\SysWow64\lame_enc.dll
2012-09-26 12:51 . 2012-10-13 18:55 -------- d-----w- c:\users\Radek\AppData\Roaming\dvdcss
2012-09-26 12:49 . 2012-10-14 19:23 -------- d-----w- c:\users\Radek\AppData\Roaming\vlc
2012-09-26 12:49 . 2012-10-14 19:50 -------- d-----w- c:\program files (x86)\VideoLAN
2012-09-26 11:46 . 2012-10-03 22:17 -------- d-----w- c:\users\Radek\AppData\Roaming\MyMovieLibrary
2012-09-26 11:27 . 2012-09-26 11:46 -------- d-----w- c:\program files (x86)\My Movie Library
2012-09-26 05:51 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-09-25 19:46 . 2012-09-25 19:56 -------- d-----w- c:\users\Radek\VIDEO_TS
2012-09-25 19:46 . 2012-09-25 19:46 -------- d-----w- c:\users\Radek\AUDIO_TS
2012-09-25 14:56 . 2012-09-25 14:56 -------- d-----w- c:\program files (x86)\FilesFrog Update Checker
2012-09-25 14:35 . 2012-09-25 14:35 -------- d-----w- c:\users\Radek\AppData\Roaming\AnvSoft
2012-09-25 14:35 . 2012-09-25 14:35 -------- d-----w- c:\program files (x86)\AnvSoft
2012-09-25 12:17 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-09-25 12:17 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-09-25 12:17 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-09-25 08:07 . 2012-09-25 08:07 -------- d-----w- c:\program files (x86)\BurnAware Free
2012-09-25 08:06 . 2012-09-25 08:06 -------- d--h--w- c:\programdata\Common Files
2012-09-24 06:24 . 2012-09-24 06:24 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-20 00:07 . 2012-10-19 18:43 -------- d-----w- c:\users\Radek\AppData\Roaming\Skype
2012-09-20 00:05 . 2012-09-24 06:24 -------- d-----r- c:\program files (x86)\Skype
2012-09-20 00:04 . 2012-09-24 06:24 -------- d-----w- c:\programdata\Skype
2012-09-19 19:48 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2012-09-19 19:47 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\SysWow64\d3dx9_34.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 06:18 . 2012-09-18 20:39 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-09 16:10 . 2012-09-18 20:09 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-09 16:10 . 2012-09-18 20:09 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-19 00:29 . 2012-09-19 00:29 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-09-19 00:29 . 2012-09-19 00:29 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-09-19 00:29 . 2012-09-19 00:29 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-09-19 00:29 . 2012-09-19 00:29 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-09-19 00:29 . 2012-09-19 00:29 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-09-19 00:29 . 2012-09-19 00:29 82432 ----a-w- c:\windows\system32\icardie.dll
2012-09-19 00:29 . 2012-09-19 00:29 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-09-19 00:29 . 2012-09-19 00:29 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-09-19 00:29 . 2012-09-19 00:29 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-09-19 00:29 . 2012-09-19 00:29 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-09-19 00:29 . 2012-09-19 00:29 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-09-19 00:29 . 2012-09-19 00:29 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-09-19 00:29 . 2012-09-19 00:29 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-09-19 00:29 . 2012-09-19 00:29 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-09-19 00:29 . 2012-09-19 00:29 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-09-19 00:29 . 2012-09-19 00:29 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-09-19 00:29 . 2012-09-19 00:29 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-09-19 00:29 . 2012-09-19 00:29 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-09-19 00:29 . 2012-09-19 00:29 448512 ----a-w- c:\windows\system32\html.iec
2012-09-19 00:29 . 2012-09-19 00:29 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-09-19 00:29 . 2012-09-19 00:29 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-09-19 00:29 . 2012-09-19 00:29 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-09-19 00:29 . 2012-09-19 00:29 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-09-19 00:29 . 2012-09-19 00:29 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-09-19 00:29 . 2012-09-19 00:29 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-09-19 00:29 . 2012-09-19 00:29 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-09-19 00:29 . 2012-09-19 00:29 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-09-19 00:29 . 2012-09-19 00:29 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-09-19 00:29 . 2012-09-19 00:29 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-09-19 00:29 . 2012-09-19 00:29 222208 ----a-w- c:\windows\system32\msls31.dll
2012-09-19 00:29 . 2012-09-19 00:29 197120 ----a-w- c:\windows\system32\msrating.dll
2012-09-19 00:29 . 2012-09-19 00:29 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-09-19 00:29 . 2012-09-19 00:29 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-09-19 00:29 . 2012-09-19 00:29 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-09-19 00:29 . 2012-09-19 00:29 160256 ----a-w- c:\windows\system32\wextract.exe
2012-09-19 00:29 . 2012-09-19 00:29 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-09-19 00:29 . 2012-09-19 00:29 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-09-19 00:29 . 2012-09-19 00:29 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-09-19 00:29 . 2012-09-19 00:29 149504 ----a-w- c:\windows\system32\occache.dll
2012-09-19 00:29 . 2012-09-19 00:29 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-09-19 00:29 . 2012-09-19 00:29 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-09-19 00:29 . 2012-09-19 00:29 12288 ----a-w- c:\windows\system32\mshta.exe
2012-09-19 00:29 . 2012-09-19 00:29 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-09-19 00:29 . 2012-09-19 00:29 114176 ----a-w- c:\windows\system32\admparse.dll
2012-09-19 00:29 . 2012-09-19 00:29 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-09-19 00:29 . 2012-09-19 00:29 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-09-19 00:29 . 2012-09-19 00:29 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-09-19 00:29 . 2012-09-19 00:29 103936 ----a-w- c:\windows\system32\inseng.dll
2012-09-19 00:29 . 2012-09-19 00:29 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-08-22 18:12 . 2012-09-18 20:25 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-18 20:25 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-18 20:20 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-18 20:25 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-20 17:38 . 2012-10-10 02:29 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-08-02 17:58 . 2012-09-18 20:21 574464 ----a-w- c:\windows\system32\d3d10level9.dll
2012-08-02 16:57 . 2012-09-18 20:21 490496 ----a-w- c:\windows\SysWow64\d3d10level9.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"="c:\program files (x86)\Zrychleni Pocitace\PCSUNotifier.exe" [2012-06-05 188680]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"SDP"="c:\program files (x86)\FilesFrog Update Checker\update_checker.exe" [2012-05-31 200784]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-10-19 5628800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 136176]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 136176]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-09 115168]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-18 1255736]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2012-07-11 140672]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
S2 PCSUService;PC Speed Up Service;c:\program files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-06-05 289544]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-06-25 76912]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-18 16:10]
.
2012-10-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 00:05]
.
2012-10-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-20 00:05]
.
2012-10-19 c:\windows\Tasks\PC SpeedUp Service Deactivator.job
- c:\program files (x86)\Zrychleni Pocitace\PCSUSD.exe [2012-09-18 07:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-06 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-06 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-06 413720]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 94.229.92.40 94.229.92.47
FF - ProfilePath - c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=867034&p=
FF - ExtSQL: 2012-09-18 22:19; {ea614400-e918-4741-9a97-7a972ff7c30b}; c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - ExtSQL: 2012-09-19 00:04; fmconverter@gmail.com; c:\program files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF - ExtSQL: 2012-10-14 21:40; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-ROC_ROC_NT - c:\program files (x86)\AVG Secure Search\ROC_ROC_NT.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-10-19 21:01:01
ComboFix-quarantined-files.txt 2012-10-19 19:01
.
Před spuštěním: Volných bajtů: 183 476 842 496
Po spuštění: Volných bajtů: 183 347 490 816
.
- - End Of File - - 2CBB247DCA23FC0302958446C83068F0

Poprosim o log z DDS

Stahnete DDS odsud http://download.bleepingcomputer.com/sUBs/Beta/dds.exe a ulozte na plochu
Spustte a kliknete na Start
Po chvili vyskoci log, ten rad uvidim

DDS (Ver_2011-09-30.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16421
Run by Radek at 7:07:29 on 2012-10-20
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.988.440 [GMT 2:00]
.
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
uRun: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 94.229.92.40 94.229.92.47
TCP: Interfaces\{9B50EB9F-2AAC-447F-A2A4-79F3036B90F6} : DHCPNameServer = 94.229.92.40 94.229.92.47
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=867034&p=
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrlui.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll
.
============= SERVICES / DRIVERS ===============
.
R1 AppleCharger;AppleCharger;C:\Windows\System32\drivers\AppleCharger.sys [2012-9-16 21544]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2012-10-14 969200]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2012-10-14 359464]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2012-7-11 140672]
R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2012-10-14 25232]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2012-10-14 71600]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-14 44808]
R2 PCSUService;PC Speed Up Service;C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-9-19 289544]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2012-9-18 76912]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Služba Google Update (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-9-20 136176]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-9-18 250808]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-21 71168]
S3 gupdatem;Služba Google Update (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-9-20 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-9-18 115168]
S3 StorSvc;Služba úložiště;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-9-18 1255736]
.
=============== Created Last 30 ================
.
2012-10-19 23:08:03 -------- d-sh--w- C:\$RECYCLE.BIN
2012-10-19 18:51:37 98816 ----a-w- C:\Windows\sed.exe
2012-10-19 18:51:37 256000 ----a-w- C:\Windows\PEV.exe
2012-10-19 18:51:37 208896 ----a-w- C:\Windows\MBR.exe
2012-10-19 17:53:18 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\offreg.dll
2012-10-19 07:21:44 9291768 ------w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\mpengine.dll
2012-10-14 20:52:45 -------- d-----w- C:\Program Files (x86)\MPC-HC
2012-10-14 20:17:15 -------- d-----w- C:\Users\Radek\AppData\Roaming\SUPERAntiSpyware.com
2012-10-14 20:17:06 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-10-14 20:17:06 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-10-14 20:09:46 -------- d-----w- C:\Program Files\trend micro
2012-10-14 19:43:15 -------- d-----w- C:\Program Files\CCleaner
2012-10-14 19:41:07 54072 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2012-10-14 19:41:05 969200 ----a-w- C:\Windows\System32\drivers\aswSnx.sys
2012-10-14 19:40:57 71600 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2012-10-14 19:40:27 41224 ----a-w- C:\Windows\avastSS.scr
2012-10-09 18:42:31 96224 ----a-w- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
2012-10-04 09:55:37 -------- d-----w- C:\Program Files (x86)\MSXML 4.0
2012-10-03 22:07:51 248672 ----a-w- C:\Windows\SysWow64\d3dx11_43.dll
2012-10-03 22:07:38 470880 ----a-w- C:\Windows\SysWow64\d3dx10_43.dll
2012-10-03 22:07:26 1998168 ----a-w- C:\Windows\SysWow64\D3DX9_43.dll
2012-10-03 22:07:10 1868128 ----a-w- C:\Windows\SysWow64\d3dcsx_43.dll
2012-10-03 21:43:32 484352 ----a-w- C:\Windows\SysWow64\lame_enc.dll
2012-09-26 12:49:21 -------- d-----w- C:\Program Files (x86)\VideoLAN
2012-09-26 11:46:16 -------- d-----w- C:\Users\Radek\AppData\Roaming\MyMovieLibrary
2012-09-26 11:27:13 -------- d-----w- C:\Program Files (x86)\My Movie Library
2012-09-26 05:51:14 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2012-09-25 19:46:55 -------- d-----w- C:\Users\Radek\VIDEO_TS
2012-09-25 19:46:55 -------- d-----w- C:\Users\Radek\AUDIO_TS
2012-09-25 14:56:09 -------- d-----w- C:\Program Files (x86)\FilesFrog Update Checker
2012-09-25 14:35:34 -------- d-----w- C:\Users\Radek\AppData\Roaming\AnvSoft
2012-09-25 14:35:04 -------- d-----w- C:\Program Files (x86)\AnvSoft
2012-09-25 12:17:42 902656 ----a-w- C:\Windows\System32\d2d1.dll
2012-09-25 12:17:42 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2012-09-25 12:17:41 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2012-09-25 08:07:30 -------- d-----w- C:\Program Files (x86)\BurnAware Free
2012-09-25 08:06:44 -------- d--h--w- C:\ProgramData\Common Files
2012-09-20 22:06:27 -------- d-----w- C:\Program Files (x86)\Mozilla Firefox.bak
.
==================== Find3M ====================
.
2012-10-09 16:10:41 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-09 16:10:41 696760 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-08-31 18:19:35 1659760 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2012-08-30 18:03:45 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-08-30 17:12:02 3968880 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-08-30 17:12:02 3914096 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-08-24 18:05:07 220160 ----a-w- C:\Windows\System32\wintrust.dll
2012-08-24 16:57:48 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-08-24 10:31:32 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-08-24 10:21:18 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-08-24 10:20:11 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-08-24 10:14:45 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-08-24 10:13:29 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-08-24 10:09:42 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-08-24 06:59:17 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-08-24 06:51:27 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-08-22 18:12:50 1913200 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-08-22 18:12:40 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys
2012-08-22 18:12:40 376688 ----a-w- C:\Windows\System32\drivers\netio.sys
2012-08-22 18:12:33 288624 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2012-08-20 18:48:44 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-08-20 18:48:44 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-08-20 18:48:44 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-08-20 18:48:43 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-08-20 18:48:37 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-08-20 18:48:35 424448 ----a-w- C:\Windows\System32\KernelBase.dll
2012-08-20 18:46:22 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-08-20 17:40:21 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-08-20 17:38:44 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2012-08-20 17:38:26 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-08-20 17:37:19 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-08-20 17:37:18 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-08-20 15:38:21 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-08-20 15:38:20 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-08-20 15:33:28 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-08-20 15:33:28 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-20 15:33:28 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-08-20 15:33:28 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-08-11 00:56:03 715776 ----a-w- C:\Windows\System32\kerberos.dll
2012-08-10 23:56:14 542208 ----a-w- C:\Windows\SysWow64\kerberos.dll
2012-08-02 17:58:52 574464 ----a-w- C:\Windows\System32\d3d10level9.dll
2012-08-02 16:57:20 490496 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
.
============= FINISH: 7:08:02,66 ===============

Odinstalujte Zrychleni Pocitace - ucinek na PC nula nula nic

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Folder::
C:\Program Files (x86)\Zrychleni Pocitace

DDS::
uRun: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
uRun: [Skype]
uRun: [SDP]
uRun: [SUPERAntiSpyware]

Firefox::
FF - ProfilePath - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=green ... =867034&p=

Driver::
PCSUService
gupdate
gupdatem

File::
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\PC SpeedUp Service Deactivator.job

Registry::
[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000001

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Combofix sám restatoval PC,nešlo mi potom nic spustit včetně avastu, tak jsem PC restartavoval a zvolil "poslední známou konfiguraci"

ComboFix 12-10-21.01 - Radek 21.10.2012 8:13.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.988.379 [GMT 2:00]
Spuštěný z: c:\users\Radek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Radek\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\PC SpeedUp Service Deactivator.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Radek\AppData\Roaming\vso_ts_preview.xml
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-21 do 2012-10-21 )))))))))))))))))))))))))))))))
.
.
2012-10-19 17:53 . 2012-10-19 17:53 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\offreg.dll
2012-10-19 07:21 . 2012-10-12 07:19 9291768 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6F48B58-BC7B-42C2-885B-0961A1DBFBFA}\mpengine.dll
2012-10-14 20:53 . 2012-10-20 07:41 -------- d-----w- c:\users\Radek\AppData\Roaming\Media Player Classic
2012-10-14 20:52 . 2012-10-14 20:52 -------- d-----w- c:\program files (x86)\MPC-HC
2012-10-14 20:17 . 2012-10-14 20:17 -------- d-----w- c:\users\Radek\AppData\Roaming\SUPERAntiSpyware.com
2012-10-14 20:17 . 2012-10-19 18:47 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-10-14 20:17 . 2012-10-14 20:17 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-10-14 20:09 . 2012-10-14 20:10 -------- d-----w- c:\program files\trend micro
2012-10-14 20:09 . 2012-10-14 20:10 -------- d-----w- C:\rsit
2012-10-14 19:43 . 2012-10-14 19:43 -------- d-----w- c:\program files\CCleaner
2012-10-14 19:41 . 2012-08-21 09:13 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-14 19:41 . 2012-08-21 09:13 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-14 19:41 . 2012-08-21 09:13 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-14 19:41 . 2012-08-21 09:13 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-14 19:41 . 2012-08-21 09:13 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-14 19:40 . 2012-08-21 09:13 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-14 19:40 . 2012-08-21 09:12 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-14 19:40 . 2012-08-21 09:12 41224 ----a-w- c:\windows\avastSS.scr
2012-10-14 19:40 . 2012-08-21 09:12 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-04 09:55 . 2012-10-04 09:55 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-10-03 22:09 . 2012-10-03 22:13 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-10-03 22:07 . 2010-05-26 09:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2012-10-03 22:07 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll
2012-10-03 21:43 . 2008-09-24 18:33 484352 ----a-w- c:\windows\SysWow64\lame_enc.dll
2012-09-26 12:51 . 2012-10-13 18:55 -------- d-----w- c:\users\Radek\AppData\Roaming\dvdcss
2012-09-26 12:49 . 2012-10-14 19:23 -------- d-----w- c:\users\Radek\AppData\Roaming\vlc
2012-09-26 12:49 . 2012-10-14 19:50 -------- d-----w- c:\program files (x86)\VideoLAN
2012-09-26 11:46 . 2012-10-03 22:17 -------- d-----w- c:\users\Radek\AppData\Roaming\MyMovieLibrary
2012-09-26 11:27 . 2012-09-26 11:46 -------- d-----w- c:\program files (x86)\My Movie Library
2012-09-26 05:51 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-09-25 19:46 . 2012-09-25 19:56 -------- d-----w- c:\users\Radek\VIDEO_TS
2012-09-25 19:46 . 2012-09-25 19:46 -------- d-----w- c:\users\Radek\AUDIO_TS
2012-09-25 14:56 . 2012-09-25 14:56 -------- d-----w- c:\program files (x86)\FilesFrog Update Checker
2012-09-25 14:35 . 2012-09-25 14:35 -------- d-----w- c:\users\Radek\AppData\Roaming\AnvSoft
2012-09-25 14:35 . 2012-09-25 14:35 -------- d-----w- c:\program files (x86)\AnvSoft
2012-09-25 12:17 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-09-25 12:17 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-09-25 12:17 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-09-25 08:07 . 2012-09-25 08:07 -------- d-----w- c:\program files (x86)\BurnAware Free
2012-09-25 08:06 . 2012-09-25 08:06 -------- d--h--w- c:\programdata\Common Files
2012-09-24 06:24 . 2012-09-24 06:24 -------- d-----w- c:\program files (x86)\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 06:18 . 2012-09-18 20:39 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-09 16:10 . 2012-09-18 20:09 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-09 16:10 . 2012-09-18 20:09 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-19 00:29 . 2012-09-19 00:29 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-09-19 00:29 . 2012-09-19 00:29 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-09-19 00:29 . 2012-09-19 00:29 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-09-19 00:29 . 2012-09-19 00:29 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-09-19 00:29 . 2012-09-19 00:29 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-09-19 00:29 . 2012-09-19 00:29 82432 ----a-w- c:\windows\system32\icardie.dll
2012-09-19 00:29 . 2012-09-19 00:29 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-09-19 00:29 . 2012-09-19 00:29 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-09-19 00:29 . 2012-09-19 00:29 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-09-19 00:29 . 2012-09-19 00:29 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-09-19 00:29 . 2012-09-19 00:29 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-09-19 00:29 . 2012-09-19 00:29 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-09-19 00:29 . 2012-09-19 00:29 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-09-19 00:29 . 2012-09-19 00:29 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-09-19 00:29 . 2012-09-19 00:29 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-09-19 00:29 . 2012-09-19 00:29 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-09-19 00:29 . 2012-09-19 00:29 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-09-19 00:29 . 2012-09-19 00:29 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-09-19 00:29 . 2012-09-19 00:29 448512 ----a-w- c:\windows\system32\html.iec
2012-09-19 00:29 . 2012-09-19 00:29 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-09-19 00:29 . 2012-09-19 00:29 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-09-19 00:29 . 2012-09-19 00:29 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-09-19 00:29 . 2012-09-19 00:29 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-09-19 00:29 . 2012-09-19 00:29 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-09-19 00:29 . 2012-09-19 00:29 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-09-19 00:29 . 2012-09-19 00:29 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-09-19 00:29 . 2012-09-19 00:29 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-09-19 00:29 . 2012-09-19 00:29 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-09-19 00:29 . 2012-09-19 00:29 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-09-19 00:29 . 2012-09-19 00:29 222208 ----a-w- c:\windows\system32\msls31.dll
2012-09-19 00:29 . 2012-09-19 00:29 197120 ----a-w- c:\windows\system32\msrating.dll
2012-09-19 00:29 . 2012-09-19 00:29 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-09-19 00:29 . 2012-09-19 00:29 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-09-19 00:29 . 2012-09-19 00:29 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-09-19 00:29 . 2012-09-19 00:29 160256 ----a-w- c:\windows\system32\wextract.exe
2012-09-19 00:29 . 2012-09-19 00:29 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-09-19 00:29 . 2012-09-19 00:29 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-09-19 00:29 . 2012-09-19 00:29 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-09-19 00:29 . 2012-09-19 00:29 149504 ----a-w- c:\windows\system32\occache.dll
2012-09-19 00:29 . 2012-09-19 00:29 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-09-19 00:29 . 2012-09-19 00:29 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-09-19 00:29 . 2012-09-19 00:29 12288 ----a-w- c:\windows\system32\mshta.exe
2012-09-19 00:29 . 2012-09-19 00:29 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-09-19 00:29 . 2012-09-19 00:29 114176 ----a-w- c:\windows\system32\admparse.dll
2012-09-19 00:29 . 2012-09-19 00:29 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-09-19 00:29 . 2012-09-19 00:29 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-09-19 00:29 . 2012-09-19 00:29 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-09-19 00:29 . 2012-09-19 00:29 103936 ----a-w- c:\windows\system32\inseng.dll
2012-09-19 00:29 . 2012-09-19 00:29 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-08-22 18:12 . 2012-09-18 20:25 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-18 20:25 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-18 20:20 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-18 20:25 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-20 17:38 . 2012-10-10 02:29 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-08-02 17:58 . 2012-09-18 20:21 574464 ----a-w- c:\windows\system32\d3d10level9.dll
2012-08-02 16:57 . 2012-09-18 20:21 490496 ----a-w- c:\windows\SysWow64\d3d10level9.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-09 115168]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-18 1255736]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2012-07-11 140672]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-06-25 76912]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-06 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-06 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-06 413720]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 94.229.92.40 94.229.92.47
FF - ProfilePath - c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\
FF - ExtSQL: 2012-09-18 22:19; {ea614400-e918-4741-9a97-7a972ff7c30b}; c:\users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\ja7jzty8.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - ExtSQL: 2012-09-19 00:04; fmconverter@gmail.com; c:\program files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF - ExtSQL: 2012-10-14 21:40; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Celkový čas: 2012-10-21 08:23:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-21 06:23
ComboFix2.txt 2012-10-19 19:01
.
Před spuštěním: Volných bajtů: 178 405 421 056
Po spuštění: Volných bajtů: 178 326 597 632
.
- - End Of File - - 3A3027B2DC4897749968E1A50BD29AC7

Jak neslo nic spustit? daval PC nejakou hlasku?

bylo tam tohle "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni" .

Tak si prectete laskave prosim cely postup dukladne pri aplikovani skriptu a zjistil byste co mate delat

Takze ted je to na kkt, jelikoz jste tim bodem obnovy se vratil zpatky...

Takze skriptu aplikujte znovu a drzte se postupu...

VIRY.CZ

prosím o kontrolu logu

prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu