VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jindra-Dell-modry at 2012-12-02 21:41:42
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 562 GB (92%) free of 610 GB
Total RAM: 3068 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:41:54, on 2.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files\trend micro\Jindra-Dell-modry.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml ... 3godcxQAXQ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{0143E901-B999-4DBD-A71F-62ED8684933C}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{0143E901-B999-4DBD-A71F-62ED8684933C}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{0143E901-B999-4DBD-A71F-62ED8684933C}: NameServer = 160.218.161.60 194.228.211.33
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Text-to-Speech system Epos (ttscp) - Unknown owner - C:\Program Files (x86)\Epos\epos-2.4.85\src\epos.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Wise Boot Assistant (WiseBootAssistant) - WiseCleaner.com - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 6129 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 3635120
\??\C:\Windows\system32\conhost.exe "238496562-179025734819168959891433251764-1906946137-1733446732127992267808295261
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Epos\epos-2.4.85\src\epos.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe" /service /P DellSupportCenter
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2132.d20e900.1500798352 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 2132 "\\.\pipe\gecko-crash-server-pipe.2132" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe" --proxy-stub-channel=Flash3272.6F4BB7B8.41 --host-broker-channel=Flash3272.6F4BB7B8.18467 --host-pid=3272 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe" --channel=2640.0035F8E0.590069036 --proxy-stub-channel=Flash3272.6F4BB7B8.41 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll" --host-npapi-version=27 --type=renderer
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Jindra-Dell-modry\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1260641067-3451729402-1417893360-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1260641067-3451729402-1417893360-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Firefox\Profiles\xn25g6yg.default-1352633655369

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.mywebsearch.com/mywebsear ... searchfor="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@parallelgraphics.com/Cortona]
"Description"=Cortona VRML Plugin
"Path"=C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\npcortona.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
avg-secure-search.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
Search_Results.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Firefox\Profiles\xn25g6yg.default-1352633655369\extensions\
centrumpomocnik@centrum.cz
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Firefox\Profiles\xn25g6yg.default-1352633655369\searchplugins\
firmycz.xml
mapycz.xml
my-web-search.xml
zbocz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-11 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-11 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-25 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-25 155384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2000-01-01 7520768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dellsupportcenter]
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [2009-05-21 206064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iSafeCW]
C:\Users\JINDRA~1\AppData\Local\Temp\Rar$EXa0.917\iSafe AllInOne Keylogger 3.5.8 + Serial Cislo\Keylogger\winsrv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaPCInternetAccess]
C:\Program Files (x86)\Nokia\PC Internet Access\NPCIA.exe [2009-09-17 663552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2012-05-16 1084840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2011-06-16 1500160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickSet]
C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-01-06 3179288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 642728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-23 1890088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray64.exe [2000-01-01 525312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebcamMaxAutoRun]
C:\Program Files (x86)\WebcamMax\WebcamMax.exe [2010-05-19 6043888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WheelMouse]
C:\Program Files\Mouse\Amoumain.exe [2000-01-01 196608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2012-03-05 1389856]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-12-21 249344]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-12-02 14:04:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-12-01 20:56:26 ----D---- C:\Program Files (x86)\YourFileDownloader
2012-11-23 18:28:21 ----A---- C:\Windows\iun6002.exe
2012-11-23 18:28:19 ----D---- C:\Program Files (x86)\Codec Pack - All In 1
2012-11-23 11:00:44 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2012-11-23 11:00:44 ----A---- C:\Windows\SYSWOW64\javaw.exe
2012-11-23 11:00:44 ----A---- C:\Windows\SYSWOW64\java.exe
2012-11-16 19:09:14 ----D---- C:\Program Files (x86)\PCPowerSpeed
2012-11-16 18:49:27 ----D---- C:\Program Files (x86)\ProgDVB
2012-11-15 18:41:34 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2012-11-15 18:41:33 ----A---- C:\Windows\system32\Wdfres.dll
2012-11-15 18:41:33 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2012-11-15 18:35:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-11-15 18:35:50 ----A---- C:\Windows\system32\mshtmled.dll
2012-11-15 18:35:48 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-11-15 18:35:48 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-11-15 18:35:48 ----A---- C:\Windows\system32\ieui.dll
2012-11-15 18:35:47 ----A---- C:\Windows\SYSWOW64\url.dll
2012-11-15 18:35:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-11-15 18:35:47 ----A---- C:\Windows\system32\url.dll
2012-11-15 18:35:47 ----A---- C:\Windows\system32\ieUnatt.exe
2012-11-15 18:35:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-11-15 18:35:46 ----A---- C:\Windows\system32\urlmon.dll
2012-11-15 18:35:46 ----A---- C:\Windows\system32\jscript9.dll
2012-11-15 18:35:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-11-15 18:35:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-11-15 18:35:45 ----A---- C:\Windows\system32\msfeeds.dll
2012-11-15 18:35:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-11-15 18:35:44 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-11-15 18:35:44 ----A---- C:\Windows\system32\wininet.dll
2012-11-15 18:35:44 ----A---- C:\Windows\system32\vbscript.dll
2012-11-15 18:35:44 ----A---- C:\Windows\system32\jsproxy.dll
2012-11-15 18:35:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-11-15 18:35:43 ----A---- C:\Windows\system32\jscript.dll
2012-11-15 18:35:43 ----A---- C:\Windows\system32\iertutil.dll
2012-11-15 18:35:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-11-15 18:35:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-11-15 18:35:40 ----A---- C:\Windows\system32\mshtml.dll
2012-11-15 18:35:39 ----A---- C:\Windows\system32\ieframe.dll
2012-11-15 18:35:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-11-15 18:28:56 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-11-15 18:28:56 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-11-15 18:28:54 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-11-15 18:28:54 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-11-15 18:28:52 ----A---- C:\Windows\system32\WUDFx.dll
2012-11-15 18:28:52 ----A---- C:\Windows\system32\WUDFHost.exe
2012-11-15 18:28:52 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-11-15 18:23:10 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2012-11-15 18:23:10 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2012-11-15 18:23:10 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2012-11-15 18:23:10 ----A---- C:\Windows\system32\dhcpcore6.dll
2012-11-15 18:23:07 ----A---- C:\Windows\system32\win32k.sys
2012-11-15 18:23:05 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-11-15 18:23:04 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2012-11-15 18:23:04 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-11-15 18:23:04 ----A---- C:\Windows\system32\nlasvc.dll
2012-11-15 18:23:04 ----A---- C:\Windows\system32\netcorehc.dll
2012-11-15 18:23:04 ----A---- C:\Windows\system32\ncsi.dll
2012-11-15 18:23:04 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-11-15 18:23:03 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-11-15 18:23:03 ----A---- C:\Windows\system32\nlaapi.dll
2012-11-15 18:23:03 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-11-15 18:23:02 ----A---- C:\Windows\SYSWOW64\netevent.dll
2012-11-15 18:23:02 ----A---- C:\Windows\system32\netevent.dll
2012-11-15 18:22:47 ----A---- C:\Windows\SYSWOW64\synceng.dll
2012-11-15 18:22:47 ----A---- C:\Windows\system32\synceng.dll
2012-11-13 20:47:26 ----D---- C:\Users\Jindra-Dell-modry\AppData\Roaming\Wise Care 365
2012-11-13 20:47:09 ----D---- C:\Program Files (x86)\Wise
2012-11-13 20:21:08 ----D---- C:\Users\Jindra-Dell-modry\AppData\Roaming\Wise Registry Cleaner
2012-11-11 17:26:14 ----A---- C:\Windows\system32\javaws.exe
2012-11-11 17:25:59 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-11-11 17:25:59 ----A---- C:\Windows\system32\javaw.exe
2012-11-11 17:25:59 ----A---- C:\Windows\system32\java.exe
2012-11-04 21:19:44 ----SHD---- C:\Windows\system32\%APPDATA%
2012-11-04 21:04:26 ----D---- C:\Program Files\IDT
2012-11-04 21:02:07 ----D---- C:\Program Files (x86)\AMD APP
2012-11-04 21:01:58 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2012-11-04 21:01:03 ----D---- C:\ProgramData\AMD
2012-11-04 21:01:01 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2012-11-04 21:00:58 ----D---- C:\Program Files (x86)\ATI Technologies
2012-11-04 20:59:34 ----A---- C:\Windows\system32\drivers\AtiPcie64.sys
2012-11-04 20:59:34 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2012-11-04 20:59:34 ----A---- C:\Windows\system32\drivers\amd_xata.sys
2012-11-04 20:59:34 ----A---- C:\Windows\system32\drivers\amd_sata.sys
2012-11-04 20:21:49 ----A---- C:\Windows\system32\drivers\btwampfl.sys
2012-11-04 20:18:53 ----A---- C:\Windows\system32\drivers\btwrchid.sys
2012-11-04 20:18:53 ----A---- C:\Windows\system32\drivers\btwl2cap.sys
2012-11-04 20:18:53 ----A---- C:\Windows\system32\drivers\btwavdt.sys
2012-11-04 20:18:53 ----A---- C:\Windows\system32\drivers\btwaudio.sys
2012-11-04 20:16:55 ----D---- C:\Program Files (x86)\Cisco
2012-11-04 20:15:31 ----A---- C:\Windows\system32\drivers\npf.sys
2012-11-04 20:14:59 ----A---- C:\Windows\system32\drivers\bcmvwl64.sys
2012-11-04 19:54:05 ----D---- C:\Program Files\Mouse
2012-11-04 19:53:58 ----A---- C:\Windows\SYSWOW64\Amhooker.dll
2012-11-04 19:53:58 ----A---- C:\Windows\system32\drivers\Amusbx64.sys
2012-11-04 19:53:58 ----A---- C:\Windows\system32\drivers\Amps2x64.sys
2012-11-04 19:53:58 ----A---- C:\Windows\system32\drivers\Amfltx64.sys
2012-11-04 11:30:35 ----D---- C:\Program Files (x86)\ESET
2012-11-03 19:36:07 ----A---- C:\scu.dat
2012-11-03 17:13:46 ----AD---- C:\ProgramData\TEMP
2012-11-03 17:13:37 ----A---- C:\Windows\SYSWOW64\IJL_11.DLL

======List of files/folders modified in the last 1 month======

2012-12-02 21:41:45 ----D---- C:\Program Files\trend micro
2012-12-02 21:41:14 ----D---- C:\Windows\temp
2012-12-02 21:27:26 ----D---- C:\Windows\inf
2012-12-02 21:27:26 ----AD---- C:\Windows\System32
2012-12-02 21:27:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-02 16:11:37 ----D---- C:\Windows\system32\config
2012-12-02 14:06:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-12-02 14:06:47 ----RD---- C:\Program Files (x86)
2012-12-02 11:11:06 ----D---- C:\Windows\system32\catroot2
2012-12-02 11:00:18 ----D---- C:\Windows\SoftwareDistribution
2012-12-02 10:59:31 ----D---- C:\Windows
2012-12-02 10:56:58 ----D---- C:\Windows\debug
2012-12-01 20:56:29 ----D---- C:\Windows\system32\Tasks
2012-11-30 14:14:41 ----D---- C:\Windows\rescache
2012-11-29 18:40:03 ----D---- C:\Program Files\CCleaner
2012-11-29 07:08:26 ----D---- C:\Windows\winsxs
2012-11-29 07:08:25 ----D---- C:\Windows\AppPatch
2012-11-29 07:08:06 ----SHD---- C:\System Volume Information
2012-11-28 07:26:51 ----D---- C:\Windows\system32\catroot
2012-11-23 18:28:23 ----D---- C:\Windows\SysWOW64
2012-11-23 11:00:57 ----SHD---- C:\Windows\Installer
2012-11-23 11:00:57 ----D---- C:\Config.Msi
2012-11-23 11:00:44 ----D---- C:\Program Files (x86)\Java
2012-11-20 22:03:19 ----D---- C:\Windows\Tasks
2012-11-20 21:20:21 ----D---- C:\Windows\pss
2012-11-18 12:28:17 ----SD---- C:\Users\Jindra-Dell-modry\AppData\Roaming\Microsoft
2012-11-16 19:10:27 ----D---- C:\ProgramData
2012-11-16 17:10:11 ----RSD---- C:\Windows\assembly
2012-11-16 17:10:11 ----D---- C:\Windows\Microsoft.NET
2012-11-15 18:45:39 ----D---- C:\Windows\SYSWOW64\migration
2012-11-15 18:45:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-11-15 18:45:39 ----D---- C:\Windows\system32\wbem
2012-11-15 18:45:39 ----D---- C:\Windows\system32\migration
2012-11-15 18:45:39 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-11-15 18:45:39 ----D---- C:\Windows\system32\drivers
2012-11-15 18:45:39 ----D---- C:\Windows\system32\cs-CZ
2012-11-15 18:45:39 ----D---- C:\Program Files\Internet Explorer
2012-11-15 18:45:39 ----D---- C:\Program Files (x86)\Internet Explorer
2012-11-15 18:45:38 ----RSD---- C:\Windows\Fonts
2012-11-15 18:29:34 ----A---- C:\Windows\system32\MRT.exe
2012-11-13 20:51:05 ----D---- C:\ProgramData\tmp
2012-11-13 20:49:35 ----D---- C:\Windows\Downloaded Program Files
2012-11-13 20:45:20 ----D---- C:\Windows\SYSWOW64\config
2012-11-13 20:42:06 ----D---- C:\Boot
2012-11-13 20:21:17 ----D---- C:\Windows\Prefetch
2012-11-11 17:25:47 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-11-11 17:25:46 ----A---- C:\Windows\system32\deployJava1.dll
2012-11-11 17:25:44 ----D---- C:\Program Files\Java
2012-11-07 21:19:52 ----D---- C:\Users\Jindra-Dell-modry\AppData\Roaming\Nokia
2012-11-05 23:17:54 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-11-04 21:29:41 ----D---- C:\Users\Jindra-Dell-modry\AppData\Roaming\PC Suite
2012-11-04 21:11:16 ----D---- C:\ProgramData\PC Suite
2012-11-04 21:04:26 ----RD---- C:\Program Files
2012-11-04 21:01:58 ----DC---- C:\Windows\system32\DRVSTORE
2012-11-04 21:01:41 ----D---- C:\Program Files\ATI Technologies
2012-11-04 21:01:03 ----D---- C:\Windows\system32\DriverStore
2012-11-04 20:16:46 ----D---- C:\Windows\system32\zh-TW
2012-11-04 20:16:46 ----D---- C:\Windows\system32\zh-HK
2012-11-04 20:16:46 ----D---- C:\Windows\system32\zh-CN
2012-11-04 20:16:46 ----D---- C:\Windows\system32\tr-TR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\th-TH
2012-11-04 20:16:46 ----D---- C:\Windows\system32\sv-SE
2012-11-04 20:16:46 ----D---- C:\Windows\system32\sl-SI
2012-11-04 20:16:46 ----D---- C:\Windows\system32\sk-SK
2012-11-04 20:16:46 ----D---- C:\Windows\system32\ru-RU
2012-11-04 20:16:46 ----D---- C:\Windows\system32\ro-RO
2012-11-04 20:16:46 ----D---- C:\Windows\system32\pt-PT
2012-11-04 20:16:46 ----D---- C:\Windows\system32\pt-BR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\pl-PL
2012-11-04 20:16:46 ----D---- C:\Windows\system32\nl-NL
2012-11-04 20:16:46 ----D---- C:\Windows\system32\nb-NO
2012-11-04 20:16:46 ----D---- C:\Windows\system32\lv-LV
2012-11-04 20:16:46 ----D---- C:\Windows\system32\lt-LT
2012-11-04 20:16:46 ----D---- C:\Windows\system32\ko-KR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\ja-JP
2012-11-04 20:16:46 ----D---- C:\Windows\system32\it-IT
2012-11-04 20:16:46 ----D---- C:\Windows\system32\hu-HU
2012-11-04 20:16:46 ----D---- C:\Windows\system32\hr-HR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\he-IL
2012-11-04 20:16:46 ----D---- C:\Windows\system32\fr-FR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\fi-FI
2012-11-04 20:16:46 ----D---- C:\Windows\system32\et-EE
2012-11-04 20:16:46 ----D---- C:\Windows\system32\es-ES
2012-11-04 20:16:46 ----D---- C:\Windows\system32\en-US
2012-11-04 20:16:46 ----D---- C:\Windows\system32\el-GR
2012-11-04 20:16:46 ----D---- C:\Windows\system32\de-DE
2012-11-04 20:16:46 ----D---- C:\Windows\system32\da-DK
2012-11-04 20:16:46 ----D---- C:\Windows\system32\bg-BG
2012-11-04 20:16:46 ----D---- C:\Windows\system32\ar-SA
2012-11-04 20:16:46 ----D---- C:\Windows\Help
2012-11-04 10:58:31 ----HD---- C:\Program Files (x86)\Eezxlmmlco
2012-11-03 18:25:27 ----D---- C:\ProgramData\Adobe
2012-11-03 18:25:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-11-03 16:46:56 ----D---- C:\Program Files (x86)\Cain

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2000-01-01 82560]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2000-01-01 42624]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Uim_IM;Universal Image Mounter Plugin; C:\Windows\System32\Drivers\Uim_IMx64.sys [2011-07-05 572336]
R1 Uim_VIM;UIM Virtual Image Plugin; C:\Windows\System32\Drivers\uim_vimx64.sys [2011-07-05 352816]
R1 UimBus;Universal Image Mounter Controller; C:\Windows\system32\DRIVERS\uimx64.sys [2011-07-05 59184]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-07-15 51496]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-01-13 6327296]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-01-13 185344]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2000-01-01 96896]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2000-01-01 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2000-01-01 5443648]
R3 BcmVWL;Broadcom Virtual Wireless; C:\Windows\system32\DRIVERS\bcmvwl64.sys [2000-01-01 21568]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2000-01-01 615464]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2000-01-01 184872]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2000-01-01 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2000-01-01 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2000-01-01 21544]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-01-21 505856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-23 301104]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2000-01-01 56448]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 116736]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-01-13 6327296]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 mirrorv3;mirrorv3; C:\Windows\system32\DRIVERS\rminiv3.sys [2009-10-09 5632]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2010-09-30 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2010-09-30 180736]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-04-22 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-01-13 202752]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-03-05 952608]
R2 Capture Device Service;Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 sprtsvc_DellSupportCenter;SupportSoft Sprocket Service (DellSupportCenter); C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe [2009-05-21 206064]
R2 ttscp;Text-to-Speech system Epos; C:\Program Files (x86)\Epos\epos-2.4.85\src\epos.exe [2010-02-09 384000]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2000-01-01 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 WiseBootAssistant;Wise Boot Assistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [2012-07-17 580648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-03 250808]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-02 115168]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-04-22 720936]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-01 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím, tohle :

C:\Program Files (x86)\Eezxlmmlco

znáš ?

Použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

Nic mi to neříká
Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.12.02.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Jindra-Dell-modry :: JINDRAMODREJ [administrátor]

2.12.2012 22:17:29
mbam-log-2012-12-02 (23-09-07).txt

Typ: Úplná kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 341865
Uplynulý čas: 51 minut, 1 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 4
HKCR\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE} (Trojan.BHO) -> Žádná instrukce nebyla provedena.
HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl (PUP.FCTPlugin) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.MyWebsearch) -> Špatný: (http://home.mywebsearch.com/index.jhtml ... 3godcxQAXQ) Dobrý: (http://www.google.com) -> Žádná instrukce nebyla provedena.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\RMSApps\PortScanner\port_scanner.exe (Trojan.Agent.cn) -> Žádná instrukce nebyla provedena.
C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage (PUP.Funmoods) -> Žádná instrukce nebyla provedena.

(konec)

Co mám prosím teda udělat?

Můžu poprosit o kontrolu??

zaskocim:
najdene polozky nechaj odstranit v MBAM
+
prescanuj PC s ADWCleanerom

Sken jsem dělal včera,jak mám tedy postupovat?Udělat nový sken vc MBAM ??

Žádná instrukce nebyla provedena.
ak si to po scane nechal tak, bez dalsej akcie,,, tak musis dat znovu scan a nasledne nechat najdene polozky odstranit v MBAM + restart a kontrola s ADWCleanerom

Mám poté vložit nějaký log?

ano vloz log z ADWCleanera

Nejdřív vkládám log z MBAM
Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.12.02.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Jindra-Dell-modry :: JINDRAMODREJ [administrátor]

3.12.2012 21:01:26
mbam-log-2012-12-03 (21-48-07).txt

Typ: Úplná kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 339997
Uplynulý čas: 44 minut, 15 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 4
HKCR\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE} (Trojan.BHO) -> Žádná instrukce nebyla provedena.
HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl (PUP.FCTPlugin) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.MyWebsearch) -> Špatný: (http://home.mywebsearch.com/index.jhtml ... 3godcxQAXQ) Dobrý: (http://www.google.com) -> Žádná instrukce nebyla provedena.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\RMSApps\PortScanner\port_scanner.exe (Trojan.Agent.cn) -> Žádná instrukce nebyla provedena.
C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage (PUP.Funmoods) -> Žádná instrukce nebyla provedena.

(konec)
Co mám udělat?

Jak psal kolega, to co Mbam našel nech smazat pokud jsi ho již nevypnul.

Pokud ano znovu ho spusť a všechny položky nech smazat, pak log z ADWCleaneru.

Jinak to chce trochu trpělivosti, protože tu nejsem celý den.

Všechny položky,nebo jen ty,co jsou zatrhlé??Zatrhlé jsou 2 a našel jich 7...

# AdwCleaner v2.011 - Logfile created 12/03/2012 at 22:34:37
# Updated 02/12/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Jindra-Dell-modry - JINDRAMODREJ
# Boot Mode : Normal
# Running from : C:\Users\Jindra-Dell-modry\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Found : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Found : C:\user.js
File Found : C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Firefox\Profiles\xn25g6yg.default-1352633655369\searchplugins\my-web-search.xml
Folder Found : C:\Program Files (x86)\ICQ6Toolbar
Folder Found : C:\Program Files (x86)\OApps
Folder Found : C:\Program Files (x86)\yourfiledownloader
Folder Found : C:\ProgramData\boost_interprocess
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Local\Ilivid Player
Folder Found : C:\Users\Jindra-Dell-modry\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Roaming\Media Finder
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Folder Found : C:\Users\Jindra-Dell-modry\AppData\Roaming\yourfiledownloader
Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Key Found : HKCU\Software\APN
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Found : HKCU\Software\IGearSettings
Key Found : HKCU\Software\MediaFinder
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Found : HKLM\SOFTWARE\Classes\MF
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16455

[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Mozilla Firefox v17.0.1 (cs)

Profile name : default-1352633655369 [Profil par défaut]
File : C:\Users\Jindra-Dell-modry\AppData\Roaming\Mozilla\Firefox\Profiles\xn25g6yg.default-1352633655369\prefs.js

Found : user_pref("browser.search.defaultenginename", "My Web Search");
Found : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
Found : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Found : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.seznam.cz/?sourceid=undefined&q=");
Found : user_pref("extensions.mywebsearch.prevSelectedEngine", "Stahuj.cz");
Found : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jh[...]
Found : user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=F657AA19[...]

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Jindra-Dell-modry\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [7927 octets] - [03/12/2012 22:34:37]

########## EOF - C:\AdwCleaner[R1].txt - [7987 octets] ##########