VIRY.CZ

Zdravím, prosím o pomoc mám stejné problém jako uživatel Imaniac. tj. pc jede na max. výkon i když nic nedělám, při spuštění správce úloh to přestane. Avast mi našel Unix:Malware-gen dal ho do truhly ale problém přetrval. Stáhl jsem Combo fix a toto je výsledek:

ComboFix 12-12-14.01 - HP 16.12.2012 20:44:08.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8099.6123 [GMT 1:00]
Spuštěný z: c:\users\HP\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\hpeCA03.dll
c:\users\HP\AppData\Local\Temp\{81ED5AE2-C1B8-491F-977F-86F2254A706B}\fpb.tmp
c:\windows\SysWow64\update
c:\windows\SysWow64\update\diablo121016.cl
c:\windows\SysWow64\update\diakgcn121016.cl
c:\windows\SysWow64\update\igfxupdate.exe
c:\windows\SysWow64\update\libcurl-4.dll
c:\windows\SysWow64\update\libeay32.dll
c:\windows\SysWow64\update\libidn-11.dll
c:\windows\SysWow64\update\libusb-1.0.dll
c:\windows\SysWow64\update\phatk121016.cl
c:\windows\SysWow64\update\poclbm121016.cl
c:\windows\SysWow64\update\poclbm121016GeForce GT 440gv1w256l4.bin
c:\windows\SysWow64\update\pthreadGC2.dll
c:\windows\SysWow64\update\ssleay32.dll
c:\windows\SysWow64\update\zlib1.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-16 do 2012-12-16 )))))))))))))))))))))))))))))))
.
.
2012-12-16 19:48 . 2012-12-16 19:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-16 19:48 . 2012-12-16 19:48 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-12-15 12:30 . 2012-12-13 12:29 269824 ----a-w- c:\windows\SysWow64\igfxupdate.exe
2012-12-14 10:04 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{69665619-81A7-40F7-AE7A-172543C84DFA}\mpengine.dll
2012-12-13 12:29 . 2012-12-13 12:29 410112 ----a-w- c:\windows\system32\taskhost.rs
2012-12-13 12:29 . 2012-12-13 12:29 307712 ----a-w- c:\windows\system32\SearchIndexer.dll
2012-12-13 12:29 . 2012-12-13 12:29 269824 ----a-w- c:\windows\system32\SearchEngine.rs
2012-12-12 12:03 . 2012-10-04 17:45 215040 ----a-w- c:\windows\system32\winsrv.dll
2012-12-10 09:19 . 2012-12-16 09:35 -------- d-----w- c:\program files (x86)\Common Files\Steam
2012-12-09 18:27 . 2012-12-09 18:27 -------- d-----w- c:\users\HP\AppData\Local\2K Games
2012-12-09 13:50 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2012-12-09 13:49 . 2007-05-16 15:45 506728 ----a-w- c:\windows\system32\d3dx10_34.dll
2012-11-27 12:48 . 2012-11-27 12:48 -------- d-----w- c:\users\HP\AppData\Local\CrashRpt
2012-11-27 12:45 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-11-26 15:57 . 2012-11-26 15:57 -------- d-----w- c:\users\HP\AppData\Local\DownTango
2012-11-26 15:56 . 2012-11-26 15:56 -------- d-----w- c:\program files (x86)\Red Sky
2012-11-25 23:32 . 2012-11-27 10:27 -------- d-----w- c:\programdata\Test Drive Unlimited
2012-11-21 09:58 . 2012-11-21 09:58 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-20 18:59 . 2012-11-20 18:59 -------- d-----w- c:\users\HP\AppData\Local\ElevatedDiagnostics
2012-11-19 10:53 . 2012-11-19 10:53 -------- d-----w- c:\program files (x86)\Common Files\PCSuite
2012-11-19 10:52 . 2012-11-19 10:52 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2012-11-18 21:57 . 2012-11-18 21:57 -------- d-----w- c:\program files (x86)\QuickTime
2012-11-18 09:41 . 2012-11-27 14:32 -------- d-----w- c:\users\HP\AppData\Local\Microsoft Games
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 12:05 . 2012-06-12 05:02 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-10-30 22:51 . 2012-07-13 08:22 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-07-13 08:22 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-07-13 08:22 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-07-13 08:22 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-07-13 08:22 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-07-13 08:22 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-07-13 08:22 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-30 22:50 . 2012-07-13 08:22 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-28 18:37 . 2012-10-28 18:37 9736647 ----a-w- c:\windows\SysWow64\CDSM_CDSM Designer_uninstaller.exe
2012-10-25 02:12 . 2012-10-25 02:12 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2012-10-25 02:12 . 2012-10-25 02:12 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2012-10-24 05:13 . 2012-06-11 09:21 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-24 05:13 . 2012-06-11 09:21 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-16 08:38 . 2012-11-28 08:51 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 08:51 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 08:51 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-07-13 08:22 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-09 18:17 . 2012-11-14 13:26 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 18:17 . 2012-11-14 13:26 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-09 17:40 . 2012-11-14 13:26 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-14 13:26 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2012-10-04 16:40 . 2012-12-12 12:03 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-03 17:56 . 2012-11-14 13:26 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-03 17:44 . 2012-11-14 13:26 70656 ----a-w- c:\windows\system32\nlaapi.dll
2012-10-03 17:44 . 2012-11-14 13:26 303104 ----a-w- c:\windows\system32\nlasvc.dll
2012-10-03 17:44 . 2012-11-14 13:26 246272 ----a-w- c:\windows\system32\netcorehc.dll
2012-10-03 17:44 . 2012-11-14 13:26 18944 ----a-w- c:\windows\system32\netevent.dll
2012-10-03 17:44 . 2012-11-14 13:26 216576 ----a-w- c:\windows\system32\ncsi.dll
2012-10-03 17:42 . 2012-11-14 13:26 569344 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-10-03 16:42 . 2012-11-14 13:26 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42 . 2012-11-14 13:26 18944 ----a-w- c:\windows\SysWow64\netevent.dll
2012-10-03 16:42 . 2012-11-14 13:26 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2012-10-03 16:07 . 2012-11-14 13:26 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-10-02 22:21 . 2012-11-03 20:13 9146728 ----a-w- c:\windows\system32\nvcuda.dll
2012-10-02 22:21 . 2012-11-03 20:13 831848 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2012-10-02 22:21 . 2012-11-03 20:13 7697768 ----a-w- c:\windows\SysWow64\nvcuda.dll
2012-10-02 22:21 . 2012-11-03 20:13 7414632 ----a-w- c:\windows\system32\nvopencl.dll
2012-10-02 22:21 . 2012-11-03 20:13 6127464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2012-10-02 22:21 . 2012-11-03 20:13 2747240 ----a-w- c:\windows\system32\nvcuvid.dll
2012-10-02 22:21 . 2012-11-03 20:13 26331496 ----a-w- c:\windows\system32\nvoglv64.dll
2012-10-02 22:21 . 2012-11-03 20:13 2574696 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2012-10-02 22:21 . 2012-11-03 20:13 25256296 ----a-w- c:\windows\system32\nvcompiler.dll
2012-10-02 22:21 . 2012-11-03 20:13 2428776 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-10-02 22:21 . 2012-11-03 20:13 2218344 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-10-02 22:21 . 2012-11-03 20:13 19906920 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2012-10-02 22:21 . 2012-11-03 20:13 1867112 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2012-10-02 22:21 . 2012-11-03 20:13 17559912 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2012-10-02 22:21 . 2012-11-03 20:13 15309160 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-10-02 22:21 . 2012-11-03 20:13 13443944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-10-02 22:21 . 2012-11-03 20:13 12501352 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2012-10-02 22:21 . 2012-09-13 13:42 18252136 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-10-02 22:21 . 2012-09-13 13:42 1482600 ----a-w- c:\windows\system32\nvdispgenco64.dll
2012-10-02 22:21 . 2012-03-15 01:59 973672 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-10-02 22:21 . 2012-03-15 01:59 247144 ----a-w- c:\windows\system32\nvinitx.dll
2012-10-02 22:21 . 2012-03-15 01:59 202600 ----a-w- c:\windows\SysWow64\nvinit.dll
2012-10-02 22:21 . 2012-03-15 01:59 1760104 ----a-w- c:\windows\system32\nvdispco64.dll
2012-10-02 22:21 . 2010-08-08 22:05 2731880 ----a-w- c:\windows\system32\nvapi64.dll
2012-10-02 22:21 . 2010-08-08 22:05 14922600 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-10-02 19:51 . 2012-06-12 04:47 3536817 ----a-w- c:\windows\system32\nvcoproc.bin
2012-10-02 19:51 . 2010-08-08 21:12 3293544 ----a-w- c:\windows\system32\nvsvc64.dll
2012-10-02 19:51 . 2010-08-08 21:12 6200680 ----a-w- c:\windows\system32\nvcpl.dll
2012-10-02 19:50 . 2010-08-08 21:12 891240 ----a-w- c:\windows\system32\nvvsvc.exe
2012-10-02 19:50 . 2010-08-08 21:12 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-10-02 19:50 . 2010-08-08 21:12 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-10-02 12:15 . 2012-10-02 12:15 430952 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-09-25 22:47 . 2012-11-14 13:26 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-09-25 22:46 . 2012-11-14 13:26 95744 ----a-w- c:\windows\system32\synceng.dll
2012-09-24 21:16 . 2012-10-18 20:34 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\programs\daemon\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"avast"="c:\programs\avast\avastUI.exe" [2012-10-30 4297136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 ALSysIO;ALSysIO;c:\users\HP\AppData\Local\Temp\ALSysIO64.sys [x]
R3 DragonUpdater;COMODO Dragon Update Service;c:\programs\Comodo\Dragon\dragon_updater.exe [2012-12-13 1868432]
R3 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 127600]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 19568]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 161904]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 141424]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 34416]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 137328]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 158320]
R3 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-06-12 1255736]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-12 283200]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 SearchIndexer;Search Indexer;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [2010-07-21 1002848]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-12-29 412776]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 08:28]
.
2012-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 08:28]
.
2012-12-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
- c:\users\HP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-12 08:17]
.
2012-12-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job
- c:\users\HP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-12 08:17]
.
2012-12-16 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
- c:\users\HP\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-17 10:28]
.
2012-12-16 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job
- c:\users\HP\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-17 10:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\programs\avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-27 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-27 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-27 418328]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-04-24 1425408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
SearchIndexer
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.centrum.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Stáhnout s Mipony - file://c:\programs\mipony\Browser\IEContext.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=112842&tt=3612_8&babsrc=KW_ss&mntrId=769a50ea000000000000e06995b0a1c2&q=
FF - prefs.js: network.proxy.type - 0
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
WebBrowser-{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - (no file)
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4241224752-616104112-686846821-1000\Software\SecuROM\License information*]
"datasecu"=hex:1d,8f,ee,63,67,84,e6,f3,7f,eb,2d,7b,a4,76,2d,ea,d7,6f,67,25,b6,
fd,61,1f,17,5d,f8,1e,4b,f5,59,08,25,33,d5,d6,6e,7d,9d,63,0f,70,71,c3,81,b1,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-4241224752-616104112-686846821-1000\`*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_268_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_268_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-12-16 20:51:41
ComboFix-quarantined-files.txt 2012-12-16 19:51
.
Před spuštěním: Volných bajtů: 176 954 732 544
Po spuštění: Volných bajtů: 183 326 728 192
.
- - End Of File - - 3451B61A09C268699A2146CDE2A2E723

Také zdravím!
Asi jste nečetl pravidla fóra, když spouštíte CF, utilitu určenou pouze odborníkům bez porady s rádcem.

Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\SysWow64\igfxupdate.exe
c:\windows\system32\taskhost.rs
c:\windows\system32\SearchEngine.rs
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job

Firefox::
FF - ProfilePath - c:\users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default\
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=112842 ... 5b0a1c2&q=
FF - prefs.js: network.proxy.type - 0
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);

Regnull::
[HKEY_USERS\S-1-5-21-4241224752-616104112-686846821-1000\Software\SecuROM\License information*]
[HKEY_USERS\S-1-5-21-4241224752-616104112-686846821-1000\`*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příakzy ze skriptu.

Zdravím,
úvodem se chci omluvit za neodbornou aplikaci programu, dnes jsem to už řešil podle Vás a problém je pryč, komp už jede normálně. Jestli je to všechno tak Vám mockrat děkuji a jsem Vaším dlužníkem




ComboFix 12-12-17.02 - HP 18.12.2012 11:01:46.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8099.5640 [GMT 1:00]
Spuštěný z: c:\users\HP\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\HP\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\SearchEngine.rs"
"c:\windows\system32\taskhost.rs"
"c:\windows\SysWow64\igfxupdate.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\SearchEngine.rs
c:\windows\system32\taskhost.rs
c:\windows\SysWow64\igfxupdate.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-18 do 2012-12-18 )))))))))))))))))))))))))))))))
.
.
2012-12-18 10:05 . 2012-12-18 10:05 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-12-18 10:05 . 2012-12-18 10:05 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-18 09:46 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6C309C79-4CE0-4A88-B980-3595BFD4ACF5}\mpengine.dll
2012-12-13 12:29 . 2012-12-13 12:29 307712 ----a-w- c:\windows\system32\SearchIndexer.dll
2012-12-12 12:03 . 2012-10-04 17:45 215040 ----a-w- c:\windows\system32\winsrv.dll
2012-12-10 09:19 . 2012-12-16 09:35 -------- d-----w- c:\program files (x86)\Common Files\Steam
2012-12-09 18:27 . 2012-12-09 18:27 -------- d-----w- c:\users\HP\AppData\Local\2K Games
2012-12-09 13:50 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2012-12-09 13:49 . 2007-05-16 15:45 506728 ----a-w- c:\windows\system32\d3dx10_34.dll
2012-11-27 12:48 . 2012-11-27 12:48 -------- d-----w- c:\users\HP\AppData\Local\CrashRpt
2012-11-27 12:45 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-11-26 15:57 . 2012-11-26 15:57 -------- d-----w- c:\users\HP\AppData\Local\DownTango
2012-11-26 15:56 . 2012-11-26 15:56 -------- d-----w- c:\program files (x86)\Red Sky
2012-11-25 23:32 . 2012-11-27 10:27 -------- d-----w- c:\programdata\Test Drive Unlimited
2012-11-21 09:58 . 2012-11-21 09:58 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-20 18:59 . 2012-11-20 18:59 -------- d-----w- c:\users\HP\AppData\Local\ElevatedDiagnostics
2012-11-19 10:53 . 2012-11-19 10:53 -------- d-----w- c:\program files (x86)\Common Files\PCSuite
2012-11-19 10:52 . 2012-11-19 10:52 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2012-11-18 21:57 . 2012-11-18 21:57 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2012-11-18 21:57 . 2012-11-18 21:57 -------- d-----w- c:\program files (x86)\QuickTime
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 12:05 . 2012-06-12 05:02 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-10-30 22:51 . 2012-07-13 08:22 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-07-13 08:22 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-07-13 08:22 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-07-13 08:22 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-07-13 08:22 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-07-13 08:22 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-07-13 08:22 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-30 22:50 . 2012-07-13 08:22 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-28 18:37 . 2012-10-28 18:37 9736647 ----a-w- c:\windows\SysWow64\CDSM_CDSM Designer_uninstaller.exe
2012-10-25 02:12 . 2012-10-25 02:12 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2012-10-25 02:12 . 2012-10-25 02:12 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2012-10-24 05:13 . 2012-06-11 09:21 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-24 05:13 . 2012-06-11 09:21 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-16 08:38 . 2012-11-28 08:51 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 08:51 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 08:51 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-07-13 08:22 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-09 18:17 . 2012-11-14 13:26 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 18:17 . 2012-11-14 13:26 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-09 17:40 . 2012-11-14 13:26 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-14 13:26 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2012-10-04 16:40 . 2012-12-12 12:03 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-03 17:56 . 2012-11-14 13:26 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-03 17:44 . 2012-11-14 13:26 70656 ----a-w- c:\windows\system32\nlaapi.dll
2012-10-03 17:44 . 2012-11-14 13:26 303104 ----a-w- c:\windows\system32\nlasvc.dll
2012-10-03 17:44 . 2012-11-14 13:26 246272 ----a-w- c:\windows\system32\netcorehc.dll
2012-10-03 17:44 . 2012-11-14 13:26 18944 ----a-w- c:\windows\system32\netevent.dll
2012-10-03 17:44 . 2012-11-14 13:26 216576 ----a-w- c:\windows\system32\ncsi.dll
2012-10-03 17:42 . 2012-11-14 13:26 569344 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-10-03 16:42 . 2012-11-14 13:26 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42 . 2012-11-14 13:26 18944 ----a-w- c:\windows\SysWow64\netevent.dll
2012-10-03 16:42 . 2012-11-14 13:26 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2012-10-03 16:07 . 2012-11-14 13:26 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-10-02 22:21 . 2012-11-03 20:13 9146728 ----a-w- c:\windows\system32\nvcuda.dll
2012-10-02 22:21 . 2012-11-03 20:13 831848 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2012-10-02 22:21 . 2012-11-03 20:13 7697768 ----a-w- c:\windows\SysWow64\nvcuda.dll
2012-10-02 22:21 . 2012-11-03 20:13 7414632 ----a-w- c:\windows\system32\nvopencl.dll
2012-10-02 22:21 . 2012-11-03 20:13 6127464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2012-10-02 22:21 . 2012-11-03 20:13 2747240 ----a-w- c:\windows\system32\nvcuvid.dll
2012-10-02 22:21 . 2012-11-03 20:13 26331496 ----a-w- c:\windows\system32\nvoglv64.dll
2012-10-02 22:21 . 2012-11-03 20:13 2574696 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2012-10-02 22:21 . 2012-11-03 20:13 25256296 ----a-w- c:\windows\system32\nvcompiler.dll
2012-10-02 22:21 . 2012-11-03 20:13 2428776 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-10-02 22:21 . 2012-11-03 20:13 2218344 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-10-02 22:21 . 2012-11-03 20:13 19906920 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2012-10-02 22:21 . 2012-11-03 20:13 1867112 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2012-10-02 22:21 . 2012-11-03 20:13 17559912 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2012-10-02 22:21 . 2012-11-03 20:13 15309160 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-10-02 22:21 . 2012-11-03 20:13 13443944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-10-02 22:21 . 2012-11-03 20:13 12501352 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2012-10-02 22:21 . 2012-09-13 13:42 18252136 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-10-02 22:21 . 2012-09-13 13:42 1482600 ----a-w- c:\windows\system32\nvdispgenco64.dll
2012-10-02 22:21 . 2012-03-15 01:59 973672 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-10-02 22:21 . 2012-03-15 01:59 247144 ----a-w- c:\windows\system32\nvinitx.dll
2012-10-02 22:21 . 2012-03-15 01:59 202600 ----a-w- c:\windows\SysWow64\nvinit.dll
2012-10-02 22:21 . 2012-03-15 01:59 1760104 ----a-w- c:\windows\system32\nvdispco64.dll
2012-10-02 22:21 . 2010-08-08 22:05 2731880 ----a-w- c:\windows\system32\nvapi64.dll
2012-10-02 22:21 . 2010-08-08 22:05 14922600 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-10-02 19:51 . 2012-06-12 04:47 3536817 ----a-w- c:\windows\system32\nvcoproc.bin
2012-10-02 19:51 . 2010-08-08 21:12 3293544 ----a-w- c:\windows\system32\nvsvc64.dll
2012-10-02 19:51 . 2010-08-08 21:12 6200680 ----a-w- c:\windows\system32\nvcpl.dll
2012-10-02 19:50 . 2010-08-08 21:12 891240 ----a-w- c:\windows\system32\nvvsvc.exe
2012-10-02 19:50 . 2010-08-08 21:12 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-10-02 19:50 . 2010-08-08 21:12 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-10-02 12:15 . 2012-10-02 12:15 430952 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-09-25 22:47 . 2012-11-14 13:26 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-09-25 22:46 . 2012-11-14 13:26 95744 ----a-w- c:\windows\system32\synceng.dll
2012-09-24 21:16 . 2012-10-18 20:34 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\programs\daemon\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"avast"="c:\programs\avast\avastUI.exe" [2012-10-30 4297136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 ALSysIO;ALSysIO;c:\users\HP\AppData\Local\Temp\ALSysIO64.sys [x]
R3 DragonUpdater;COMODO Dragon Update Service;c:\programs\Comodo\Dragon\dragon_updater.exe [2012-12-13 1868432]
R3 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 127600]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 19568]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 161904]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 141424]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 34416]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 137328]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 158320]
R3 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-06-12 1255736]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-12 283200]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 SearchIndexer;Search Indexer;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [2010-07-21 1002848]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-12-29 412776]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-17 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
- c:\users\HP\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-17 10:28]
.
2012-12-18 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job
- c:\users\HP\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-17 10:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\programs\avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-27 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-27 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-27 418328]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-04-24 1425408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
SearchIndexer
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.centrum.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Stáhnout s Mipony - file://c:\programs\mipony\Browser\IEContext.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4241224752-616104112-686846821-1000\`*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\programs\avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2012-12-18 11:10:27 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-12-18 10:10
ComboFix2.txt 2012-12-16 19:51
.
Před spuštěním: Volných bajtů: 186 183 020 544
Po spuštění: Volných bajtů: 185 777 758 208
.
- - End Of File - - 1BB69CFB8B419F530D9E85390B549302

Je to opravdu vše, log již vypadá čistý. Nemáte zač!

Zdravím,
tak včera se mi vir už neprojevil, ale dneska při spuštění počítače zase to samé, tj, pc jede na max výkon i když nic nedělám. Prosím zkuste se na to podívat.


Logfile of random's system information tool 1.09 (written by random/random)
Run by HP at 2012-12-19 12:16:25
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 168 GB (28%) free of 610 GB
Total RAM: 8099 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:16:30, on 19.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\PROGRAMS\avast\AvastUI.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files\trend micro\HP.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRAMS\avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRAMS\avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [avast] "C:\PROGRAMS\avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\PROGRAMS\daemon\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: Stáhnout s Mipony - file://C:\PROGRAMS\mipony\Browser\IEContext.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20614.www2.hp.com/ediags/gmd/In ... ect118.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\PROGRAMS\avast\AvastSvc.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\PROGRAMS\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8963 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\PROGRAMS\avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
taskeng.exe {CC2F5938-91B3-4F17-99D1-3B060C6D2FA1}
taskeng.exe {333AD5EC-07D6-4623-B523-326DD8CB1866}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Users\HP\Downloads\PCMeter\PCMeter\PCMeter.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
WLIDSvcM.exe 2768
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\PROGRAMS\avast\AvastUI.exe" /nogui
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-48a021dd-5460-47ef-a75e-9f92f8cc5134 -SystemEventPortName:HostProcess-bbc5102a-1787-41e4-b57a-7ab14ac7bf01 -IoCancelEventPortName:HostProcess-a5f74d89-044b-4b87-902e-462e5df1f987 -NonStateChangingEventPortName:HostProcess-59e5aaeb-ce2a-42f8-a3ca-c047e027b60b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ce945ca5-61cd-4753-addd-3ea48f92cc1e -DeviceGroupId:WpdFsGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2568 CREDAT:203009
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe -Embedding
taskmgr.exe /3
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2568 CREDAT:137486
"C:\Users\HP\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.4.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.4.0]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default\searchplugins\
icq-search.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-06-11 545224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-06-11 193480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-24 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-24 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-01-27 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-01-27 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-01-27 418328]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-04-24 1425408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\PROGRAMS\daemon\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"avast"=C:\PROGRAMS\avast\avastUI.exe [2012-10-30 4297136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-01-27 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux1"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-12-19 12:16:25 ----D---- C:\rsit
2012-12-19 12:16:25 ----D---- C:\Program Files\trend micro
2012-12-19 10:53:33 ----A---- C:\Windows\SYSWOW64\igfxupdate.exe
2012-12-18 11:38:10 ----D---- C:\Windows\SYSWOW64\update
2012-12-18 11:10:29 ----A---- C:\ComboFix.txt
2012-12-18 11:07:20 ----D---- C:\$RECYCLE.BIN
2012-12-16 20:42:23 ----A---- C:\Windows\zip.exe
2012-12-16 20:42:23 ----A---- C:\Windows\SWSC.exe
2012-12-16 20:42:23 ----A---- C:\Windows\SWREG.exe
2012-12-16 20:42:23 ----A---- C:\Windows\sed.exe
2012-12-16 20:42:23 ----A---- C:\Windows\PEV.exe
2012-12-16 20:42:23 ----A---- C:\Windows\NIRCMD.exe
2012-12-16 20:42:23 ----A---- C:\Windows\MBR.exe
2012-12-16 20:42:23 ----A---- C:\Windows\grep.exe
2012-12-16 20:42:19 ----D---- C:\Qoobox
2012-12-16 20:42:09 ----D---- C:\Windows\erdnt
2012-12-13 13:29:59 ----A---- C:\Windows\system32\SearchIndexer.dll
2012-12-13 13:29:59 ----A---- C:\Windows\system32\SearchEngine.dat
2012-12-12 13:04:48 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-12 13:04:46 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-12 13:04:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-12 13:04:46 ----A---- C:\Windows\system32\url.dll
2012-12-12 13:04:46 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-12 13:04:46 ----A---- C:\Windows\system32\ieui.dll
2012-12-12 13:04:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\urlmon.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\jscript9.dll
2012-12-12 13:04:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-12 13:04:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-12 13:04:43 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-12 13:04:43 ----A---- C:\Windows\system32\wininet.dll
2012-12-12 13:04:43 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-12 13:04:42 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-12 13:04:42 ----A---- C:\Windows\system32\vbscript.dll
2012-12-12 13:04:42 ----A---- C:\Windows\system32\jscript.dll
2012-12-12 13:04:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-12 13:04:41 ----A---- C:\Windows\system32\iertutil.dll
2012-12-12 13:04:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-12 13:04:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-12 13:04:38 ----A---- C:\Windows\system32\mshtml.dll
2012-12-12 13:04:37 ----A---- C:\Windows\system32\ieframe.dll
2012-12-12 13:04:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-12 13:04:00 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-12 13:04:00 ----A---- C:\Windows\system32\tzres.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\winsrv.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\conhost.exe
2012-12-12 13:03:52 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-12 13:03:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-12 13:03:45 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-12 13:03:44 ----A---- C:\Windows\system32\wow64win.dll
2012-12-12 13:03:44 ----A---- C:\Windows\system32\wow64.dll
2012-12-12 13:03:43 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-12 13:03:41 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-12 13:03:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 13:03:33 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-12 13:03:25 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\atmlib.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\atmfd.dll
2012-12-09 19:21:48 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-12-09 19:21:48 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-12-09 19:21:48 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-12-09 19:21:48 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-12-09 19:21:47 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-12-09 19:21:47 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-12-09 19:21:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-12-09 19:21:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-12-09 19:21:42 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-12-09 19:21:42 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-12-09 19:21:40 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-12-09 19:21:40 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-12-09 19:21:38 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-12-09 19:21:38 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-12-09 19:21:36 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-12-09 19:21:36 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-12-09 14:50:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-12-09 14:50:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-12-09 14:50:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-12-09 14:50:42 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-12-09 14:50:41 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-12-09 14:50:41 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-12-09 14:50:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-12-09 14:50:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-12-09 14:50:37 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-12-09 14:50:37 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-12-09 14:50:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-12-09 14:50:35 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-12-09 14:50:33 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-12-09 14:50:32 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-12-09 14:50:32 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-12-09 14:50:31 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-12-09 14:50:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-12-09 14:50:31 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-12-09 14:50:31 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-12-09 14:50:30 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-12-09 14:50:30 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-12-09 14:50:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-12-09 14:50:29 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-12-09 14:50:27 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-12-09 14:50:26 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-12-09 14:50:25 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-12-09 14:50:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-12-09 14:50:25 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-12-09 14:50:25 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-12-09 14:50:24 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-12-09 14:50:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-12-09 14:50:24 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-12-09 14:50:24 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-12-09 14:50:23 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-12-09 14:50:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-12-09 14:50:23 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-12-09 14:50:23 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-12-09 14:50:22 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-12-09 14:50:22 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-12-09 14:50:19 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-12-09 14:50:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-12-09 14:50:19 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-12-09 14:50:19 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-12-09 14:50:18 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-12-09 14:50:18 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-12-09 14:50:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-12-09 14:50:17 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-12-09 14:50:16 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-12-09 14:50:15 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-12-09 14:50:15 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-12-09 14:50:14 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-12-09 14:50:14 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-12-09 14:50:13 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-12-09 14:50:13 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-12-09 14:50:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-12-09 14:50:12 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-12-09 14:50:11 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-12-09 14:50:09 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-12-09 14:50:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-12-09 14:50:08 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-12-09 14:50:08 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-12-09 14:50:06 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-12-09 14:50:05 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-12-09 14:50:05 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-12-09 14:50:04 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-12-09 14:50:04 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-12-09 14:50:03 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-12-09 14:50:02 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-12-09 14:50:02 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-12-09 14:50:01 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-12-09 14:50:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-12-09 14:50:01 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-12-09 14:50:01 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-12-09 14:49:59 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-12-09 14:49:58 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-12-09 14:49:58 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-12-09 14:49:57 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-12-09 14:49:57 ----A---- C:\Windows\system32\xinput1_3.dll
2012-12-09 14:49:56 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-12-09 14:49:56 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-12-09 14:49:55 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-12-09 14:49:55 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-12-09 14:49:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-12-09 14:49:50 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-12-05 21:54:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-11-27 13:45:35 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-11-26 16:56:59 ----D---- C:\Program Files (x86)\Red Sky
2012-11-26 00:32:43 ----D---- C:\ProgramData\Test Drive Unlimited

======List of files/folders modified in the last 1 month======

2012-12-19 12:16:30 ----D---- C:\Windows\Prefetch
2012-12-19 12:16:28 ----D---- C:\Windows\Temp
2012-12-19 12:16:25 ----RD---- C:\Program Files
2012-12-19 11:58:44 ----D---- C:\Users\HP\AppData\Roaming\Skype
2012-12-19 11:07:22 ----D---- C:\Windows\system32\config
2012-12-19 10:55:57 ----A---- C:\Windows\SYSWOW64\log.txt
2012-12-19 10:53:33 ----D---- C:\Windows\SysWOW64
2012-12-18 11:38:10 ----D---- C:\Windows\System32
2012-12-18 11:10:34 ----D---- C:\Windows\system32\drivers
2012-12-18 11:07:28 ----D---- C:\Windows
2012-12-18 11:07:28 ----A---- C:\Windows\system.ini
2012-12-18 11:07:19 ----D---- C:\Windows\system32\drivers\etc
2012-12-18 11:05:39 ----D---- C:\Windows\Tasks
2012-12-18 11:04:22 ----D---- C:\Windows\SYSWOW64\drivers
2012-12-18 11:04:22 ----D---- C:\Windows\AppPatch
2012-12-18 11:04:21 ----D---- C:\Program Files (x86)\Common Files
2012-12-18 10:46:43 ----SHD---- C:\System Volume Information
2012-12-16 20:48:29 ----D---- C:\ProgramData
2012-12-16 17:10:49 ----D---- C:\Users\HP\AppData\Roaming\vlc
2012-12-16 10:22:19 ----D---- C:\Windows\inf
2012-12-16 10:22:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-15 14:57:21 ----D---- C:\ProgramData\NVIDIA
2012-12-13 13:29:31 ----D---- C:\HRY
2012-12-12 14:57:16 ----D---- C:\Windows\rescache
2012-12-12 14:03:29 ----D---- C:\Windows\winsxs
2012-12-12 14:01:59 ----D---- C:\Windows\SYSWOW64\migration
2012-12-12 14:01:59 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-12 14:01:59 ----D---- C:\Windows\system32\migration
2012-12-12 14:01:59 ----D---- C:\Windows\system32\cs-CZ
2012-12-12 14:01:59 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-12 14:01:58 ----D---- C:\Program Files\Internet Explorer
2012-12-12 13:05:43 ----A---- C:\Windows\system32\MRT.exe
2012-12-12 13:04:58 ----D---- C:\Windows\system32\catroot
2012-12-12 13:04:57 ----D---- C:\Windows\system32\catroot2
2012-12-10 10:19:45 ----SHD---- C:\Windows\Installer
2012-12-09 23:50:26 ----D---- C:\ProgramData\Solidshield
2012-12-09 23:32:42 ----RSD---- C:\Windows\assembly
2012-12-07 09:22:15 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-12-06 08:43:45 ----RD---- C:\Program Files (x86)
2012-12-02 00:27:01 ----D---- C:\Windows\system32\Tasks
2012-11-30 17:04:56 ----D---- C:\Users\HP\AppData\Roaming\Mozilla
2012-11-30 17:04:51 ----D---- C:\PROGRAMS
2012-11-27 08:04:49 ----D---- C:\Program Files\Google
2012-11-27 08:04:49 ----D---- C:\Program Files (x86)\Google
2012-11-23 12:02:05 ----D---- C:\Windows\system32\NDF
2012-11-21 10:58:43 ----D---- C:\ProgramData\Skype
2012-11-21 10:58:41 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-09-13 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Amfilter;Compatible Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfltx64.sys [2007-10-15 12288]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-12 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R3 Amusbprt;USB HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbx64.sys [2008-02-13 17920]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-01-27 12273408]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-07-21 1002848]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-29 412776]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-04-24 536576]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
R3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]
S3 ALSysIO;ALSysIO; \??\C:\Users\HP\AppData\Local\Temp\ALSysIO64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2009-11-19 127600]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 19568]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 161904]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 141424]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 34416]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2009-11-19 137328]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2009-11-19 158320]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 avast! Antivirus;avast! Antivirus; C:\PROGRAMS\avast\AvastSvc.exe [2012-10-30 44808]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-06-14 66872]
R2 SearchIndexer;Search Indexer; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-04-24 318464]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S3 DragonUpdater;COMODO Dragon Update Service; C:\PROGRAMS\Comodo\Dragon\dragon_updater.exe [2012-12-13 1868432]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-05 115168]
S3 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-14 541168]
S3 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-06-12 1255736]

-----------------EOF-----------------

zaskocim:
vcera sa neprejavil, lebo si ho zasa zaviril dnes 10:53
pouzi navod:
1/ spusť Správce úloh (Task manager) a nech spuštěný - kombinace Ctrl+Alt+Delete nebo Ctrl+Shift+Esc
2/ najdi "C:\Windows\SysWOW64\igfxupdate.exe" smaž ho
3/ Start -> Spustit - napiš services.msc -> Enter
4/ najdi službu Search Indexer -> klik pravým -> na roletce kde je "Automatic" změň na "Disable" ("Zakázáno")
5/ restartuj
6/ Start -> Spustit - napiš cmd -> klik pravým - spustit jako Administrátor (Run as an Administrator)
7/ do černého okna napiš sc delete SearchIndexer -> Enter

Zdravím ještě jednou, napsaný postup pomohl, ale poté jsem spustil hru, ve které asi byl ten vir, a po vypnutí je ten problém zpět. Hru jsem už odinstaloval a smazal, ale mám tam zase soubor C:\Windows\SysWOW64\igfxupdate.exe. Chci se zeptat jestli stačí zopakovat ten samý postup. Děkuji.


Logfile of random's system information tool 1.09 (written by random/random)
Run by HP at 2012-12-19 15:14:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 199 GB (33%) free of 610 GB
Total RAM: 8099 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:14:25, on 19.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\PROGRAMS\avast\AvastUI.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe
C:\Program Files\trend micro\HP.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRAMS\avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRAMS\avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [avast] "C:\PROGRAMS\avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\PROGRAMS\daemon\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: Stáhnout s Mipony - file://C:\PROGRAMS\mipony\Browser\IEContext.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20614.www2.hp.com/ediags/gmd/In ... ect118.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\PROGRAMS\avast\AvastSvc.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\PROGRAMS\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8908 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\PROGRAMS\avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
taskeng.exe {681B14D3-D43B-42B9-A8C4-DBC94EDC3C3D}
taskeng.exe {ABCE3A41-8FD7-4E4C-8A17-36B67F2F21D5}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Users\HP\Downloads\PCMeter\PCMeter\PCMeter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2456
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7ee82115-006c-492e-b1fd-e0c62accf78a -SystemEventPortName:HostProcess-532d0bf1-24e1-45d7-85a1-b071c3ffe6a3 -IoCancelEventPortName:HostProcess-ad96d332-2d4a-40ca-93aa-71eb7de8ac4f -NonStateChangingEventPortName:HostProcess-4e59a16e-52ee-4652-9d28-516a4bf92038 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ef75cc42-63df-44ff-b1fd-458dbf1fb3da -DeviceGroupId:WpdFsGroup
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\PROGRAMS\avast\AvastUI.exe" /nogui
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4424 CREDAT:203009
taskmgr.exe /3
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe -Embedding
"C:\Users\HP\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000Core.job
C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-4241224752-616104112-686846821-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.4.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.4.0]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\s6nn0gk8.default\searchplugins\
icq-search.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-06-11 545224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-06-11 193480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-24 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-24 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\PROGRAMS\avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-01-27 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-01-27 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-01-27 418328]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-04-24 1425408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\PROGRAMS\daemon\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"avast"=C:\PROGRAMS\avast\avastUI.exe [2012-10-30 4297136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-01-27 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux1"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-12-19 14:58:29 ----A---- C:\Windows\SYSWOW64\igfxupdate.exe
2012-12-19 12:16:25 ----D---- C:\rsit
2012-12-19 12:16:25 ----D---- C:\Program Files\trend micro
2012-12-18 11:38:10 ----D---- C:\Windows\SYSWOW64\update
2012-12-18 11:10:29 ----A---- C:\ComboFix.txt
2012-12-18 11:07:20 ----D---- C:\$RECYCLE.BIN
2012-12-16 20:42:23 ----A---- C:\Windows\zip.exe
2012-12-16 20:42:23 ----A---- C:\Windows\SWSC.exe
2012-12-16 20:42:23 ----A---- C:\Windows\SWREG.exe
2012-12-16 20:42:23 ----A---- C:\Windows\sed.exe
2012-12-16 20:42:23 ----A---- C:\Windows\PEV.exe
2012-12-16 20:42:23 ----A---- C:\Windows\NIRCMD.exe
2012-12-16 20:42:23 ----A---- C:\Windows\MBR.exe
2012-12-16 20:42:23 ----A---- C:\Windows\grep.exe
2012-12-16 20:42:19 ----D---- C:\Qoobox
2012-12-16 20:42:09 ----D---- C:\Windows\erdnt
2012-12-13 13:29:59 ----A---- C:\Windows\system32\SearchIndexer.dll
2012-12-13 13:29:59 ----A---- C:\Windows\system32\SearchEngine.dat
2012-12-12 13:04:48 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-12 13:04:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-12 13:04:46 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-12 13:04:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-12 13:04:46 ----A---- C:\Windows\system32\url.dll
2012-12-12 13:04:46 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-12 13:04:46 ----A---- C:\Windows\system32\ieui.dll
2012-12-12 13:04:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\urlmon.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-12 13:04:45 ----A---- C:\Windows\system32\jscript9.dll
2012-12-12 13:04:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-12 13:04:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-12 13:04:43 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-12 13:04:43 ----A---- C:\Windows\system32\wininet.dll
2012-12-12 13:04:43 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-12 13:04:42 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-12 13:04:42 ----A---- C:\Windows\system32\vbscript.dll
2012-12-12 13:04:42 ----A---- C:\Windows\system32\jscript.dll
2012-12-12 13:04:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-12 13:04:41 ----A---- C:\Windows\system32\iertutil.dll
2012-12-12 13:04:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-12 13:04:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-12 13:04:38 ----A---- C:\Windows\system32\mshtml.dll
2012-12-12 13:04:37 ----A---- C:\Windows\system32\ieframe.dll
2012-12-12 13:04:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-12 13:04:00 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-12 13:04:00 ----A---- C:\Windows\system32\tzres.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\winsrv.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 13:03:53 ----A---- C:\Windows\system32\conhost.exe
2012-12-12 13:03:52 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-12 13:03:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-12 13:03:45 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-12 13:03:44 ----A---- C:\Windows\system32\wow64win.dll
2012-12-12 13:03:44 ----A---- C:\Windows\system32\wow64.dll
2012-12-12 13:03:43 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-12 13:03:41 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-12 13:03:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-12 13:03:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 13:03:39 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 13:03:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 13:03:37 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 13:03:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 13:03:35 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 13:03:33 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-12 13:03:25 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-12 13:03:07 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\atmlib.dll
2012-12-12 13:03:07 ----A---- C:\Windows\system32\atmfd.dll
2012-12-09 19:21:48 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-12-09 19:21:48 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-12-09 19:21:48 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-12-09 19:21:48 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-12-09 19:21:47 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-12-09 19:21:47 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-12-09 19:21:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-12-09 19:21:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-12-09 19:21:42 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-12-09 19:21:42 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-12-09 19:21:40 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-12-09 19:21:40 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-12-09 19:21:38 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-12-09 19:21:38 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-12-09 19:21:36 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-12-09 19:21:36 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-12-09 14:50:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-12-09 14:50:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-12-09 14:50:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-12-09 14:50:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-12-09 14:50:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-12-09 14:50:42 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-12-09 14:50:41 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-12-09 14:50:41 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-12-09 14:50:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-12-09 14:50:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-12-09 14:50:37 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-12-09 14:50:37 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-12-09 14:50:36 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-12-09 14:50:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-12-09 14:50:35 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-12-09 14:50:33 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-12-09 14:50:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-12-09 14:50:32 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-12-09 14:50:32 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-12-09 14:50:31 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-12-09 14:50:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-12-09 14:50:31 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-12-09 14:50:31 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-12-09 14:50:30 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-12-09 14:50:30 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-12-09 14:50:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-12-09 14:50:29 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-12-09 14:50:27 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-12-09 14:50:27 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-12-09 14:50:26 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-12-09 14:50:25 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-12-09 14:50:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-12-09 14:50:25 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-12-09 14:50:25 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-12-09 14:50:24 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-12-09 14:50:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-12-09 14:50:24 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-12-09 14:50:24 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-12-09 14:50:23 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-12-09 14:50:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-12-09 14:50:23 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-12-09 14:50:23 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-12-09 14:50:22 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-12-09 14:50:22 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-12-09 14:50:19 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-12-09 14:50:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-12-09 14:50:19 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-12-09 14:50:19 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-12-09 14:50:18 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-12-09 14:50:18 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-12-09 14:50:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-12-09 14:50:17 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-12-09 14:50:16 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-12-09 14:50:16 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-12-09 14:50:15 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-12-09 14:50:15 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-12-09 14:50:14 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-12-09 14:50:14 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-12-09 14:50:13 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-12-09 14:50:13 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-12-09 14:50:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-12-09 14:50:12 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-12-09 14:50:11 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-12-09 14:50:11 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-12-09 14:50:09 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-12-09 14:50:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-12-09 14:50:08 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-12-09 14:50:08 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-12-09 14:50:06 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-12-09 14:50:06 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-12-09 14:50:05 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-12-09 14:50:05 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-12-09 14:50:04 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-12-09 14:50:04 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-12-09 14:50:03 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-12-09 14:50:03 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-12-09 14:50:02 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-12-09 14:50:02 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-12-09 14:50:01 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-12-09 14:50:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-12-09 14:50:01 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-12-09 14:50:01 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-12-09 14:49:59 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-12-09 14:49:59 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-12-09 14:49:58 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-12-09 14:49:58 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-12-09 14:49:57 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-12-09 14:49:57 ----A---- C:\Windows\system32\xinput1_3.dll
2012-12-09 14:49:56 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-12-09 14:49:56 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-12-09 14:49:55 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-12-09 14:49:55 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-12-09 14:49:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-12-09 14:49:50 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-12-05 21:54:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-11-27 13:45:35 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-11-26 16:56:59 ----D---- C:\Program Files (x86)\Red Sky
2012-11-26 00:32:43 ----D---- C:\ProgramData\Test Drive Unlimited

======List of files/folders modified in the last 1 month======

2012-12-19 15:14:24 ----D---- C:\Windows\Temp
2012-12-19 15:01:14 ----D---- C:\HRY
2012-12-19 15:00:38 ----A---- C:\Windows\SYSWOW64\log.txt
2012-12-19 15:00:02 ----D---- C:\Windows\Prefetch
2012-12-19 14:58:29 ----D---- C:\Windows\SysWOW64
2012-12-19 14:57:51 ----D---- C:\Windows\system32\config
2012-12-19 12:28:51 ----D---- C:\Users\HP\AppData\Roaming\vlc
2012-12-19 12:16:25 ----RD---- C:\Program Files
2012-12-19 11:58:44 ----D---- C:\Users\HP\AppData\Roaming\Skype
2012-12-18 11:38:10 ----D---- C:\Windows\System32
2012-12-18 11:10:34 ----D---- C:\Windows\system32\drivers
2012-12-18 11:07:28 ----D---- C:\Windows
2012-12-18 11:07:28 ----A---- C:\Windows\system.ini
2012-12-18 11:07:19 ----D---- C:\Windows\system32\drivers\etc
2012-12-18 11:05:39 ----D---- C:\Windows\Tasks
2012-12-18 11:04:22 ----D---- C:\Windows\SYSWOW64\drivers
2012-12-18 11:04:22 ----D---- C:\Windows\AppPatch
2012-12-18 11:04:21 ----D---- C:\Program Files (x86)\Common Files
2012-12-18 10:46:43 ----SHD---- C:\System Volume Information
2012-12-16 20:48:29 ----D---- C:\ProgramData
2012-12-16 10:22:19 ----D---- C:\Windows\inf
2012-12-16 10:22:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-15 14:57:21 ----D---- C:\ProgramData\NVIDIA
2012-12-12 14:57:16 ----D---- C:\Windows\rescache
2012-12-12 14:03:29 ----D---- C:\Windows\winsxs
2012-12-12 14:01:59 ----D---- C:\Windows\SYSWOW64\migration
2012-12-12 14:01:59 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-12 14:01:59 ----D---- C:\Windows\system32\migration
2012-12-12 14:01:59 ----D---- C:\Windows\system32\cs-CZ
2012-12-12 14:01:59 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-12 14:01:58 ----D---- C:\Program Files\Internet Explorer
2012-12-12 13:05:43 ----A---- C:\Windows\system32\MRT.exe
2012-12-12 13:04:58 ----D---- C:\Windows\system32\catroot
2012-12-12 13:04:57 ----D---- C:\Windows\system32\catroot2
2012-12-10 10:19:45 ----SHD---- C:\Windows\Installer
2012-12-09 23:50:26 ----D---- C:\ProgramData\Solidshield
2012-12-09 23:32:42 ----RSD---- C:\Windows\assembly
2012-12-07 09:22:15 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-12-06 08:43:45 ----RD---- C:\Program Files (x86)
2012-12-02 00:27:01 ----D---- C:\Windows\system32\Tasks
2012-11-30 17:04:56 ----D---- C:\Users\HP\AppData\Roaming\Mozilla
2012-11-30 17:04:51 ----D---- C:\PROGRAMS
2012-11-27 08:04:49 ----D---- C:\Program Files\Google
2012-11-27 08:04:49 ----D---- C:\Program Files (x86)\Google
2012-11-23 12:02:05 ----D---- C:\Windows\system32\NDF
2012-11-21 10:58:43 ----D---- C:\ProgramData\Skype
2012-11-21 10:58:41 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-09-13 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Amfilter;Compatible Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfltx64.sys [2007-10-15 12288]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-12 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R3 Amusbprt;USB HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbx64.sys [2008-02-13 17920]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-01-27 12273408]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-07-21 1002848]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-29 412776]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-04-24 536576]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
R3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]
S3 ALSysIO;ALSysIO; \??\C:\Users\HP\AppData\Local\Temp\ALSysIO64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2009-11-19 127600]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 19568]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 161904]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 141424]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 34416]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2009-11-19 137328]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2009-11-19 158320]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 avast! Antivirus;avast! Antivirus; C:\PROGRAMS\avast\AvastSvc.exe [2012-10-30 44808]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-06-14 66872]
R2 SearchIndexer;Search Indexer; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-04-24 318464]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S3 DragonUpdater;COMODO Dragon Update Service; C:\PROGRAMS\Comodo\Dragon\dragon_updater.exe [2012-12-13 1868432]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-05 115168]
S3 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-14 541168]
S3 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-06-12 1255736]

-----------------EOF-----------------

Zdravím,
ano použij JaRonův postup a smaž pro jistotu i tyto dva soubory:
C:\Windows\system32\SearchIndexer.dll
C:\Windows\system32\SearchEngine.dat

ComboFix odinstalujeme
jdi Start -> Spustit... a zkopíruj ComboFix /Uninstall (pozor, za x je mezera) -> OK

Stáhni a spusť T-cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe - uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš

Následoval jsem Vašich rad a je to ok, doufám že to tak i zůstane.
Každopádně díky všem za rady i Váš čas.

To záleží jen na tobě

A snad i za kolegu: Nemáš zač - rádo se stalo a jsme tady i příště