VIRY.CZ

Dobrý den, používám Microsoft Flight Simulator a po jeho otevření nejsem schopen v interním programu nastavovat data protože přestane fungovat klávesnice, nebo pracuje divně, počík je zpomalený, začlo to upgradem Javy...., prosím o pomoc přikládám log z RSIT...děkuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dan at 2013-02-08 08:06:46
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 142 GB (71%) free of 200 GB
Total RAM: 8190 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:06:57, on 8.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Dan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: uTorrentControl_v2 - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - F:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7780 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\HPSIsvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9f5605e1-438f-4a85-b8f0-a77d27cb1ca0 -SystemEventPortName:HostProcess-fec55ec2-2d47-420a-885b-b858a225b73c -IoCancelEventPortName:HostProcess-dfab5827-575b-421b-b30e-5eb27ef5a51a -NonStateChangingEventPortName:HostProcess-cccb52ef-2708-4cd8-9537-b41bbda8ce74 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a3321546-777d-42f6-a0d2-863984afe93c
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"D:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\sppsvc.exe
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
"F:\ZALOHA\programy na logy\RSITx64.exe"
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey CA87F984-6479-91E7-E52B-CB21D523CEB4 -Reinvoke
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL

D:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt

D:\Program Files (x86)\Mozilla Firefox\plugins\
npBitCometAgent.dll
nppdf32.dll

D:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\extensions\
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2012-12-13 6304016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11 767280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-09 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-12-13 4527888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-09 170416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7473b6bd-4691-4744-a82b-7854eb3d70b6} - uTorrentControl_v2 Toolbar - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-02-08 08:06:46 ----D---- C:\rsit
2013-02-08 08:06:46 ----D---- C:\Program Files\trend micro
2013-02-07 23:20:25 ----A---- C:\Windows\system32\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-02-07 23:20:24 ----A---- C:\Windows\system32\msxml3.dll
2013-02-07 23:20:23 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-02-07 23:20:23 ----A---- C:\Windows\system32\win32spl.dll
2013-02-07 23:20:22 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-02-07 23:20:22 ----A---- C:\Windows\system32\taskhost.exe
2013-02-07 23:20:22 ----A---- C:\Windows\system32\ncrypt.dll
2013-02-07 23:20:21 ----A---- C:\Windows\system32\win32k.sys
2013-02-07 23:08:52 ----D---- C:\Program Files\CCleaner
2013-02-07 23:07:41 ----D---- C:\Program Files (x86)\Google
2013-02-03 19:57:12 ----D---- C:\ProgramData\Orbit
2013-02-03 19:55:36 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-03 19:55:34 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-03 19:17:38 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-03 19:16:11 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-02-03 19:16:10 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-02-03 19:16:09 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-02-03 19:16:06 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-02-03 19:16:05 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-02-03 19:16:05 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\xinput1_3.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-02-03 19:15:43 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-02-03 19:15:43 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx10.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-02-03 19:15:39 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-02-03 19:15:39 ----A---- C:\Windows\system32\xinput1_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-02-03 19:15:34 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-02-03 19:15:34 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-02-03 19:15:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-02-03 19:15:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-02-03 19:15:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-02-03 19:15:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-02-02 20:54:42 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2013-01-09 20:00:25 ----D---- C:\ProgramData\Sun
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\java.exe
2013-01-09 20:00:01 ----D---- C:\Program Files (x86)\Java
2013-01-09 19:43:45 ----D---- C:\Users\Dan\AppData\Roaming\Xilisoft
2013-01-09 19:40:55 ----D---- C:\Program Files (x86)\Xilisoft

======List of files/folders modified in the last 1 month======

2013-02-08 08:06:53 ----D---- C:\Windows\Temp
2013-02-08 08:06:46 ----RD---- C:\Program Files
2013-02-08 08:00:05 ----D---- C:\Windows
2013-02-08 07:59:10 ----D---- C:\Windows\system32\config
2013-02-08 07:45:36 ----D---- C:\Windows\System32
2013-02-08 07:45:36 ----D---- C:\Windows\inf
2013-02-08 07:45:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-08 00:01:25 ----D---- C:\Windows\Microsoft.NET
2013-02-08 00:01:18 ----RSD---- C:\Windows\assembly
2013-02-07 23:41:30 ----AD---- C:\ProgramData\TEMP
2013-02-07 23:34:31 ----D---- C:\Windows\SoftwareDistribution
2013-02-07 23:32:42 ----D---- C:\Windows\debug
2013-02-07 23:31:47 ----D---- C:\Windows\winsxs
2013-02-07 23:28:53 ----D---- C:\Windows\SysWOW64
2013-02-07 23:23:26 ----SHD---- C:\Windows\Installer
2013-02-07 23:23:24 ----D---- C:\ProgramData\Microsoft Help
2013-02-07 23:21:40 ----A---- C:\Windows\system32\MRT.exe
2013-02-07 23:21:00 ----SHD---- C:\System Volume Information
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot2
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\uTorrent
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\DAEMON Tools Lite
2013-02-07 23:12:13 ----RD---- C:\Program Files (x86)
2013-02-07 23:12:07 ----D---- C:\Windows\Panther
2013-02-07 23:12:07 ----D---- C:\Windows\Logs
2013-02-07 23:08:55 ----D---- C:\Windows\system32\Tasks
2013-02-07 23:07:47 ----D---- C:\Windows\Tasks
2013-02-07 23:07:21 ----D---- C:\Windows\Prefetch
2013-02-07 23:04:57 ----D---- C:\Users\Dan\AppData\Roaming\BitComet
2013-02-06 21:30:55 ----D---- C:\Users\Dan\AppData\Roaming\Skype
2013-02-03 19:57:12 ----HD---- C:\ProgramData
2013-02-03 19:17:45 ----D---- C:\Windows\system32\LogFiles
2013-02-03 19:08:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-30 11:53:22 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-27 21:01:16 ----D---- C:\ProgramData\Skype
2013-01-27 21:01:13 ----RD---- C:\Program Files (x86)\Skype
2013-01-27 21:01:13 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-15 283200]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 gfvknt;GoFlight Virtual HID Keyboard; C:\Windows\system32\DRIVERS\gfvknt64.sys [2008-12-08 23040]
R3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2010-03-06 20480]
R3 npusbio;npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [2009-12-17 45600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 SaiH0763;SaiH0763; C:\Windows\system32\DRIVERS\SaiH0763.sys [2007-05-01 171144]
R3 SaiH0BAC;SaiH0BAC; C:\Windows\system32\DRIVERS\SaiH0BAC.sys [2007-09-14 176128]
R3 SaiH0C2D;SaiH0C2D; C:\Windows\system32\DRIVERS\SaiH0C2D.sys [2007-09-14 176128]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2010-08-10 22792]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2010-08-10 50056]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2012-06-27 36328]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2012-06-27 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2012-06-27 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2012-06-27 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2012-06-27 146920]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 vncmirror;vncmirror; C:\Windows\system32\DRIVERS\vncmirror.sys [2012-08-15 4608]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-07-07 203264]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-07 127800]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-03 76888]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-12-13 3290896]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; F:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-15 1255736]

-----------------EOF-----------------

Zdravím!
Nejprve spusťte tuto utilitu:

Stáhněte AdwCleaner http://stahnu.cz/tag/adw-cleaner-free-download
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v2.109 - Logfile created 02/08/2013 at 20:56:05
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Dan - DANIELO-DOMA
# Boot Mode : Normal
# Running from : C:\Users\Dan\Desktop\adwcleaner_2.110.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\uTorrentControl_v2
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\Users\Dan\AppData\Local\Babylon
Folder Found : C:\Users\Dan\AppData\Local\Conduit
Folder Found : C:\Users\Dan\AppData\LocalLow\Conduit
Folder Found : C:\Users\Dan\AppData\LocalLow\Toolbar4
Folder Found : C:\Users\Dan\AppData\LocalLow\uTorrentControl_v2
Folder Found : C:\Users\Dan\AppData\Roaming\Babylon
Folder Found : C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\Smartbar

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\uTorrentControl_v2
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Found : HKLM\Software\uTorrentControl_v2
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FA77D58-7FD5-4768-9056-29845C319728}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D93D51E8-0D32-40FC-B05D-54EA772A1771}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl_v2 Toolbar
Key Found : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Found : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (cs)

File : C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\prefs.js

Found : user_pref("CT3220468.BT_Stats", "{\"last_log\":1347744930,\"uuid\":205178597856997,\"seq_id\":1,\"ss[...]
Found : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3220468.FirstTime", "true");
Found : user_pref("CT3220468.FirstTimeFF3", "true");
Found : user_pref("CT3220468.UserID", "UN43380031515367634");
Found : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3220468.autoDisableScopes", -1);
Found : user_pref("CT3220468.cbcountry_001", "CZ");
Found : user_pref("CT3220468.cbfirsttime", "Sat Sep 15 2012 23:35:29 GMT+0200");
Found : user_pref("CT3220468.defaultSearch", "FALSE");
Found : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT3220468.enableAlerts", "always");
Found : user_pref("CT3220468.enableSearchFromAddressBar", "FALSE");
Found : user_pref("CT3220468.firstTimeDialogOpened", "true");
Found : user_pref("CT3220468.fixPageNotFoundError", "true");
Found : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3220468.fixUrls", true);
Found : user_pref("CT3220468.installId", "fft50B4.tmp.exe");
Found : user_pref("CT3220468.installType", "XPE");
Found : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3220468.isNewTabEnabled", true);
Found : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Found : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"about[...]
Found : user_pref("CT3220468.openThankYouPage", "true");
Found : user_pref("CT3220468.openUninstallPage", "FALSE");
Found : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Found : user_pref("CT3220468.search.searchCount", "0");
Found : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\[...]
Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347744927956");
Found : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1347744927862");
Found : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1347744928298");
Found : user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1347744928470");
Found : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1347744928334");
Found : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1347744927628");
Found : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1347744927534");
Found : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1347744928387");
Found : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1347744927594");
Found : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1347744927890");
Found : user_pref("CT3220468.settingsINI", true);
Found : user_pref("CT3220468.shouldFirstTimeDialog", "false");
Found : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Found : user_pref("CT3220468.smartbar.Uninstall", "0");
Found : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Found : user_pref("CT3220468.toolbarBornServerTime", "16-9-2012");
Found : user_pref("CT3220468.toolbarCurrentServerTime", "16-9-2012");

-\\ Google Chrome v24.0.1312.57
tak tady to je.....


File : C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [10649 octets] - [08/02/2013 20:56:05]

########## EOF - C:\AdwCleaner[R1].txt - [10710 octets] ##########

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.

tady to je....

# AdwCleaner v2.109 - Logfile created 02/08/2013 at 21:20:10
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Dan - DANIELO-DOMA
# Boot Mode : Normal
# Running from : C:\Users\Dan\Desktop\adwcleaner_2.110.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\uTorrentControl_v2
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Users\Dan\AppData\Local\Babylon
Folder Deleted : C:\Users\Dan\AppData\Local\Conduit
Folder Deleted : C:\Users\Dan\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Dan\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Dan\AppData\LocalLow\uTorrentControl_v2
Folder Deleted : C:\Users\Dan\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\Smartbar

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentControl_v2
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Deleted : HKLM\Software\uTorrentControl_v2
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FA77D58-7FD5-4768-9056-29845C319728}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D93D51E8-0D32-40FC-B05D-54EA772A1771}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl_v2 Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (cs)

File : C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\prefs.js

Deleted : user_pref("CT3220468.BT_Stats", "{\"last_log\":1347744930,\"uuid\":205178597856997,\"seq_id\":1,\"ss[...]
Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3220468.FirstTime", "true");
Deleted : user_pref("CT3220468.FirstTimeFF3", "true");
Deleted : user_pref("CT3220468.UserID", "UN43380031515367634");
Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3220468.autoDisableScopes", -1);
Deleted : user_pref("CT3220468.cbcountry_001", "CZ");
Deleted : user_pref("CT3220468.cbfirsttime", "Sat Sep 15 2012 23:35:29 GMT+0200");
Deleted : user_pref("CT3220468.defaultSearch", "FALSE");
Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3220468.enableAlerts", "always");
Deleted : user_pref("CT3220468.enableSearchFromAddressBar", "FALSE");
Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3220468.fixPageNotFoundError", "true");
Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3220468.fixUrls", true);
Deleted : user_pref("CT3220468.installId", "fft50B4.tmp.exe");
Deleted : user_pref("CT3220468.installType", "XPE");
Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.isNewTabEnabled", true);
Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"about[...]
Deleted : user_pref("CT3220468.openThankYouPage", "true");
Deleted : user_pref("CT3220468.openUninstallPage", "FALSE");
Deleted : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Deleted : user_pref("CT3220468.search.searchCount", "0");
Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Deleted : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347744927956");
Deleted : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1347744927862");
Deleted : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1347744928298");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1347744928470");
Deleted : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1347744928334");
Deleted : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1347744927628");
Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1347744927534");
Deleted : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1347744928387");
Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1347744927594");
Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1347744927890");
Deleted : user_pref("CT3220468.settingsINI", true);
Deleted : user_pref("CT3220468.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");
Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Deleted : user_pref("CT3220468.toolbarBornServerTime", "16-9-2012");
Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "16-9-2012");

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [10762 octets] - [08/02/2013 20:56:05]
AdwCleaner[S1].txt - [324 octets] - [08/02/2013 21:19:48]
AdwCleaner[S2].txt - [11007 octets] - [08/02/2013 21:20:10]

########## EOF - C:\AdwCleaner[S2].txt - [11068 octets] ##########

Dejte nový log RSIT.

tady je nový log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dan at 2013-02-08 22:26:26
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 141 GB (71%) free of 200 GB
Total RAM: 8190 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:26:28, on 8.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe
F:\Program Files (x86)\KIES\Kies\KiesTrayAgent.exe
C:\Program Files\trend micro\Dan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKCU\..\Run: [KiesPDLR] F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - F:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7535 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\HPSIsvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-72943ebb-e425-44da-9406-342b8b11f85c -SystemEventPortName:HostProcess-0511c7d5-fae8-48f6-a6b1-ffb208b7b965 -IoCancelEventPortName:HostProcess-4732c7d4-d25c-4728-bdc5-86cf34622d01 -NonStateChangingEventPortName:HostProcess-6408a9bf-0222-4ef1-ba26-7042a5429190 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:748c64a3-3ab4-45ad-bcf7-f7e3d26333d3
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"F:\Program Files (x86)\KIES\Kies\KiesTrayAgent.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"F:\ZALOHA\programy na logy\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL

D:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt

D:\Program Files (x86)\Mozilla Firefox\plugins\
npBitCometAgent.dll
nppdf32.dll

D:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\extensions\
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2012-12-13 6304016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11 767280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-09 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-12-13 4527888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-09 170416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesPDLR"=F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-08-31 21432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-02-08 22:26:26 ----D---- C:\rsit
2013-02-08 21:20:10 ----A---- C:\AdwCleaner[S2].txt
2013-02-08 21:19:48 ----A---- C:\AdwCleaner[S1].txt
2013-02-08 20:56:05 ----A---- C:\AdwCleaner[R1].txt
2013-02-08 08:06:46 ----D---- C:\Program Files\trend micro
2013-02-07 23:20:25 ----A---- C:\Windows\system32\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-02-07 23:20:24 ----A---- C:\Windows\system32\msxml3.dll
2013-02-07 23:20:23 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-02-07 23:20:23 ----A---- C:\Windows\system32\win32spl.dll
2013-02-07 23:20:22 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-02-07 23:20:22 ----A---- C:\Windows\system32\taskhost.exe
2013-02-07 23:20:22 ----A---- C:\Windows\system32\ncrypt.dll
2013-02-07 23:20:21 ----A---- C:\Windows\system32\win32k.sys
2013-02-07 23:08:52 ----D---- C:\Program Files\CCleaner
2013-02-07 23:07:41 ----D---- C:\Program Files (x86)\Google
2013-02-03 19:57:12 ----D---- C:\ProgramData\Orbit
2013-02-03 19:55:36 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-03 19:55:34 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-03 19:17:38 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-03 19:16:11 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-02-03 19:16:10 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-02-03 19:16:09 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-02-03 19:16:06 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-02-03 19:16:05 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-02-03 19:16:05 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\xinput1_3.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-02-03 19:15:43 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-02-03 19:15:43 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx10.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-02-03 19:15:39 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-02-03 19:15:39 ----A---- C:\Windows\system32\xinput1_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-02-03 19:15:34 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-02-03 19:15:34 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-02-03 19:15:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-02-03 19:15:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-02-03 19:15:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-02-03 19:15:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-02-02 20:54:42 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2013-01-09 20:00:25 ----D---- C:\ProgramData\Sun
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\java.exe
2013-01-09 20:00:01 ----D---- C:\Program Files (x86)\Java
2013-01-09 19:43:45 ----D---- C:\Users\Dan\AppData\Roaming\Xilisoft
2013-01-09 19:40:55 ----D---- C:\Program Files (x86)\Xilisoft

======List of files/folders modified in the last 1 month======

2013-02-08 22:26:28 ----D---- C:\Windows\Prefetch
2013-02-08 21:35:25 ----D---- C:\Windows\system32\config
2013-02-08 21:28:54 ----D---- C:\Windows\System32
2013-02-08 21:28:54 ----D---- C:\Windows\inf
2013-02-08 21:28:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-08 21:23:12 ----D---- C:\Windows\Temp
2013-02-08 21:20:52 ----RD---- C:\Program Files (x86)
2013-02-08 21:20:51 ----HD---- C:\ProgramData
2013-02-08 12:17:03 ----D---- C:\Windows
2013-02-08 12:15:55 ----AD---- C:\ProgramData\TEMP
2013-02-08 09:57:24 ----D---- C:\Windows\system32\wdi
2013-02-08 08:06:46 ----RD---- C:\Program Files
2013-02-08 00:01:25 ----D---- C:\Windows\Microsoft.NET
2013-02-08 00:01:18 ----RSD---- C:\Windows\assembly
2013-02-07 23:34:31 ----D---- C:\Windows\SoftwareDistribution
2013-02-07 23:32:42 ----D---- C:\Windows\debug
2013-02-07 23:31:47 ----D---- C:\Windows\winsxs
2013-02-07 23:28:53 ----D---- C:\Windows\SysWOW64
2013-02-07 23:23:26 ----SHD---- C:\Windows\Installer
2013-02-07 23:23:24 ----D---- C:\ProgramData\Microsoft Help
2013-02-07 23:21:40 ----A---- C:\Windows\system32\MRT.exe
2013-02-07 23:21:00 ----SHD---- C:\System Volume Information
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot2
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\uTorrent
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\DAEMON Tools Lite
2013-02-07 23:12:07 ----D---- C:\Windows\Panther
2013-02-07 23:12:07 ----D---- C:\Windows\Logs
2013-02-07 23:08:55 ----D---- C:\Windows\system32\Tasks
2013-02-07 23:07:47 ----D---- C:\Windows\Tasks
2013-02-07 23:04:57 ----D---- C:\Users\Dan\AppData\Roaming\BitComet
2013-02-06 21:30:55 ----D---- C:\Users\Dan\AppData\Roaming\Skype
2013-02-03 19:17:45 ----D---- C:\Windows\system32\LogFiles
2013-02-03 19:08:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-30 11:53:22 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-27 21:01:16 ----D---- C:\ProgramData\Skype
2013-01-27 21:01:13 ----RD---- C:\Program Files (x86)\Skype
2013-01-27 21:01:13 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-15 283200]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2012-06-27 36328]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 gfvknt;GoFlight Virtual HID Keyboard; C:\Windows\system32\DRIVERS\gfvknt64.sys [2008-12-08 23040]
R3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2010-03-06 20480]
R3 npusbio;npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [2009-12-17 45600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 SaiH0763;SaiH0763; C:\Windows\system32\DRIVERS\SaiH0763.sys [2007-05-01 171144]
R3 SaiH0BAC;SaiH0BAC; C:\Windows\system32\DRIVERS\SaiH0BAC.sys [2007-09-14 176128]
R3 SaiH0C2D;SaiH0C2D; C:\Windows\system32\DRIVERS\SaiH0C2D.sys [2007-09-14 176128]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2010-08-10 22792]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2010-08-10 50056]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2012-06-27 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2012-06-27 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2012-06-27 177640]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2012-06-27 146920]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 vncmirror;vncmirror; C:\Windows\system32\DRIVERS\vncmirror.sys [2012-08-15 4608]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-07-07 203264]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-07 127800]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-03 76888]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-12-13 3290896]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; F:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-15 1255736]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
F:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
C:\Program Files (x86)\Skype\Toolbar
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:services
Skype C2C Service

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dan at 2013-02-08 22:44:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 141 GB (71%) free of 200 GB
Total RAM: 8190 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:44:13, on 8.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\trend micro\Dan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKCU\..\Run: [KiesPDLR] F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://F:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - F:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6913 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\HPSIsvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
taskeng.exe {B6867DB2-1BBC-4F01-B0C3-46E2892C5F39}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-32597f87-c170-42d2-8dd1-2db1538e1a82 -SystemEventPortName:HostProcess-08c7dfa8-3beb-4266-bcfb-f330732f1e1a -IoCancelEventPortName:HostProcess-0d31ec15-41ef-474b-96c5-f842ba5761b5 -NonStateChangingEventPortName:HostProcess-d47e3f92-d77e-49de-9943-715321ed6e0b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a2f5eb6f-10e7-429c-a6bc-077b4888ad1a
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"F:\ZALOHA\programy na logy\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.10.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL

D:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt

D:\Program Files (x86)\Mozilla Firefox\plugins\
npBitCometAgent.dll
nppdf32.dll

D:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\o3ol3ihl.default\extensions\
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2012-12-13 6304016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-09 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-09 170416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesPDLR"=F:\Program Files (x86)\KIES\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-08-31 21432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-02-08 22:40:23 ----D---- C:\_OTM
2013-02-08 22:26:26 ----D---- C:\rsit
2013-02-08 21:20:10 ----A---- C:\AdwCleaner[S2].txt
2013-02-08 21:19:48 ----A---- C:\AdwCleaner[S1].txt
2013-02-08 20:56:05 ----A---- C:\AdwCleaner[R1].txt
2013-02-08 08:06:46 ----D---- C:\Program Files\trend micro
2013-02-07 23:20:25 ----A---- C:\Windows\system32\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-02-07 23:20:24 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-02-07 23:20:24 ----A---- C:\Windows\system32\msxml3.dll
2013-02-07 23:20:23 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-02-07 23:20:23 ----A---- C:\Windows\system32\win32spl.dll
2013-02-07 23:20:22 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-02-07 23:20:22 ----A---- C:\Windows\system32\taskhost.exe
2013-02-07 23:20:22 ----A---- C:\Windows\system32\ncrypt.dll
2013-02-07 23:20:21 ----A---- C:\Windows\system32\win32k.sys
2013-02-07 23:08:52 ----D---- C:\Program Files\CCleaner
2013-02-07 23:07:41 ----D---- C:\Program Files (x86)\Google
2013-02-03 19:57:12 ----D---- C:\ProgramData\Orbit
2013-02-03 19:55:36 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-03 19:55:34 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-03 19:17:38 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-03 19:16:11 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-02-03 19:16:10 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-02-03 19:16:10 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-02-03 19:16:09 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-02-03 19:16:09 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-02-03 19:16:08 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-02-03 19:16:07 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-02-03 19:16:06 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-02-03 19:16:06 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-02-03 19:16:05 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-02-03 19:16:05 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-02-03 19:16:04 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-02-03 19:16:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-02-03 19:16:02 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-02-03 19:16:01 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-02-03 19:16:00 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-02-03 19:15:59 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-02-03 19:15:58 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-02-03 19:15:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-02-03 19:15:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-02-03 19:15:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-02-03 19:15:54 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-02-03 19:15:53 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-02-03 19:15:52 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-02-03 19:15:51 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-02-03 19:15:50 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-02-03 19:15:49 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-02-03 19:15:48 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-02-03 19:15:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\xinput1_3.dll
2013-02-03 19:15:46 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-02-03 19:15:45 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-02-03 19:15:44 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-02-03 19:15:43 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-02-03 19:15:43 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-02-03 19:15:42 ----A---- C:\Windows\system32\d3dx10.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-02-03 19:15:41 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xinput1_2.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-02-03 19:15:40 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-02-03 19:15:39 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-02-03 19:15:39 ----A---- C:\Windows\system32\xinput1_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-02-03 19:15:38 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-02-03 19:15:34 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-02-03 19:15:34 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-02-03 19:15:33 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-02-03 19:15:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-02-03 19:15:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-02-03 19:15:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-02-03 19:15:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-02-03 19:15:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-02-02 20:56:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-02-02 20:56:37 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-02-02 20:54:42 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2013-01-09 20:00:25 ----D---- C:\ProgramData\Sun
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-01-09 20:00:14 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-01-09 20:00:09 ----A---- C:\Windows\SYSWOW64\java.exe
2013-01-09 20:00:01 ----D---- C:\Program Files (x86)\Java
2013-01-09 19:43:45 ----D---- C:\Users\Dan\AppData\Roaming\Xilisoft
2013-01-09 19:40:55 ----D---- C:\Program Files (x86)\Xilisoft

======List of files/folders modified in the last 1 month======

2013-02-08 22:42:22 ----D---- C:\Windows\Temp
2013-02-08 22:40:24 ----D---- C:\Windows\Tasks
2013-02-08 22:39:59 ----D---- C:\Windows\Prefetch
2013-02-08 21:35:25 ----D---- C:\Windows\system32\config
2013-02-08 21:28:54 ----D---- C:\Windows\System32
2013-02-08 21:28:54 ----D---- C:\Windows\inf
2013-02-08 21:28:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-08 21:20:52 ----RD---- C:\Program Files (x86)
2013-02-08 21:20:51 ----HD---- C:\ProgramData
2013-02-08 12:17:03 ----D---- C:\Windows
2013-02-08 12:15:55 ----AD---- C:\ProgramData\TEMP
2013-02-08 09:57:24 ----D---- C:\Windows\system32\wdi
2013-02-08 08:06:46 ----RD---- C:\Program Files
2013-02-08 00:01:25 ----D---- C:\Windows\Microsoft.NET
2013-02-08 00:01:18 ----RSD---- C:\Windows\assembly
2013-02-07 23:34:31 ----D---- C:\Windows\SoftwareDistribution
2013-02-07 23:32:42 ----D---- C:\Windows\debug
2013-02-07 23:31:47 ----D---- C:\Windows\winsxs
2013-02-07 23:28:53 ----D---- C:\Windows\SysWOW64
2013-02-07 23:23:26 ----SHD---- C:\Windows\Installer
2013-02-07 23:23:24 ----D---- C:\ProgramData\Microsoft Help
2013-02-07 23:21:40 ----A---- C:\Windows\system32\MRT.exe
2013-02-07 23:21:00 ----SHD---- C:\System Volume Information
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot2
2013-02-07 23:20:13 ----D---- C:\Windows\system32\catroot
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\uTorrent
2013-02-07 23:12:16 ----D---- C:\Users\Dan\AppData\Roaming\DAEMON Tools Lite
2013-02-07 23:12:07 ----D---- C:\Windows\Panther
2013-02-07 23:12:07 ----D---- C:\Windows\Logs
2013-02-07 23:08:55 ----D---- C:\Windows\system32\Tasks
2013-02-07 23:04:57 ----D---- C:\Users\Dan\AppData\Roaming\BitComet
2013-02-06 21:30:55 ----D---- C:\Users\Dan\AppData\Roaming\Skype
2013-02-03 19:17:45 ----D---- C:\Windows\system32\LogFiles
2013-02-03 19:08:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-30 11:53:22 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-27 21:01:16 ----D---- C:\ProgramData\Skype
2013-01-27 21:01:13 ----RD---- C:\Program Files (x86)\Skype
2013-01-27 21:01:13 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-15 283200]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2012-06-27 36328]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 gfvknt;GoFlight Virtual HID Keyboard; C:\Windows\system32\DRIVERS\gfvknt64.sys [2008-12-08 23040]
R3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2010-03-06 20480]
R3 npusbio;npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [2009-12-17 45600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 SaiH0763;SaiH0763; C:\Windows\system32\DRIVERS\SaiH0763.sys [2007-05-01 171144]
R3 SaiH0BAC;SaiH0BAC; C:\Windows\system32\DRIVERS\SaiH0BAC.sys [2007-09-14 176128]
R3 SaiH0C2D;SaiH0C2D; C:\Windows\system32\DRIVERS\SaiH0C2D.sys [2007-09-14 176128]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2010-08-10 22792]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2010-08-10 50056]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2012-06-27 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2012-06-27 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2012-06-27 177640]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2012-06-27 146920]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 vncmirror;vncmirror; C:\Windows\system32\DRIVERS\vncmirror.sys [2012-08-15 4608]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-07-07 203264]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-07 127800]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-03 76888]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; F:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-07 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-15 1255736]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\Dan.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

mam to ...

Nastala nějaká změna?

mám nějak něco vyzkoušet? vše vypadá v pořádku, moc děkuji.....

je fakt že jsem to zpozoroval při nastavovaní simu a ten jak jsem pustil stalo se to znova.... mešlo psát na klávesnici, ale po stlačení ctrl+v jako vložit vše zase funguje tak nevím. zkusíme to ještě zkontrolovat? díky....

jo ještě se to projevovalo , že jsem spustil Firefox, Acrobat a když jsem najel do jakéhokoliv pole na vyplnění, www adresa, login na mail, hledat apodobně pole se sama vyplnovala číslicemi a to teď již nedělá...-:)....vyzkouším co se dá a dám vědět, zatím to vypadá dobře, díky