VIRY.CZ

Počítač se zapíná poměrně dlouho, než se načtou ikony vidím asi minutu černou obrazovku...Jenom tak se zablokoval příkazový řádek ("Příkazový řádek byl zakázán správcem systému"), přitom tohle to nikdy neudělalo...Taky když jsem zkoušel otevřít flešku, napsalo mi to "Aplikace nebyla nalezena"

Logfile of random's system information tool 1.09 (written by random/random)
Run by Roman at 2013-04-07 20:07:11
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 136 GB (43%) free of 318 GB
Total RAM: 4078 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:07:27, on 7.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16521)
Boot mode: Normal

Running processes:
C:\Programy\Advanced SystemCare 6\Monitor.exe
C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Programy\Advanced SystemCare 6\ASCTray.exe
C:\Programy\Jet Screenshot\jetScreenshot.exe
C:\Program Files (x86)\Iminent\Iminent.exe
C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Programy\AutoClickerbyShocker\AutoClicker.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Daum\PotPlayer\PotPlayerMini.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Program Files\trend micro\Roman.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com/?appid=99ac9d ... 81c27eb6a9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
R3 - URLSearchHook: (no name) - {69dfef64-c99e-4db0-bc63-ceb3bd218569} - (no file)
O2 - BHO: CrossriderApp0003491 - {11111111-1111-1111-1111-110011341191} - C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll
O2 - BHO: CrossriderApp0011825 - {11111111-1111-1111-1111-110111181125} - C:\Program Files (x86)\BcoolApp\BcoolApp.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Roman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: SSeauraccho-NewwTab - {D870E93E-F8F8-2214-D9E6-F09A4DA9A010} - C:\ProgramData\SSeauraccho-NewwTab\5148a2cae6cf4.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Browsee2Save - {FDD80893-4C63-9CFC-E2EB-67A1B7C888DC} - C:\ProgramData\Browsee2Save\5148a2877a47a.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [Iminent] C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
O4 - HKLM\..\Run: [IminentMessenger] C:\Program Files (x86)\Iminent\Iminent.Messengers.exe /startup
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [APC] C:\Programy\Advanced Parental Control\BackProcessAPC.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [UTY Start] C:\ProgramData\MFYLKX\UTY.exe
O4 - HKCU\..\Run: [APC] C:\Programy\Advanced Parental Control\BackProcessAPC.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Programy\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE /FU "C:\Windows\TEMP\E_SFA27.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series (kopie 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE /FU "C:\Windows\TEMP\E_S6613.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Jet Screenshot] "C:\Programy\Jet Screenshot\jetScreenshot.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\Roman\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roman\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browserprotect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll c:\progra~2\sprote~1\sprote~1.dll c:\progra~2\wxdownload\sprotector.dll c:\progra~2\browsetosave\sprotector.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Programy\Spy\SASCORE64.EXE
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Programy\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: BrowserProtect - Unknown owner - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Roman\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Programy\Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Programy\Sandboxie\SbieSvc.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 16556 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Programy\Advanced SystemCare 6\ASCService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
"C:\Programy\Sandboxie\SbieSvc.exe"
C:\Windows\system32\svchost.exe -k NetworkService
taskeng.exe {015FE6E1-B47F-4FB0-A90C-0286DBE2E6ED}
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
taskeng.exe {0985FAFA-D5A3-4AC4-B0EE-26EB7ACBDB34}
C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe /schedule /profile "c:\programdata\bettersoft\optimizerpro\3036567561.ini"
C:\ProgramData\GBox\GBox1.exe /schedule /profilepath "C:\ProgramData\GBox\profile.ini"
"C:\Programy\Advanced SystemCare 6\Monitor.exe"
"C:\Programy\Spy\SASCORE64.EXE"
C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
"C:\Users\Roman\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
C:\Programy\Hamachi\hamachi-2.exe -s
"C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe" /PROTECT
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"C:\Programy\Advanced SystemCare 6\ASCTray.exe" /AutoStart
HydraDM64.exe -h:65814 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Programy\Jet Screenshot\jetScreenshot.exe"
"C:\Program Files (x86)\Iminent\Iminent.exe" /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
"C:\Program Files (x86)\Iminent\Iminent.Messengers.exe" /startup
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Cyberlink\Shared files\RichVideo64.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3992
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000888
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Programy\AutoClickerbyShocker\AutoClicker.exe"
C:\Windows\system32\AUDIODG.EXE 0x648
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Daum\PotPlayer\PotPlayerMini.exe" "D:\stažený\seriály\Mentalista\The Mentalist S05E08.avi"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=10904.111bb400.1232681386 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 10904 "\\.\pipe\gecko-crash-server-pipe.10904" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --proxy-stub-channel=Flash12860.5A4163D8.2570 --host-broker-channel=Flash12860.5A4163D8.13528 --host-pid=12860 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --channel=10616.0024F5FC.757551318 --proxy-stub-channel=Flash12860.5A4163D8.2570 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" --host-npapi-version=27 --type=renderer
"C:\Programy\Spy\SUPERAntiSpyware.exe"
"C:\Users\Roman\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\system32\compmgmt.msc" /s

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GBoxUpdaterTask{9001907E-F3F0-49E5-AED6-EB14E1D64B6D}.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2919514174-1416075207-1654230562-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2919514174-1416075207-1654230562-1000UA.job
C:\Windows\tasks\schedule!3036567561.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - ""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@comrade.gamespy.com/comrade]
"Description"=
"Path"=C:\Program Files (x86)\GameSpy\Comrade\npcomrade.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.116.0]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml

C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\extensions\
pn3w@eyai-auoi.org
vzimhklv@hcfiiyaa.co.uk
{872b5b88-9db5-4310-bdd0-ac189557e5f5}

C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\searchplugins\
bingp.xml
SearchTheWeb.xml
WebSearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-03-19 6305912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-03-23 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011341191}]
Vid-Saver - C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll [2012-09-06 611200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111181125}]
BcoolApp - C:\Program Files (x86)\BcoolApp\BcoolApp.dll [2012-07-03 484864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-28 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
DefaultTab Browser Helper - C:\Users\Roman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-01-03 430712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
IMinent WebBooster (BHO) - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll [2012-07-12 245368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-03-19 4529272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D870E93E-F8F8-2214-D9E6-F09A4DA9A010}]
SSeauraccho-NewwTab - C:\ProgramData\SSeauraccho-NewwTab\5148a2cae6cf4.dll [2013-03-19 118272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-28 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-01-15 1330480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD80893-4C63-9CFC-E2EB-67A1B7C888DC}]
Browsee2Save - C:\ProgramData\Browsee2Save\5148a2877a47a.dll [2013-03-19 118272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-01-15 1330480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-03-26 6468712]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
"EPSON Stylus DX3800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE [2005-02-08 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"APC"=C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]
"AdobeBridge"= []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18643048]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2011-04-19 393216]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-03-29 1631144]
"Advanced SystemCare 6"=C:\Programy\Advanced SystemCare 6\ASCTray.exe [2013-01-15 491840]
"EPSON Stylus DX7400 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE [2007-04-12 213504]
"EPSON Stylus DX7400 Series (kopie 1)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE [2007-04-12 213504]
"Jet Screenshot"=C:\Programy\Jet Screenshot\jetScreenshot.exe [2013-01-11 1954056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Anti-phishing Domain Advisor]
C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe [2012-05-03 217256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APC]
C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Comrade.exe]
C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe [2011-03-17 1204640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-12 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
D:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Jet Screenshot]
C:\Programy\Jet Screenshot\jetScreenshot.exe [2013-01-11 1954056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Programy\Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RobotBoom_60bar Uninstall]
rundll32 C:\PROGRA~2\60Uninstall Robot Boom.dll,O -3 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_ROC_NT]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl]
C:\Programy\Sandboxie\SbieCtrl.exe [2012-12-16 765200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18643048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2013-03-29 1631144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Programy\Spy\SUPERAntiSpyware.exe [2013-01-27 5629312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter Search Scope Monitor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4z Browser Plugin Loader]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4zbar Uninstall]
rundll32 C:\PROGRA~2\4zUninstall VideoDownloadConverter.dll,O -3 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XWidget]
[]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Iminent"=C:\Program Files (x86)\Iminent\Iminent.exe [2012-07-12 1073784]
"IminentMessenger"=C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [2012-07-12 884856]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"APC"=C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-03-30 345312]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-06-25 1073352]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2012-12-25 4474832]
"UTY Start"=C:\ProgramData\MFYLKX\UTY.exe [2013-03-26 2305536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FPS1"=frapsv64.dll
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2013-04-07 19:48:46 ----D---- C:\Program Files\trend micro
2013-04-07 19:48:45 ----D---- C:\rsit
2013-04-07 18:11:52 ----D---- C:\ProgramData\Google
2013-04-07 18:11:51 ----D---- C:\Users\Roman\AppData\Roaming\Google
2013-04-06 08:58:08 ----N---- C:\bootsqm.dat
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-05 12:40:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-05 12:40:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64win.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\kernel32.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\conhost.exe
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-05 12:39:51 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-05 12:39:51 ----A---- C:\Windows\system32\usp10.dll
2013-04-05 12:39:28 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-05 12:39:28 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-05 12:39:28 ----A---- C:\Windows\system32\Wpc.dll
2013-04-05 12:39:28 ----A---- C:\Windows\system32\gameux.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFx.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFHost.exe
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-04-05 12:38:20 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-04-05 12:37:57 ----A---- C:\Windows\system32\Wdfres.dll
2013-04-05 12:37:57 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-04-05 12:37:57 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-04-05 12:37:21 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\netevent.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\netcorehc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\ncsi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\wksprtPS.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\wksprt.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpudd.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpcorets.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\mstscax.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\mstsc.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-05 12:36:33 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-04-05 12:36:33 ----A---- C:\Windows\system32\aaclient.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\schannel.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\lsasrv.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-04-05 12:36:00 ----A---- C:\Windows\system32\drivers\cng.sys
2013-04-05 12:35:42 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-04-05 12:35:42 ----A---- C:\Windows\system32\srcore.dll
2013-04-05 12:35:29 ----A---- C:\Windows\system32\spoolsv.exe
2013-04-05 12:35:29 ----A---- C:\Windows\splwow64.exe
2013-04-05 12:35:04 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-05 12:34:53 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-04-05 12:34:40 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-04-05 12:34:40 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-05 12:34:29 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-04-05 12:34:29 ----A---- C:\Windows\system32\qdvd.dll
2013-04-05 12:34:20 ----A---- C:\Windows\system32\profsvc.dll
2013-04-05 12:34:10 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-04-05 12:34:10 ----A---- C:\Windows\system32\msi.dll
2013-04-05 12:33:58 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-04-05 12:33:58 ----A---- C:\Windows\system32\ntshrui.dll
2013-04-05 12:33:16 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-04-05 12:33:16 ----A---- C:\Windows\system32\xmllite.dll
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\tquery.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssvp.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssrch.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssphtb.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssph.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\msscntrs.dll
2013-04-05 12:32:29 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-04-05 12:32:21 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-04-05 12:32:21 ----A---- C:\Windows\system32\prevhost.exe
2013-04-05 12:32:07 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-04-05 12:32:07 ----A---- C:\Windows\explorer.exe
2013-04-04 15:22:49 ----SHD---- C:\Config.Msi
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-03-30 10:48:38 ----A---- C:\Windows\system32\RtNicProp64.dll
2013-03-30 10:48:38 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2013-03-28 19:18:56 ----D---- C:\ProgramData\WarThunder
2013-03-26 18:17:33 ----D---- C:\ProgramData\LJW
2013-03-26 18:17:31 ----SHD---- C:\ProgramData\MFYLKX
2013-03-26 13:56:34 ----A---- C:\Windows\system32\drivers\asmtxhci.sys
2013-03-26 13:56:16 ----A---- C:\Windows\system32\drivers\asmthub3.sys
2013-03-26 13:55:55 ----A---- C:\Windows\system32\drivers\amdkmpfd.sys
2013-03-26 12:11:01 ----D---- C:\ProgramData\BrowserProtect
2013-03-26 12:09:52 ----A---- C:\Windows\system32\drivers\amdide64.sys
2013-03-26 12:07:31 ----A---- C:\Windows\system32\WavesGUILib.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tosade.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tepeqapo64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tadefxapo264.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tadefxapo.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFSS_APO.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFNHK64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFCOM64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFAPO64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtPgEx64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkAPO64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkApi64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RTCOM64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\RCoRes64.dat
2013-03-26 12:07:30 ----A---- C:\Windows\system32\RCoInstII64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEP64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEL64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEG64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EED64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEA64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2013-03-26 12:07:30 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2013-03-26 12:07:29 ----A---- C:\Windows\system32\KAAPORT64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\FMAPO64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\AERTAR64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\AERTAC64.dll
2013-03-26 12:06:28 ----A---- C:\Windows\system32\drivers\wdfcoinstaller01009.dll
2013-03-26 12:06:28 ----A---- C:\Windows\system32\drivers\wacomrouterfilter.sys
2013-03-26 12:06:15 ----A---- C:\Windows\system32\DelayAPO.dll
2013-03-26 11:59:02 ----D---- C:\Users\Roman\AppData\Roaming\ExpressFiles
2013-03-26 11:31:34 ----D---- C:\ProgramData\Uniblue
2013-03-26 11:03:28 ----D---- C:\Users\Roman\AppData\Roaming\Fighters
2013-03-26 11:00:25 ----D---- C:\ProgramData\Fighters
2013-03-25 10:36:42 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-03-25 10:36:41 ----A---- C:\Windows\system32\elshyph.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\wininet.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\wextract.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\webcheck.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\vbscript.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\urlmon.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\url.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msrating.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msls31.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtml.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\inseng.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iexpress.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iesetup.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iertutil.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iernonce.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ie4uinit.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\icardie.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\occache.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\mshta.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\jscript9.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\jscript.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\imgutil.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieui.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\iesysprep.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\iepeers.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieframe.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\XpsPrint.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WMPhoto.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\FntCache.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\dxgi.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\DWrite.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d11.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10warp.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10level9.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10_1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d2d1.dll
2013-03-24 20:41:25 ----A---- C:\Windows\system32\E_ILMCDE.DLL
2013-03-24 20:41:25 ----A---- C:\Windows\system32\E_GCINST.DLL
2013-03-24 20:41:24 ----A---- C:\Windows\system32\E_IBCBCDE.DLL
2013-03-24 09:58:10 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2013-03-24 09:52:38 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-24 09:52:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-03-24 09:52:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-03-24 09:52:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-03-24 09:50:40 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-03-24 09:50:40 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-03-24 09:50:27 ----A---- C:\Windows\system32\win32k.sys
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\user.exe
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-03-24 09:50:13 ----A---- C:\Windows\system32\winsrv.dll
2013-03-24 09:47:14 ----A---- C:\Windows\system32\taskhost.exe
2013-03-24 09:46:28 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-03-24 09:46:28 ----A---- C:\Windows\system32\win32spl.dll
2013-03-24 09:46:05 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-03-24 09:46:05 ----A---- C:\Windows\system32\ncrypt.dll
2013-03-24 09:45:06 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-03-24 09:45:06 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-03-24 09:45:06 ----A---- C:\Windows\system32\msxml6.dll
2013-03-24 09:45:06 ----A---- C:\Windows\system32\msxml3.dll
2013-03-24 09:26:20 ----D---- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-03-22 11:42:17 ----D---- C:\ProgramData\SUPERSetup
2013-03-19 19:41:03 ----D---- C:\Users\Roman\AppData\Roaming\NCdownloader
2013-03-19 19:40:37 ----D---- C:\ProgramData\SSeauraccho-NewwTab
2013-03-19 19:40:37 ----D---- C:\ProgramData\SoftSafe
2013-03-19 19:40:35 ----D---- C:\Program Files (x86)\WebSearch
2013-03-19 19:40:19 ----D---- C:\ProgramData\BetterSoft
2013-03-19 19:40:14 ----D---- C:\Program Files (x86)\Optimizer Pro
2013-03-19 19:39:50 ----D---- C:\Program Files (x86)\BrowseToSave
2013-03-19 19:39:39 ----D---- C:\ProgramData\Browsee2Save
2013-03-19 19:39:27 ----D---- C:\Program Files (x86)\Solibo Ltd
2013-03-08 12:45:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-07 14:54:49 ----D---- C:\Program Files (x86)\TeamViewer
2013-03-05 23:38:19 ----D---- C:\Users\Roman\AppData\Roaming\The Creative Assembly
2013-02-27 13:14:24 ----D---- C:\ProgramData\ATI
2013-02-27 13:14:22 ----D---- C:\Program Files (x86)\AMD AVT
2013-02-27 13:14:15 ----D---- C:\Program Files (x86)\AMD APP
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\coinst_9.012.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativvaxy_cik_nd.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativvaxy_cik.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativce02.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiumd6a.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiumd64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atitmm64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atio6axx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atimuixx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atimpc64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiicdxx.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiglpxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atig6txx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atig6pxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiesrxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiedu64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atieclxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atidemgy.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticalrt64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticaldd64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticalcl64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiapfxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiadlxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\amdpcom64.dll
2013-02-19 20:05:44 ----A---- C:\Windows\system32\E_ILMACE.DLL
2013-02-19 20:05:44 ----A---- C:\Windows\system32\E_IBCBACE.DLL
2013-02-19 20:05:32 ----D---- C:\ProgramData\EPSON
2013-02-19 19:41:43 ----D---- C:\Program Files (x86)\EPSON
2013-02-19 19:41:38 ----A---- C:\Windows\EPSMTL32.TXT
2013-02-19 19:41:27 ----D---- C:\EPSON
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\winver.exe
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2013-02-15 09:11:49 ----D---- C:\Program Files (x86)\Clarus
2013-02-15 08:47:11 ----D---- C:\Program Files (x86)\ESWin
2013-02-15 07:53:10 ----A---- C:\TDSSKiller.2.7.11.0_15.02.2013_06.53.10_log.txt
2013-02-14 20:32:51 ----D---- C:\Program Files (x86)\LSoft Technologies
2013-02-13 17:01:22 ----D---- C:\Users\Roman\AppData\Roaming\WinDbg
2013-02-13 16:57:16 ----D---- C:\Users\Roman\AppData\Roaming\SaMp
2013-02-11 18:38:32 ----D---- C:\Users\Roman\AppData\Roaming\Software Informer
2013-02-11 18:37:07 ----D---- C:\Program Files\Software Informer
2013-02-09 15:53:42 ----D---- C:\Users\Roman\AppData\Roaming\VitySoft
2013-02-09 00:17:08 ----D---- C:\Users\Roman\AppData\Roaming\SFBot
2013-02-04 17:47:18 ----A---- C:\Windows\SYSWOW64\SPORDER.DLL
2013-02-02 04:16:08 ----D---- C:\Users\Roman\AppData\Roaming\Omerta
2013-01-28 20:43:34 ----A---- C:\Windows\system32\HMIPCore64.dll
2013-01-28 18:33:23 ----A---- C:\Windows\SYSWOW64\HMIPCore.dll
2013-01-27 10:04:23 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2013-01-25 23:36:55 ----D---- C:\Users\Roman\AppData\Roaming\Pamela
2013-01-13 19:45:17 ----D---- C:\ProgramData\TERA
2013-01-10 21:44:02 ----A---- C:\Windows\system32\drivers\taphss6.sys
2013-01-10 21:33:50 ----A---- C:\Windows\system32\drivers\hssdrv6.sys
2013-01-09 20:53:49 ----D---- C:\ProgramData\FLEXnet
2013-01-09 19:17:21 ----D---- C:\Windows\fonts\Fonts
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\vxblock.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxwave.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxsfs.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxmas.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxinsi64.exe
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxinsa64.exe
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxhpinst.exe
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxdrv.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxcpyi64.exe
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxcpya64.exe
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\pxafs.dll
2013-01-09 19:17:04 ----N---- C:\Windows\SYSWOW64\px.dll
2013-01-09 19:17:04 ----N---- C:\Windows\system32\drivers\PxHlpa64.sys
2013-01-09 19:17:04 ----N---- C:\Windows\system32\drivers\cdralw2k.sys
2013-01-09 19:17:04 ----N---- C:\Windows\system32\drivers\cdr4_xp.sys
2013-01-08 19:25:11 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-01-08 19:14:05 ----D---- C:\Program Files\Adobe
2013-01-08 19:09:37 ----D---- C:\Program Files\Common Files\Adobe
2013-01-08 17:21:41 ----D---- C:\Users\Roman\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

======List of files/folders modified in the last 3 months======

2013-04-07 20:07:26 ----D---- C:\Windows\Temp
2013-04-07 20:00:56 ----D---- C:\Users\Roman\AppData\Roaming\Skype
2013-04-07 19:48:46 ----RD---- C:\Program Files
2013-04-07 19:42:24 ----RD---- C:\Program Files (x86)
2013-04-07 19:42:21 ----D---- C:\Windows\system32\Tasks
2013-04-07 19:42:20 ----D---- C:\Windows\Tasks
2013-04-07 19:42:07 ----D---- C:\Programy
2013-04-07 19:30:01 ----D---- C:\Windows\System32
2013-04-07 19:30:01 ----D---- C:\Windows\inf
2013-04-07 19:30:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-07 18:57:04 ----AD---- C:\ProgramData\TEMP
2013-04-07 18:50:26 ----D---- C:\Program Files (x86)\Google
2013-04-07 18:46:35 ----SHD---- C:\Windows\Installer
2013-04-07 18:46:24 ----D---- C:\Windows\SysWOW64
2013-04-07 18:46:00 ----SHD---- C:\System Volume Information
2013-04-07 18:11:52 ----HD---- C:\ProgramData
2013-04-07 18:03:30 ----D---- C:\Program Files (x86)\Steam
2013-04-07 11:55:53 ----D---- C:\Users\Roman\AppData\Roaming\.minecraft
2013-04-07 09:53:16 ----D---- C:\Windows\system32\config
2013-04-06 09:16:51 ----D---- C:\Windows\Microsoft.NET
2013-04-05 19:51:15 ----RSD---- C:\Windows\assembly
2013-04-05 15:29:48 ----D---- C:\Windows
2013-04-05 13:02:30 ----D---- C:\Windows\winsxs
2013-04-05 12:55:54 ----D---- C:\Windows\AppPatch
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\en-US
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-05 12:55:52 ----D---- C:\Windows\system32\sk-SK
2013-04-05 12:55:52 ----D---- C:\Windows\system32\en-US
2013-04-05 12:55:52 ----D---- C:\Windows\system32\cs-CZ
2013-04-05 12:55:49 ----RSD---- C:\Windows\Fonts
2013-04-05 12:55:49 ----D---- C:\Windows\system32\wbem
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers\en-US
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers
2013-04-05 12:55:47 ----D---- C:\Windows\SYSWOW64\wbem
2013-04-05 12:55:47 ----D---- C:\Windows\SYSWOW64\migration
2013-04-05 12:55:47 ----D---- C:\Windows\system32\migration
2013-04-05 12:55:47 ----D---- C:\Windows\PolicyDefinitions
2013-04-05 12:55:42 ----D---- C:\Windows\system32\DriverStore
2013-04-05 12:52:58 ----D---- C:\Windows\system32\catroot2
2013-04-05 12:52:58 ----D---- C:\Windows\system32\catroot
2013-04-05 12:50:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-04-05 12:17:23 ----D---- C:\Windows\Logs
2013-04-05 11:42:20 ----D---- C:\Users\Roman\AppData\Roaming\uTorrent
2013-04-05 11:39:24 ----D---- C:\Windows\system32\LogFiles
2013-04-05 11:35:45 ----D---- C:\Windows\debug
2013-04-04 15:22:51 ----D---- C:\ProgramData\Skype
2013-04-04 15:22:49 ----RD---- C:\Program Files (x86)\Skype
2013-04-03 15:53:33 ----D---- C:\Users\Roman\AppData\Roaming\ICQ
2013-04-01 12:48:43 ----D---- C:\Windows\SYSWOW64\directx
2013-03-30 10:48:38 ----A---- C:\Windows\system32\RTNUninst64.dll
2013-03-28 09:50:09 ----D---- C:\Program Files (x86)\Adobe
2013-03-27 16:33:19 ----D---- C:\Windows\system32\drivers\etc
2013-03-27 16:30:41 ----D---- C:\Program Files (x86)\Common Files
2013-03-27 16:22:53 ----D---- C:\Program Files\Internet Explorer
2013-03-26 13:39:50 ----D---- C:\Windows\rescache
2013-03-26 13:11:03 ----D---- C:\Users\Roman\AppData\Roaming\DAEMON Tools Lite
2013-03-26 12:07:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-25 13:00:55 ----D---- C:\Windows\Panther
2013-03-25 13:00:31 ----D---- C:\Windows\Minidump
2013-03-25 10:45:37 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-25 10:45:37 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-25 10:44:02 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\es-ES
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\da-DK
2013-03-25 10:43:54 ----D---- C:\Windows\system32\pt-BR
2013-03-25 10:43:54 ----D---- C:\Windows\system32\it-IT
2013-03-25 10:43:53 ----D---- C:\Windows\system32\zh-HK
2013-03-25 10:43:53 ----D---- C:\Windows\system32\tr-TR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\sv-SE
2013-03-25 10:43:53 ----D---- C:\Windows\system32\pt-PT
2013-03-25 10:43:53 ----D---- C:\Windows\system32\pl-PL
2013-03-25 10:43:53 ----D---- C:\Windows\system32\nl-NL
2013-03-25 10:43:53 ----D---- C:\Windows\system32\ko-KR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\hu-HU
2013-03-25 10:43:53 ----D---- C:\Windows\system32\fr-FR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\fi-FI
2013-03-25 10:43:53 ----D---- C:\Windows\system32\es-ES
2013-03-25 10:43:53 ----D---- C:\Windows\system32\el-GR
2013-03-25 10:43:52 ----D---- C:\Windows\system32\zh-TW
2013-03-25 10:43:52 ----D---- C:\Windows\system32\zh-CN
2013-03-25 10:43:52 ----D---- C:\Windows\system32\ru-RU
2013-03-25 10:43:52 ----D---- C:\Windows\system32\nb-NO
2013-03-25 10:43:52 ----D---- C:\Windows\system32\ja-JP
2013-03-25 10:43:52 ----D---- C:\Windows\system32\de-DE
2013-03-25 10:43:52 ----D---- C:\Windows\system32\da-DK
2013-03-25 10:42:31 ----D---- C:\ProgramData\Microsoft Help
2013-03-24 21:33:14 ----D---- C:\Windows\system32\NDF
2013-03-24 09:57:48 ----D---- C:\Users\Roman\AppData\Roaming\IObit
2013-03-24 09:57:45 ----D---- C:\Program Files (x86)\IObit
2013-03-24 09:56:57 ----D---- C:\ProgramData\IObit
2013-03-22 11:45:56 ----D---- C:\Windows\Prefetch
2013-03-19 19:40:38 ----D---- C:\ProgramData\InstallMate
2013-03-15 15:31:17 ----D---- C:\Games
2013-03-13 21:21:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-03-12 01:10:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-09 09:47:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-05 23:54:56 ----D---- C:\ProgramData\Adobe
2013-03-05 12:48:14 ----D---- C:\Users\Roman\AppData\Roaming\Tunngle
2013-03-05 12:40:15 ----D---- C:\ProgramData\Tunngle
2013-03-04 15:53:46 ----A---- C:\Windows\system32\MRT.exe
2013-03-03 14:02:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-03-02 18:20:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-01 20:38:06 ----D---- C:\Program Files (x86)\SpeedFan
2013-02-27 13:16:36 ----A---- C:\Windows\Sandboxie.ini
2013-02-27 13:14:23 ----D---- C:\ProgramData\AMD
2013-02-27 13:13:42 ----D---- C:\Program Files\ATI Technologies
2013-02-19 20:47:18 ----D---- C:\Windows\twain_32
2013-02-14 22:34:41 ----SD---- C:\ProgramData\Microsoft
2013-02-13 15:40:05 ----D---- C:\Users\Roman\AppData\Roaming\DVDVideoSoft
2013-02-12 17:33:11 ----A---- C:\Windows\system32\HRUPPROG.TXT
2013-02-09 20:26:10 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-02-09 17:37:35 ----D---- C:\Program Files (x86)\Tunngle
2013-02-08 23:38:06 ----D---- C:\Users\Roman\AppData\Roaming\Adobe
2013-02-07 15:33:41 ----D---- C:\Users\Roman\AppData\Roaming\SPORE
2013-02-05 20:42:25 ----RD---- C:\Users
2013-01-28 19:35:24 ----D---- C:\Program Files\CCleaner
2013-01-17 22:44:07 ----D---- C:\Program Files\Common Files
2013-01-15 19:49:06 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2013-03-26 11904]
R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2013-03-26 32896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2013-01-09 52856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-03-30 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-03-30 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 SASDIFSV;SASDIFSV; \??\C:\Programy\Spy\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Programy\Spy\SASKUTIL64.SYS [2011-07-12 12368]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-03-30 100712]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2013-03-26 139592]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2013-03-26 418632]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-09 283200]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-03-26 4015592]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2012-07-05 33224]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-03-30 838216]
R3 SbieDrv;SbieDrv; \??\C:\Programy\Sandboxie\SbieDrv.sys [2012-12-16 202632]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2012-07-05 21904]
R3 wacomrouterfilter;Wacom Router Filter Driver; C:\Windows\system32\DRIVERS\wacomrouterfilter.sys [2013-03-26 15344]
S3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 cpuz135;cpuz135; C:\Windows\system32\drivers\cpuz135.sys []
S3 EagleX64;EagleX64; C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; C:\Windows\system32\drivers\FairplayKD.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 IlvMoneyDRIVER53;IlvMoneyDRIVER53; C:\Windows\system32\drivers\IlvMoneyDRIVER53.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-04-05 19456]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2010-08-31 14648]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-07-10 38632]
S3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2013-01-10 42184]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-04-05 57856]
S3 tsusbhub;tsusbhub; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\L:\Game Booster 3\Driver\WinRing0x64.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Programy\Spy\SASCORE64.EXE [2012-07-11 140672]
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7; C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6; C:\Programy\Advanced SystemCare 6\ASCService.exe [2013-01-15 465216]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-03-30 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-30 86752]
R2 BrowserProtect;BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-03-06 2569168]
R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Roman\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2012-11-17 107520]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Programy\Hamachi\hamachi-2.exe [2012-12-10 2465712]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-08-05 76888]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo64.exe [2010-08-19 386344]
R2 SbieSvc;Sandboxie Service; C:\Programy\Sandboxie\SbieSvc.exe [2012-12-16 123664]
R2 SharedReg;Shared Registry; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-03-19 3289208]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-09 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2013-02-09 8704]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-13 253656]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-01-09 651720]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-08 115608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-03-26 543656]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-29 1255736]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-09 51648]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 UmRdpService;Přesměrovač portů uživatelského režimu služby Vzdálená plocha; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v2.200 - Log vytvooen 07/04/2013 v 21:25:01
# Aktualizováno 02/04/2013 Xplode
# Operaení systém : Windows 7 Ultimate Service Pack 1 (64 bits)
# Uživatel : Roman - HOUBÁK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Roman\Desktop\AdwCleaner(1).exe
# Volba [Prohledat]


***** [Služby] *****

Nalezeno : BrowserProtect
Nalezeno : DefaultTabUpdate

***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\BrowseToSave
Složka Nalezeno : C:\Program Files (x86)\Common Files\AVG Secure Search
Složka Nalezeno : C:\Program Files (x86)\Conduit
Složka Nalezeno : C:\Program Files (x86)\DefaultTab
Složka Nalezeno : C:\Program Files (x86)\ChatZum Toolbar
Složka Nalezeno : C:\Program Files (x86)\Iminent
Složka Nalezeno : C:\Program Files (x86)\Optimizer Pro
Složka Nalezeno : C:\Program Files (x86)\SweetIM
Složka Nalezeno : C:\Program Files (x86)\Vid-Saver
Složka Nalezeno : C:\Program Files (x86)\WebSearch
Složka Nalezeno : C:\Program Files (x86)\yourfiledownloader
Složka Nalezeno : C:\ProgramData\Anti-phishing Domain Advisor
Složka Nalezeno : C:\ProgramData\APN
Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\BetterSoft
Složka Nalezeno : C:\ProgramData\blekko toolbars
Složka Nalezeno : C:\ProgramData\BrowserProtect
Složka Nalezeno : C:\ProgramData\Iminent
Složka Nalezeno : C:\ProgramData\InstallMate
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TheBflix
Složka Nalezeno : C:\ProgramData\Premium
Složka Nalezeno : C:\ProgramData\SoftSafe
Složka Nalezeno : C:\ProgramData\SweetIM
Složka Nalezeno : C:\ProgramData\TheBflix
Složka Nalezeno : C:\Users\Roman\AppData\Local\APN
Složka Nalezeno : C:\Users\Roman\AppData\Local\Conduit
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Složka Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Složka Nalezeno : C:\Users\Roman\AppData\Local\PutLockerDownloader
Složka Nalezeno : C:\Users\Roman\AppData\Local\RobotBoom_60
Složka Nalezeno : C:\Users\Roman\AppData\Local\Vid-Saver
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\BabylonToolbar
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\Funmoods
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\searchresultstb
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\Softonic
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\SweetIM
Složka Nalezeno : C:\Users\Roman\AppData\LocalLow\TheBflix
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\DefaultTab
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\dvdvideosoftiehelpers
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\Iminent
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\Smartbar
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\NCdownloader
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\OpenCandy
Složka Nalezeno : C:\Users\Roman\AppData\Roaming\yourfiledownloader
Soubor Nalezeno : C:\END
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
Soubor Nalezeno : C:\user.js
Soubor Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Soubor Nalezeno : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Soubor Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\bprotector_extensions.sqlite
Soubor Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\bprotector_prefs.js
Soubor Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\searchplugins\SearchTheWeb.xml
Soubor Nalezeno : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\searchplugins\WebSearch.xml

***** [Registry] *****

Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browsetosave\sprotector.dll
Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\sprote~1\sprote~1.dll
Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\wxdownload\sprotector.dll
Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browserprotect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Hodnota Nalezeno : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Klíe Nalezeno : HKCU\Software\1ClickDownload
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Crossrider
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\DefaultTab
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\RobotBoom_60
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Vid-Saver
Klíe Nalezeno : HKCU\Software\AppDataLow\SProtector
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Cr_Installer
Klíe Nalezeno : HKCU\Software\DataMngr
Klíe Nalezeno : HKCU\Software\DataMngr_Toolbar
Klíe Nalezeno : HKCU\Software\Default Tab
Klíe Nalezeno : HKCU\Software\ChatZum Toolbar
Klíe Nalezeno : HKCU\Software\IM
Klíe Nalezeno : HKCU\Software\Iminent
Klíe Nalezeno : HKCU\Software\ImInstaller
Klíe Nalezeno : HKCU\Software\InstallCore
Klíe Nalezeno : HKCU\Software\InstalledBrowserExtensions
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKCU\Software\SProtector
Klíe Nalezeno : HKCU\Software\StartSearch
Klíe Nalezeno : HKCU\Software\YourFileDownloader
Klíe Nalezeno : HKCU\Software\e55dcdeb73ee912
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0003491.BHO
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0003491.BHO.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0003491.Sandbox
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0003491.Sandbox.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.BHO
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.BHO.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.FBApi
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.FBApi.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.Sandbox
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0011825.Sandbox.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandle.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandler
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler
Klíe Nalezeno : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Klíe Nalezeno : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Klíe Nalezeno : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\sim-packages
Klíe Nalezeno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Klíe Nalezeno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\DataMngr
Klíe Nalezeno : HKLM\Software\Default Tab
Klíe Nalezeno : HKLM\Software\DefaultTab
Klíe Nalezeno : HKLM\Software\ChatZum Toolbar
Klíe Nalezeno : HKLM\Software\Iminent
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitUninstaller_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitUninstaller_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\Vid-Saver_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\Vid-Saver_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\Software\RobotBoom_60
Klíe Nalezeno : HKLM\Software\SP Global
Klíe Nalezeno : HKLM\Software\SProtector
Klíe Nalezeno : HKLM\Software\Web Assistant
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\e55dcdeb73ee912
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011341191}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111181125}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2F603A45-D956-496B-81B5-50D782424976}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B85C4CB2-B352-4BD8-818C-BCE353599107}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Anti-phishing Domain Advisor
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SProtector
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vid-Saver
Klíe Nalezeno : HKLM\Software\YourFileDownloader
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Klíe Nalezeno : HKLM\SOFTWARE\Web Assistant
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíe Nalezeno : HKU\S-1-5-21-2919514174-1416075207-1654230562-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16521

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.iminent.com/?appid=99ac9dba-3c8d-4efa-afc5-5481c27eb6a9
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www.delta-search.com/?affID=119776&tt=1 ... FFA7B609DE

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\prefs.js

Nalezeno : user_pref("aol_toolbar.default.homepage.check", false);
Nalezeno : user_pref("aol_toolbar.default.search.check", false);
Nalezeno : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119776&tt=190313_wo1&bab[...]
Nalezeno : user_pref("avg.install.userSPSettings", "Delta Search");
Nalezeno : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119776&tt=1 ... absrc=NT_s[...]
Nalezeno : user_pref("browser.search.defaultenginename", "SearchTheWeb");
Nalezeno : user_pref("extensions.5148a2877a390.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Nalezeno : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Nalezeno : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "WebSearch");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "WebSearch");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://websearch.helpmefindyour.info[...]
Nalezeno : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://websearch.helpmefindyour.info/?pid=686&r=2[...]
Nalezeno : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Nalezeno : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Nalezeno : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Nalezeno : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v26.0.1410.43

Soubor : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [43588 octets] - [07/04/2013 21:25:01]

########## EOF - C:\AdwCleaner[R1].txt - [43649 octets] ##########

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.

Omlouvám se, ale nejde mi internet a muj mobil sem neumí vložit tolik znaků, takže sem musím vložit odkaz http://m.uloz.to/xnjp1JqP/eee-txt

Dejte nový log RSIT.

.

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
C:\Program Files (x86)\Skype\Toolbars
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2919514174-1416075207-1654230562-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2919514174-1416075207-1654230562-1000UA.job
C:\ProgramData\MFYLKX

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UTY Start"=-

:services
Skype C2C Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Roman at 2013-04-11 20:09:19
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 143 GB (45%) free of 318 GB
Total RAM: 4078 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:09:30, on 11.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16521)
Boot mode: Normal

Running processes:
C:\Programy\FRAPS\fraps.exe
C:\Programy\Advanced SystemCare 6\Monitor.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Programy\Advanced SystemCare 6\ASCTray.exe
C:\Programy\Jet Screenshot\jetScreenshot.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Programy\Advanced SystemCare 6\ASC.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Program Files\trend micro\Roman.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {69dfef64-c99e-4db0-bc63-ceb3bd218569} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: SSeauraccho-NewwTab - {D870E93E-F8F8-2214-D9E6-F09A4DA9A010} - C:\ProgramData\SSeauraccho-NewwTab\5148a2cae6cf4.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Browsee2Save - {FDD80893-4C63-9CFC-E2EB-67A1B7C888DC} - C:\ProgramData\Browsee2Save\5148a2877a47a.dll
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [APC] C:\Programy\Advanced Parental Control\BackProcessAPC.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKCU\..\Run: [APC] C:\Programy\Advanced Parental Control\BackProcessAPC.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Programy\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE /FU "C:\Windows\TEMP\E_SFA27.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series (kopie 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE /FU "C:\Windows\TEMP\E_S6613.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Jet Screenshot] "C:\Programy\Jet Screenshot\jetScreenshot.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\Roman\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roman\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (file missing)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Programy\Spy\SASCORE64.EXE
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Programy\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Programy\Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 14211 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Programy\Advanced SystemCare 6\ASCService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x324
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
taskeng.exe {53FA0D03-6777-4F13-AF13-7864119ED6AF}
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Programy\Spy\SASCORE64.EXE"
C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
C:\Programy\Hamachi\hamachi-2.exe -s
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
taskeng.exe {8CE97205-2652-4D7A-9E7E-9F3832B8329F}
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe /schedule /profile "c:\programdata\bettersoft\optimizerpro\3036567561.ini"
C:\ProgramData\GBox\GBox1.exe /schedule /profilepath "C:\ProgramData\GBox\profile.ini"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\Explorer.EXE
C:\Programy\FRAPS\fraps.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Programy\Advanced SystemCare 6\Monitor.exe"
"C:\Program Files\Cyberlink\Shared files\RichVideo64.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000730
WLIDSvcM.exe 2864
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"C:\Programy\Advanced SystemCare 6\ASCTray.exe" /AutoStart
"C:\Programy\Jet Screenshot\jetScreenshot.exe"
HydraDM64.exe -h:65992 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Programy\FRAPS\fraps64.dat"
"C:\Programy\Advanced SystemCare 6\ASC.exe" /widget_scan
"C:\Program Files (x86)\Steam\Steam.exe" "-silent"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://i.imgur.com/bGCknNk.jpg"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3676.c26f400.1916229171 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3676 "\\.\pipe\gecko-crash-server-pipe.3676" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --proxy-stub-channel=Flash2424.64D663D8.2268 --host-broker-channel=Flash2424.64D663D8.24156 --host-pid=2424 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --channel=1316.0030F528.84130903 --proxy-stub-channel=Flash2424.64D663D8.2268 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Roman\Desktop\ \RSITx64.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3676.1dfc8300.1691090877 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3676 "\\.\pipe\gecko-crash-server-pipe.3676" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --proxy-stub-channel=Flash4124.64D663D8.31171 --host-broker-channel=Flash4124.64D663D8.21395 --host-pid=4124 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --channel=3724.0036F698.1214886681 --proxy-stub-channel=Flash4124.64D663D8.31171 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GBoxUpdaterTask{9001907E-F3F0-49E5-AED6-EB14E1D64B6D}.job
C:\Windows\tasks\schedule!3036567561.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@comrade.gamespy.com/comrade]
"Description"=
"Path"=C:\Program Files (x86)\GameSpy\Comrade\npcomrade.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.116.0]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml

C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\extensions\
pn3w@eyai-auoi.org
vzimhklv@hcfiiyaa.co.uk

C:\Users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yl0fkq1p.default-1356962632340\searchplugins\
bingp.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-03-23 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-28 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D870E93E-F8F8-2214-D9E6-F09A4DA9A010}]
SSeauraccho-NewwTab - C:\ProgramData\SSeauraccho-NewwTab\5148a2cae6cf4.dll [2013-03-19 118272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-28 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD80893-4C63-9CFC-E2EB-67A1B7C888DC}]
Browsee2Save - C:\ProgramData\Browsee2Save\5148a2877a47a.dll [2013-03-19 118272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-03-26 6468712]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
"EPSON Stylus DX3800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE [2005-02-08 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"APC"=C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]
"AdobeBridge"= []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18643048]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2011-04-19 393216]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-03-29 1631144]
"Advanced SystemCare 6"=C:\Programy\Advanced SystemCare 6\ASCTray.exe [2013-01-15 491840]
"EPSON Stylus DX7400 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE [2007-04-12 213504]
"EPSON Stylus DX7400 Series (kopie 1)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICDE.EXE [2007-04-12 213504]
"Jet Screenshot"=C:\Programy\Jet Screenshot\jetScreenshot.exe [2013-01-11 1954056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Anti-phishing Domain Advisor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APC]
C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Comrade.exe]
C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe [2011-03-17 1204640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-12 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
D:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Jet Screenshot]
C:\Programy\Jet Screenshot\jetScreenshot.exe [2013-01-11 1954056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Programy\Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RobotBoom_60bar Uninstall]
rundll32 C:\PROGRA~2\60Uninstall Robot Boom.dll,O -3 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_ROC_NT]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18643048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2013-03-29 1631144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Programy\Spy\SUPERAntiSpyware.exe [2013-01-27 5629312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter Search Scope Monitor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4z Browser Plugin Loader]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4zbar Uninstall]
rundll32 C:\PROGRA~2\4zUninstall VideoDownloadConverter.dll,O -3 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XWidget]
[]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"APC"=C:\Programy\Advanced Parental Control\BackProcessAPC.exe [2007-04-20 135168]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-03-30 345312]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-06-25 1073352]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2012-12-25 4474832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FPS1"=frapsv64.dll
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2013-04-11 19:56:15 ----D---- C:\_OTM
2013-04-08 19:07:32 ----A---- C:\AdwCleaner[R2].txt
2013-04-08 19:07:20 ----D---- C:\Windows\Logs
2013-04-08 18:57:36 ----A---- C:\AdwCleaner[S2].txt
2013-04-08 18:48:52 ----A---- C:\Windows\wininit.ini
2013-04-08 15:12:43 ----A---- C:\AdwCleaner[S1].txt
2013-04-07 21:25:01 ----A---- C:\AdwCleaner[R1].txt
2013-04-07 19:48:46 ----D---- C:\Program Files\trend micro
2013-04-07 19:48:45 ----D---- C:\rsit
2013-04-07 18:11:52 ----D---- C:\ProgramData\Google
2013-04-07 18:11:51 ----D---- C:\Users\Roman\AppData\Roaming\Google
2013-04-06 08:58:08 ----N---- C:\bootsqm.dat
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-05 12:40:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-05 12:40:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-05 12:40:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64win.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\wow64.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\kernel32.dll
2013-04-05 12:40:50 ----A---- C:\Windows\system32\conhost.exe
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-05 12:40:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-05 12:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-05 12:39:51 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-05 12:39:51 ----A---- C:\Windows\system32\usp10.dll
2013-04-05 12:39:28 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-05 12:39:28 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-05 12:39:28 ----A---- C:\Windows\system32\Wpc.dll
2013-04-05 12:39:28 ----A---- C:\Windows\system32\gameux.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFx.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFHost.exe
2013-04-05 12:38:20 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-04-05 12:38:20 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-04-05 12:38:20 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-04-05 12:37:57 ----A---- C:\Windows\system32\Wdfres.dll
2013-04-05 12:37:57 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-04-05 12:37:57 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-04-05 12:37:21 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-04-05 12:37:21 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\netevent.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\netcorehc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\ncsi.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-05 12:36:59 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-04-05 12:36:33 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\wksprtPS.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\wksprt.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpudd.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\rdpcorets.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\mstscax.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\mstsc.exe
2013-04-05 12:36:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-04-05 12:36:33 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-05 12:36:33 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-04-05 12:36:33 ----A---- C:\Windows\system32\aaclient.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-04-05 12:36:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\schannel.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\lsasrv.dll
2013-04-05 12:36:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-04-05 12:36:00 ----A---- C:\Windows\system32\drivers\cng.sys
2013-04-05 12:35:42 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-04-05 12:35:42 ----A---- C:\Windows\system32\srcore.dll
2013-04-05 12:35:29 ----A---- C:\Windows\system32\spoolsv.exe
2013-04-05 12:35:29 ----A---- C:\Windows\splwow64.exe
2013-04-05 12:35:04 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-05 12:34:53 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-04-05 12:34:40 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-04-05 12:34:40 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-05 12:34:29 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-04-05 12:34:29 ----A---- C:\Windows\system32\qdvd.dll
2013-04-05 12:34:20 ----A---- C:\Windows\system32\profsvc.dll
2013-04-05 12:34:10 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-04-05 12:34:10 ----A---- C:\Windows\system32\msi.dll
2013-04-05 12:33:58 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-04-05 12:33:58 ----A---- C:\Windows\system32\ntshrui.dll
2013-04-05 12:33:16 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-04-05 12:33:16 ----A---- C:\Windows\system32\xmllite.dll
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-04-05 12:33:07 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-04-05 12:32:56 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-04-05 12:32:55 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\tquery.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssvp.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssrch.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssphtb.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\mssph.dll
2013-04-05 12:32:55 ----A---- C:\Windows\system32\msscntrs.dll
2013-04-05 12:32:29 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-04-05 12:32:21 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-04-05 12:32:21 ----A---- C:\Windows\system32\prevhost.exe
2013-04-05 12:32:07 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-04-05 12:32:07 ----A---- C:\Windows\explorer.exe
2013-04-04 15:22:49 ----SHD---- C:\Config.Msi
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-03-30 10:53:59 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-03-30 10:48:38 ----A---- C:\Windows\system32\RtNicProp64.dll
2013-03-30 10:48:38 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2013-03-28 19:18:56 ----D---- C:\ProgramData\WarThunder
2013-03-26 18:17:33 ----D---- C:\ProgramData\LJW
2013-03-26 13:56:34 ----A---- C:\Windows\system32\drivers\asmtxhci.sys
2013-03-26 13:56:16 ----A---- C:\Windows\system32\drivers\asmthub3.sys
2013-03-26 13:55:55 ----A---- C:\Windows\system32\drivers\amdkmpfd.sys
2013-03-26 12:09:52 ----A---- C:\Windows\system32\drivers\amdide64.sys
2013-03-26 12:07:31 ----A---- C:\Windows\system32\WavesGUILib.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tosade.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tepeqapo64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tadefxapo264.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\tadefxapo.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFSS_APO.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFNHK64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFCOM64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\SFAPO64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtPgEx64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkAPO64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RtkApi64.dll
2013-03-26 12:07:31 ----A---- C:\Windows\system32\RTCOM64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\RCoRes64.dat
2013-03-26 12:07:30 ----A---- C:\Windows\system32\RCoInstII64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEP64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEL64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEG64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EED64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\R4EEA64A.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-03-26 12:07:30 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2013-03-26 12:07:30 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2013-03-26 12:07:29 ----A---- C:\Windows\system32\KAAPORT64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\FMAPO64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\AERTAR64.dll
2013-03-26 12:07:29 ----A---- C:\Windows\system32\AERTAC64.dll
2013-03-26 12:06:28 ----A---- C:\Windows\system32\drivers\wdfcoinstaller01009.dll
2013-03-26 12:06:28 ----A---- C:\Windows\system32\drivers\wacomrouterfilter.sys
2013-03-26 12:06:15 ----A---- C:\Windows\system32\DelayAPO.dll
2013-03-26 11:59:02 ----D---- C:\Users\Roman\AppData\Roaming\ExpressFiles
2013-03-26 11:31:34 ----D---- C:\ProgramData\Uniblue
2013-03-26 11:03:28 ----D---- C:\Users\Roman\AppData\Roaming\Fighters
2013-03-26 11:00:25 ----D---- C:\ProgramData\Fighters
2013-03-25 10:36:42 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-25 10:36:41 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-03-25 10:36:41 ----A---- C:\Windows\system32\elshyph.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-25 10:36:40 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\wininet.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\wextract.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\webcheck.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\vbscript.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\urlmon.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\url.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msrating.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msls31.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\mshtml.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\inseng.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iexpress.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iesetup.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iertutil.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iernonce.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-25 10:36:40 ----A---- C:\Windows\system32\ie4uinit.exe
2013-03-25 10:36:40 ----A---- C:\Windows\system32\icardie.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-25 10:36:40 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\occache.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\mshta.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\jscript9.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\jscript.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\imgutil.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieui.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\iesysprep.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\iepeers.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\ieframe.dll
2013-03-25 10:36:39 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-25 10:35:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-03-25 10:35:34 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\XpsPrint.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WMPhoto.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\FntCache.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\dxgi.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\DWrite.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d11.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10warp.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10level9.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10_1.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d3d10.dll
2013-03-25 10:35:34 ----A---- C:\Windows\system32\d2d1.dll
2013-03-24 20:41:25 ----A---- C:\Windows\system32\E_ILMCDE.DLL
2013-03-24 20:41:25 ----A---- C:\Windows\system32\E_GCINST.DLL
2013-03-24 20:41:24 ----A---- C:\Windows\system32\E_IBCBCDE.DLL
2013-03-24 09:58:10 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2013-03-24 09:52:38 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-24 09:52:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-03-24 09:52:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-03-24 09:52:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-03-24 09:50:40 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-03-24 09:50:40 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-03-24 09:50:27 ----A---- C:\Windows\system32\win32k.sys
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\user.exe
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-03-24 09:50:13 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-03-24 09:50:13 ----A---- C:\Windows\system32\winsrv.dll
2013-03-24 09:47:14 ----A---- C:\Windows\system32\taskhost.exe
2013-03-24 09:46:28 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-03-24 09:46:28 ----A---- C:\Windows\system32\win32spl.dll
2013-03-24 09:46:05 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-03-24 09:46:05 ----A---- C:\Windows\system32\ncrypt.dll
2013-03-24 09:45:06 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-03-24 09:45:06 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-03-24 09:45:06 ----A---- C:\Windows\system32\msxml6.dll
2013-03-24 09:45:06 ----A---- C:\Windows\system32\msxml3.dll
2013-03-24 09:26:20 ----D---- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-03-22 11:42:17 ----D---- C:\ProgramData\SUPERSetup
2013-03-19 19:40:37 ----D---- C:\ProgramData\SSeauraccho-NewwTab
2013-03-19 19:40:19 ----D---- C:\ProgramData\BetterSoft
2013-03-19 19:39:39 ----D---- C:\ProgramData\Browsee2Save
2013-03-19 19:39:27 ----D---- C:\Program Files (x86)\Solibo Ltd
2013-03-08 12:45:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-07 14:54:49 ----D---- C:\Program Files (x86)\TeamViewer
2013-03-05 23:38:19 ----D---- C:\Users\Roman\AppData\Roaming\The Creative Assembly
2013-02-27 13:14:24 ----D---- C:\ProgramData\ATI
2013-02-27 13:14:22 ----D---- C:\Program Files (x86)\AMD AVT
2013-02-27 13:14:15 ----D---- C:\Program Files (x86)\AMD APP
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2013-02-27 13:10:53 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\coinst_9.012.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativvaxy_cik_nd.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativvaxy_cik.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\ativce02.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiumd6a.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiumd64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atitmm64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atio6axx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atimuixx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atimpc64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiicdxx.dat
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiglpxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atig6txx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atig6pxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiesrxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiedu64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atieclxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atidemgy.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticalrt64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticaldd64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\aticalcl64.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiapfxx.exe
2013-02-27 13:10:53 ----A---- C:\Windows\system32\atiadlxx.dll
2013-02-27 13:10:53 ----A---- C:\Windows\system32\amdpcom64.dll
2013-02-19 20:05:44 ----A---- C:\Windows\system32\E_ILMACE.DLL
2013-02-19 20:05:44 ----A---- C:\Windows\system32\E_IBCBACE.DLL
2013-02-19 20:05:32 ----D---- C:\ProgramData\EPSON
2013-02-19 19:41:43 ----D---- C:\Program Files (x86)\EPSON
2013-02-19 19:41:38 ----A---- C:\Windows\EPSMTL32.TXT
2013-02-19 19:41:27 ----D---- C:\EPSON
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\winver.exe
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-02-19 10:37:47 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2013-02-15 09:11:49 ----D---- C:\Program Files (x86)\Clarus
2013-02-15 08:47:11 ----D---- C:\Program Files (x86)\ESWin
2013-02-15 07:53:10 ----A---- C:\TDSSKiller.2.7.11.0_15.02.2013_06.53.10_log.txt
2013-02-14 20:32:51 ----D---- C:\Program Files (x86)\LSoft Technologies
2013-02-13 17:01:22 ----D---- C:\Users\Roman\AppData\Roaming\WinDbg
2013-02-13 16:57:16 ----D---- C:\Users\Roman\AppData\Roaming\SaMp
2013-02-11 18:38:32 ----D---- C:\Users\Roman\AppData\Roaming\Software Informer
2013-02-11 18:37:07 ----D---- C:\Program Files\Software Informer
2013-02-09 15:53:42 ----D---- C:\Users\Roman\AppData\Roaming\VitySoft
2013-02-09 00:17:08 ----D---- C:\Users\Roman\AppData\Roaming\SFBot
2013-02-04 17:47:18 ----A---- C:\Windows\SYSWOW64\SPORDER.DLL
2013-02-02 04:16:08 ----D---- C:\Users\Roman\AppData\Roaming\Omerta
2013-01-28 20:43:34 ----A---- C:\Windows\system32\HMIPCore64.dll
2013-01-28 18:33:23 ----A---- C:\Windows\SYSWOW64\HMIPCore.dll
2013-01-27 10:04:23 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2013-01-25 23:36:55 ----D---- C:\Users\Roman\AppData\Roaming\Pamela
2013-01-13 19:45:17 ----D---- C:\ProgramData\TERA

======List of files/folders modified in the last 3 months======

2013-04-11 20:09:30 ----D---- C:\Windows\Temp
2013-04-11 20:07:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-11 20:05:08 ----D---- C:\Windows\system32\config
2013-04-11 20:03:29 ----D---- C:\Users\Roman\AppData\Roaming\Skype
2013-04-11 20:03:12 ----D---- C:\Program Files (x86)\Steam
2013-04-11 20:02:56 ----D---- C:\ProgramData\Adobe
2013-04-11 20:02:51 ----D---- C:\Windows\system32\Tasks
2013-04-11 19:56:54 ----D---- C:\Windows\SysWOW64
2013-04-11 19:56:54 ----D---- C:\Windows
2013-04-11 19:56:16 ----RD---- C:\Program Files (x86)\Skype
2013-04-11 19:56:16 ----HD---- C:\ProgramData
2013-04-11 19:56:16 ----D---- C:\Windows\Tasks
2013-04-11 17:57:53 ----AD---- C:\ProgramData\TEMP
2013-04-11 15:21:44 ----D---- C:\Windows\inf
2013-04-10 20:44:02 ----D---- C:\Windows\System32
2013-04-10 20:44:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-10 17:23:37 ----SHD---- C:\System Volume Information
2013-04-10 16:35:11 ----D---- C:\Users\Roman\AppData\Roaming\.minecraft
2013-04-09 16:24:56 ----D---- C:\Windows\Microsoft.NET
2013-04-08 18:59:12 ----SHD---- C:\Windows\Installer
2013-04-08 18:51:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-08 18:50:27 ----D---- C:\Programy
2013-04-08 18:47:55 ----D---- C:\Program Files (x86)\1C Company
2013-04-08 15:22:56 ----D---- C:\Windows\system32\NDF
2013-04-08 15:12:56 ----RD---- C:\Program Files (x86)
2013-04-08 15:12:56 ----D---- C:\Program Files (x86)\Common Files
2013-04-07 20:17:29 ----D---- C:\Windows\system32\catroot2
2013-04-07 19:48:46 ----RD---- C:\Program Files
2013-04-07 18:50:26 ----D---- C:\Program Files (x86)\Google
2013-04-05 19:51:15 ----RSD---- C:\Windows\assembly
2013-04-05 13:02:30 ----D---- C:\Windows\winsxs
2013-04-05 12:55:54 ----D---- C:\Windows\AppPatch
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\en-US
2013-04-05 12:55:53 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-05 12:55:52 ----D---- C:\Windows\system32\sk-SK
2013-04-05 12:55:52 ----D---- C:\Windows\system32\en-US
2013-04-05 12:55:52 ----D---- C:\Windows\system32\cs-CZ
2013-04-05 12:55:49 ----RSD---- C:\Windows\Fonts
2013-04-05 12:55:49 ----D---- C:\Windows\system32\wbem
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers\en-US
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-04-05 12:55:49 ----D---- C:\Windows\system32\drivers
2013-04-05 12:55:47 ----D---- C:\Windows\SYSWOW64\wbem
2013-04-05 12:55:47 ----D---- C:\Windows\SYSWOW64\migration
2013-04-05 12:55:47 ----D---- C:\Windows\system32\migration
2013-04-05 12:55:47 ----D---- C:\Windows\PolicyDefinitions
2013-04-05 12:55:42 ----D---- C:\Windows\system32\DriverStore
2013-04-05 12:52:58 ----D---- C:\Windows\system32\catroot
2013-04-05 12:50:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-04-05 11:42:20 ----D---- C:\Users\Roman\AppData\Roaming\uTorrent
2013-04-05 11:39:24 ----D---- C:\Windows\system32\LogFiles
2013-04-05 11:35:45 ----D---- C:\Windows\debug
2013-04-04 15:22:51 ----D---- C:\ProgramData\Skype
2013-04-03 15:53:33 ----D---- C:\Users\Roman\AppData\Roaming\ICQ
2013-04-03 15:22:39 ----D---- C:\Program Files\Common Files\Adobe
2013-04-01 12:48:43 ----D---- C:\Windows\SYSWOW64\directx
2013-03-30 10:48:38 ----A---- C:\Windows\system32\RTNUninst64.dll
2013-03-28 09:50:09 ----D---- C:\Program Files (x86)\Adobe
2013-03-28 09:48:01 ----D---- C:\Program Files\Adobe
2013-03-27 16:33:19 ----D---- C:\Windows\system32\drivers\etc
2013-03-27 16:22:53 ----D---- C:\Program Files\Internet Explorer
2013-03-26 13:39:50 ----D---- C:\Windows\rescache
2013-03-26 13:11:03 ----D---- C:\Users\Roman\AppData\Roaming\DAEMON Tools Lite
2013-03-26 12:07:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-25 13:00:55 ----D---- C:\Windows\Panther
2013-03-25 13:00:31 ----D---- C:\Windows\Minidump
2013-03-25 10:45:37 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-25 10:45:37 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-25 10:44:02 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\es-ES
2013-03-25 10:43:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-03-25 10:43:54 ----D---- C:\Windows\SYSWOW64\da-DK
2013-03-25 10:43:54 ----D---- C:\Windows\system32\pt-BR
2013-03-25 10:43:54 ----D---- C:\Windows\system32\it-IT
2013-03-25 10:43:53 ----D---- C:\Windows\system32\zh-HK
2013-03-25 10:43:53 ----D---- C:\Windows\system32\tr-TR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\sv-SE
2013-03-25 10:43:53 ----D---- C:\Windows\system32\pt-PT
2013-03-25 10:43:53 ----D---- C:\Windows\system32\pl-PL
2013-03-25 10:43:53 ----D---- C:\Windows\system32\nl-NL
2013-03-25 10:43:53 ----D---- C:\Windows\system32\ko-KR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\hu-HU
2013-03-25 10:43:53 ----D---- C:\Windows\system32\fr-FR
2013-03-25 10:43:53 ----D---- C:\Windows\system32\fi-FI
2013-03-25 10:43:53 ----D---- C:\Windows\system32\es-ES
2013-03-25 10:43:53 ----D---- C:\Windows\system32\el-GR
2013-03-25 10:43:52 ----D---- C:\Windows\system32\zh-TW
2013-03-25 10:43:52 ----D---- C:\Windows\system32\zh-CN
2013-03-25 10:43:52 ----D---- C:\Windows\system32\ru-RU
2013-03-25 10:43:52 ----D---- C:\Windows\system32\nb-NO
2013-03-25 10:43:52 ----D---- C:\Windows\system32\ja-JP
2013-03-25 10:43:52 ----D---- C:\Windows\system32\de-DE
2013-03-25 10:43:52 ----D---- C:\Windows\system32\da-DK
2013-03-25 10:42:31 ----D---- C:\ProgramData\Microsoft Help
2013-03-24 09:57:48 ----D---- C:\Users\Roman\AppData\Roaming\IObit
2013-03-24 09:57:45 ----D---- C:\Program Files (x86)\IObit
2013-03-24 09:56:57 ----D---- C:\ProgramData\IObit
2013-03-22 11:45:56 ----D---- C:\Windows\Prefetch
2013-03-15 15:31:17 ----D---- C:\Games
2013-03-12 01:10:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-09 09:47:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-05 12:48:14 ----D---- C:\Users\Roman\AppData\Roaming\Tunngle
2013-03-05 12:40:15 ----D---- C:\ProgramData\Tunngle
2013-03-04 15:53:46 ----A---- C:\Windows\system32\MRT.exe
2013-03-03 14:02:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-03-01 20:38:06 ----D---- C:\Program Files (x86)\SpeedFan
2013-02-27 13:16:36 ----A---- C:\Windows\Sandboxie.ini
2013-02-27 13:14:23 ----D---- C:\ProgramData\AMD
2013-02-27 13:13:42 ----D---- C:\Program Files\ATI Technologies
2013-02-19 20:47:18 ----D---- C:\Windows\twain_32
2013-02-14 22:34:41 ----SD---- C:\ProgramData\Microsoft
2013-02-13 15:40:05 ----D---- C:\Users\Roman\AppData\Roaming\DVDVideoSoft
2013-02-12 17:33:11 ----A---- C:\Windows\system32\HRUPPROG.TXT
2013-02-09 20:26:10 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-02-09 17:37:35 ----D---- C:\Program Files (x86)\Tunngle
2013-02-08 23:38:06 ----D---- C:\Users\Roman\AppData\Roaming\Adobe
2013-02-07 15:33:41 ----D---- C:\Users\Roman\AppData\Roaming\SPORE
2013-02-05 20:42:25 ----RD---- C:\Users
2013-01-28 19:35:24 ----D---- C:\Program Files\CCleaner
2013-01-17 22:44:07 ----D---- C:\Program Files\Common Files
2013-01-15 19:49:06 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2013-03-26 11904]
R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2013-03-26 32896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2013-01-09 52856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-03-30 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-03-30 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 SASDIFSV;SASDIFSV; \??\C:\Programy\Spy\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Programy\Spy\SASKUTIL64.SYS [2011-07-12 12368]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-03-30 100712]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2013-03-26 139592]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2013-03-26 418632]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-09 283200]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-03-26 4015592]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2012-07-05 33224]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-03-30 838216]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2012-07-05 21904]
R3 wacomrouterfilter;Wacom Router Filter Driver; C:\Windows\system32\DRIVERS\wacomrouterfilter.sys [2013-03-26 15344]
S3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 cpuz135;cpuz135; C:\Windows\system32\drivers\cpuz135.sys []
S3 EagleX64;EagleX64; C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; C:\Windows\system32\drivers\FairplayKD.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 IlvMoneyDRIVER53;IlvMoneyDRIVER53; C:\Windows\system32\drivers\IlvMoneyDRIVER53.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-04-05 19456]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2010-08-31 14648]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-07-10 38632]
S3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2013-01-10 42184]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-04-05 57856]
S3 tsusbhub;tsusbhub; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\L:\Game Booster 3\Driver\WinRing0x64.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Programy\Spy\SASCORE64.EXE [2012-07-11 140672]
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7; C:\Programy\PhotoShop\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6; C:\Programy\Advanced SystemCare 6\ASCService.exe [2013-01-15 465216]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-03-30 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-30 86752]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Programy\Hamachi\hamachi-2.exe [2012-12-10 2465712]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2013-02-09 8704]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-08-05 76888]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo64.exe [2010-08-19 386344]
R2 SharedReg;Shared Registry; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-09 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-11 256904]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-01-09 651720]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-08 115608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-03-26 543656]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-29 1255736]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-09 51648]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 UmRdpService;Přesměrovač portů uživatelského režimu služby Vzdálená plocha; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\Roman.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - URLSearchHook: (no name) - {69dfef64-c99e-4db0-bc63-ceb3bd218569} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Doporučuji odinstalovat AdvancedSystemCare. Tento čínský šmejd dokáže v rukou laika poškodit systém.

No...Když se pokusím dvojklikem otevřit flešku, stále to píše "Aplikace nebyla nalezena" a při startu Windowsu je asi 20 vteřin "Prosím čekejte" a potom klasické "Vítejte", takže se počítáč zapína asi 2 minuty...

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware