VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jakubko at 2013-05-30 21:34:12
Microsoft Windows 7 Home Premium
System drive C: has 254 GB (67%) free of 377 GB
Total RAM: 1790 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:34:20, on 30. 5. 2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.17267)
Boot mode: Normal

Running processes:
C:\Users\Jakubko\AppData\Roaming\Google\Google Talk\googletalk.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jakubko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [googletalk] C:\Users\Jakubko\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6450 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-0170ee95-c441-45d3-949b-10678b961f7a -SystemEventPortName:HostProcess-d37bcc8c-d634-4619-9a86-55f29a873087 -IoCancelEventPortName:HostProcess-71c8c3a9-22d9-47d5-81c1-07a5da9e7e61 -NonStateChangingEventPortName:HostProcess-0ae632e0-26e4-4ab6-ab34-7827c0589a57 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:45941e1f-14c5-400d-9c84-b222ed936ffc
"C:\Users\Jakubko\AppData\Roaming\Google\Google Talk\googletalk.exe" /autostart
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2740.0.105919014\547395431" --supports-dual-gpus=false --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x1002 --gpu-device-id=0x9712 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.632.1.2000 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\svchost.exe -k defragsvc
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/15/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_69/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2740.3.413664059\1951571683" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Jakubko\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"googletalk"=C:\Users\Jakubko\AppData\Roaming\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-05-30 21:34:12 ----D---- C:\rsit
2013-05-30 21:34:12 ----D---- C:\Program Files\trend micro
2013-05-29 23:51:31 ----D---- C:\ProgramData\YTD Video Downloader
2013-05-29 23:51:21 ----D---- C:\Program Files (x86)\Adobe
2013-05-29 23:51:19 ----D---- C:\Program Files (x86)\GreenTree Applications
2013-05-29 22:30:37 ----D---- C:\Windows\system32\SPReview
2013-05-28 19:20:06 ----A---- C:\Windows\ntbtlog.txt
2013-05-28 19:11:09 ----D---- C:\Users\Jakubko\AppData\Roaming\Macromedia
2013-05-28 19:11:04 ----D---- C:\Users\Jakubko\AppData\Roaming\Google
2013-05-27 22:55:39 ----D---- C:\Windows\system32\EventProviders
2013-05-27 20:56:38 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-05-27 20:56:37 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-05-27 20:47:54 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-27 20:47:54 ----D---- C:\Windows\system32\Wat
2013-05-26 14:00:49 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-05-26 14:00:49 ----A---- C:\Windows\system32\msv1_0.dll
2013-05-26 13:45:47 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-05-26 13:45:47 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-05-26 13:45:47 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-05-26 13:45:47 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-05-26 13:45:46 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-05-26 13:45:46 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-05-26 13:45:46 ----A---- C:\Windows\system32\PresentationHost.exe
2013-05-26 13:45:46 ----A---- C:\Windows\system32\netfxperf.dll
2013-05-26 13:45:46 ----A---- C:\Windows\system32\mscoree.dll
2013-05-26 13:45:46 ----A---- C:\Windows\system32\dfshim.dll
2013-05-26 13:44:51 ----A---- C:\Windows\system32\browserchoice.exe
2013-05-26 13:27:32 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-05-26 13:27:31 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-05-26 13:27:31 ----A---- C:\Windows\system32\fontsub.dll
2013-05-26 13:27:31 ----A---- C:\Windows\system32\atmlib.dll
2013-05-26 13:27:30 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-05-26 13:27:30 ----A---- C:\Windows\system32\atmfd.dll
2013-05-26 13:22:12 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-05-26 13:22:11 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-05-26 13:22:11 ----A---- C:\Windows\system32\imagehlp.dll
2013-05-26 13:22:10 ----A---- C:\Windows\system32\wmi.dll
2013-05-26 13:22:09 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-05-26 12:47:38 ----D---- C:\ProgramData\Adobe
2013-05-26 12:47:38 ----D---- C:\Program Files\Common Files\Adobe
2013-05-26 12:43:31 ----D---- C:\Program Files\Adobe
2013-05-26 10:40:22 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-05-26 10:40:21 ----A---- C:\Windows\system32\win32spl.dll
2013-05-26 10:40:17 ----A---- C:\Windows\system32\odbccu32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-05-26 10:40:16 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\system32\odbctrac.dll
2013-05-26 10:40:16 ----A---- C:\Windows\system32\odbccr32.dll
2013-05-26 10:40:16 ----A---- C:\Windows\system32\odbccp32.dll
2013-05-26 10:40:14 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-05-26 10:40:14 ----A---- C:\Windows\system32\asycfilt.dll
2013-05-26 10:40:10 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-05-26 10:40:05 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-26 10:40:05 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-05-26 10:40:05 ----A---- C:\Windows\system32\DWrite.dll
2013-05-26 10:40:05 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-26 10:40:05 ----A---- C:\Windows\system32\d2d1.dll
2013-05-26 10:40:04 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-05-26 10:40:04 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-05-26 10:40:04 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-05-26 10:40:04 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-26 10:40:04 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-26 10:39:41 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-05-26 10:39:41 ----A---- C:\Windows\system32\poqexec.exe
2013-05-26 10:39:34 ----A---- C:\Windows\system32\mstscax.dll
2013-05-26 10:39:33 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-26 10:39:32 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-26 10:39:32 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-26 10:39:32 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-26 10:39:32 ----A---- C:\Windows\system32\aaclient.dll
2013-05-26 10:39:05 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-05-26 10:39:05 ----A---- C:\Windows\system32\tzres.dll
2013-05-26 10:38:23 ----A---- C:\Windows\system32\win32k.sys
2013-05-26 10:38:16 ----A---- C:\Windows\system32\CPFilters.dll
2013-05-26 10:38:15 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-05-26 10:38:15 ----A---- C:\Windows\system32\sbe.dll
2013-05-26 10:38:14 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-05-26 10:38:09 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-05-26 10:38:09 ----A---- C:\Windows\system32\t2embed.dll
2013-05-26 10:37:08 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-05-26 10:37:08 ----A---- C:\Windows\system32\quartz.dll
2013-05-26 10:37:07 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-05-26 10:37:07 ----A---- C:\Windows\system32\qdvd.dll
2013-05-26 10:36:58 ----A---- C:\Windows\system32\ole32.dll
2013-05-26 10:36:56 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-05-26 10:36:48 ----A---- C:\Windows\system32\taskschd.dll
2013-05-26 10:36:48 ----A---- C:\Windows\system32\taskeng.exe
2013-05-26 10:36:48 ----A---- C:\Windows\system32\schedsvc.dll
2013-05-26 10:36:46 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-05-26 10:36:46 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-05-26 10:36:46 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-05-26 10:36:46 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-05-26 10:36:46 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-05-26 10:36:46 ----A---- C:\Windows\system32\taskcomp.dll
2013-05-26 10:36:46 ----A---- C:\Windows\system32\schtasks.exe
2013-05-26 10:35:56 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-05-26 10:35:56 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-05-26 10:35:50 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-05-26 10:35:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-05-26 10:35:49 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-05-26 10:35:33 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-05-26 10:35:33 ----A---- C:\Windows\system32\webio.dll
2013-05-26 10:35:11 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-05-26 10:35:11 ----A---- C:\Windows\system32\CertEnroll.dll
2013-05-26 10:33:53 ----D---- C:\Users\Jakubko\AppData\Roaming\Adobe
2013-05-26 10:32:25 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-05-26 10:32:24 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-05-26 10:32:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-05-26 10:32:21 ----A---- C:\Windows\system32\kerberos.dll
2013-05-26 10:32:13 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-26 10:32:06 ----A---- C:\Windows\system32\msxml6.dll
2013-05-26 10:32:06 ----A---- C:\Windows\system32\msxml3.dll
2013-05-26 10:32:05 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-05-26 10:32:05 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-05-26 10:32:02 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-05-26 10:32:02 ----A---- C:\Windows\system32\dpnet.dll
2013-05-26 10:32:00 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-05-26 10:32:00 ----A---- C:\Windows\system32\ncrypt.dll
2013-05-26 10:31:50 ----A---- C:\Windows\system32\wow64win.dll
2013-05-26 10:31:50 ----A---- C:\Windows\system32\winsrv.dll
2013-05-26 10:31:50 ----A---- C:\Windows\system32\KernelBase.dll
2013-05-26 10:31:50 ----A---- C:\Windows\system32\kernel32.dll
2013-05-26 10:31:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-26 10:31:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-26 10:31:49 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-05-26 10:31:49 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-05-26 10:31:49 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-05-26 10:31:49 ----A---- C:\Windows\system32\wow64.dll
2013-05-26 10:31:49 ----A---- C:\Windows\system32\ntvdm64.dll
2013-05-26 10:31:49 ----A---- C:\Windows\system32\conhost.exe
2013-05-26 10:31:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-05-26 10:31:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-05-26 10:31:48 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-05-26 10:31:48 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-05-26 10:31:48 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-05-26 10:31:48 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-05-26 10:31:48 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-05-26 10:31:48 ----A---- C:\Windows\system32\wow64cpu.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-05-26 10:31:47 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-05-26 10:31:46 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-05-26 10:31:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-05-26 10:31:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-05-26 10:31:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-05-26 10:31:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-26 10:31:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-05-26 10:31:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-05-26 10:31:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-05-26 10:31:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-05-26 10:31:43 ----A---- C:\Windows\SYSWOW64\user.exe
2013-05-26 10:31:34 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-05-26 10:30:20 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-05-26 10:30:20 ----A---- C:\Windows\system32\synceng.dll
2013-05-26 10:30:07 ----A---- C:\Windows\system32\mshtml.dll
2013-05-26 10:30:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-26 10:30:01 ----A---- C:\Windows\system32\ieframe.dll
2013-05-26 10:29:55 ----A---- C:\Windows\system32\iertutil.dll
2013-05-26 10:29:54 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-26 10:29:53 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-26 10:29:51 ----A---- C:\Windows\system32\mstime.dll
2013-05-26 10:29:50 ----A---- C:\Windows\system32\urlmon.dll
2013-05-26 10:29:49 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-26 10:29:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-26 10:29:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-26 10:29:46 ----A---- C:\Windows\system32\wininet.dll
2013-05-26 10:29:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-26 10:29:45 ----A---- C:\Windows\SYSWOW64\mstime.dll
2013-05-26 10:29:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-26 10:29:44 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-26 10:29:43 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-26 10:29:43 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-26 10:29:43 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-26 10:29:43 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-26 10:29:43 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-26 10:29:43 ----A---- C:\Windows\system32\url.dll
2013-05-26 10:29:43 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-26 10:29:43 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-26 10:29:43 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-26 10:29:43 ----A---- C:\Windows\system32\iepeers.dll
2013-05-26 10:29:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-26 10:29:42 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-26 10:29:42 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-26 10:29:42 ----A---- C:\Windows\system32\ieui.dll
2013-05-26 10:29:41 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-26 10:29:41 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-26 10:29:22 ----A---- C:\Windows\system32\browser.dll
2013-05-26 10:29:21 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-05-26 10:29:21 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-05-26 10:29:21 ----A---- C:\Windows\system32\netapi32.dll
2013-05-26 10:29:21 ----A---- C:\Windows\system32\browcli.dll
2013-05-26 10:29:17 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-26 10:29:03 ----A---- C:\Windows\system32\shell32.dll
2013-05-26 10:29:01 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-26 10:28:56 ----A---- C:\Windows\system32\schannel.dll
2013-05-26 10:28:55 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-05-26 10:28:55 ----A---- C:\Windows\system32\lsasrv.dll
2013-05-26 10:28:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-05-26 10:28:55 ----A---- C:\Windows\system32\drivers\cng.sys
2013-05-26 10:28:54 ----A---- C:\Windows\system32\sspicli.dll
2013-05-26 10:28:54 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-05-26 10:28:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-05-26 10:28:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-05-26 10:28:53 ----A---- C:\Windows\system32\sspisrv.dll
2013-05-26 10:28:53 ----A---- C:\Windows\system32\secur32.dll
2013-05-26 10:28:53 ----A---- C:\Windows\system32\lsass.exe
2013-05-26 10:28:38 ----A---- C:\Windows\system32\wmpmde.dll
2013-05-26 10:28:37 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-05-26 10:28:29 ----A---- C:\Windows\system32\wintrust.dll
2013-05-26 10:28:28 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-05-26 10:27:23 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-05-26 10:26:57 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-05-26 10:26:56 ----A---- C:\Windows\system32\rdpwsx.dll
2013-05-26 10:26:56 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-05-26 10:23:46 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-05-26 10:23:46 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-05-26 10:23:46 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-05-26 10:23:46 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-05-26 10:23:46 ----A---- C:\Windows\system32\dnsapi.dll
2013-05-26 10:23:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-26 10:23:33 ----A---- C:\Windows\system32\vbscript.dll
2013-05-26 10:23:33 ----A---- C:\Windows\system32\jscript.dll
2013-05-26 10:23:32 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-26 10:23:25 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-05-26 10:23:18 ----A---- C:\Windows\system32\wmp.dll
2013-05-26 10:23:13 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-05-26 10:23:11 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-05-26 10:23:10 ----A---- C:\Windows\system32\wmploc.DLL
2013-05-26 10:23:04 ----A---- C:\Windows\system32\comctl32.dll
2013-05-26 10:23:03 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-05-26 10:23:01 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-26 10:23:01 ----A---- C:\Windows\system32\cdd.dll
2013-05-26 10:22:58 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-05-26 10:22:58 ----A---- C:\Windows\system32\drivers\srv.sys
2013-05-26 10:22:57 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-05-26 10:22:51 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-05-26 10:22:44 ----A---- C:\Windows\system32\psisdecd.dll
2013-05-26 10:22:43 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-05-26 10:22:38 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-05-26 10:22:38 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-05-26 10:22:36 ----A---- C:\Windows\system32\localspl.dll
2013-05-26 10:22:28 ----A---- C:\Windows\system32\mfc42u.dll
2013-05-26 10:22:28 ----A---- C:\Windows\system32\mfc42.dll
2013-05-26 10:22:27 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-05-26 10:22:27 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-05-26 10:22:23 ----A---- C:\Windows\system32\rtutils.dll
2013-05-26 10:21:21 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\system32\tsbyuv.dll
2013-05-26 10:21:10 ----A---- C:\Windows\system32\msyuv.dll
2013-05-26 10:21:10 ----A---- C:\Windows\system32\msvidc32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\system32\msrle32.dll
2013-05-26 10:21:10 ----A---- C:\Windows\system32\iyuv_32.dll
2013-05-26 10:21:08 ----A---- C:\Windows\system32\drivers\afd.sys
2013-05-26 10:21:07 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-05-26 10:21:07 ----A---- C:\Windows\system32\msasn1.dll
2013-05-26 10:21:06 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-26 10:21:06 ----A---- C:\Windows\system32\mstsc.exe
2013-05-26 10:21:04 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-05-26 10:21:04 ----A---- C:\Windows\system32\inetcomm.dll
2013-05-26 10:21:02 ----A---- C:\Windows\system32\consent.exe
2013-05-26 10:21:01 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-05-26 10:21:01 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-05-26 10:21:01 ----A---- C:\Windows\system32\oleaut32.dll
2013-05-26 10:21:01 ----A---- C:\Windows\system32\oleacc.dll
2013-05-26 10:20:59 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-05-26 10:20:59 ----A---- C:\Windows\system32\winlogon.exe
2013-05-26 10:20:59 ----A---- C:\Windows\explorer.exe
2013-05-26 10:20:57 ----A---- C:\Windows\system32\spoolsv.exe
2013-05-26 10:20:56 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-05-26 10:20:45 ----A---- C:\Windows\system32\winresume.exe
2013-05-26 10:20:45 ----A---- C:\Windows\system32\winload.exe
2013-05-26 10:20:45 ----A---- C:\Windows\system32\kdusb.dll
2013-05-26 10:20:45 ----A---- C:\Windows\system32\kdcom.dll
2013-05-26 10:20:45 ----A---- C:\Windows\system32\kd1394.dll
2013-05-26 10:20:37 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-05-26 10:20:37 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-05-26 10:20:37 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-05-26 10:20:36 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-05-26 10:20:36 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-05-26 10:20:35 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-05-26 10:19:58 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-05-26 10:19:58 ----A---- C:\Windows\system32\msvcrt.dll
2013-05-26 10:18:41 ----A---- C:\Windows\system32\EncDec.dll
2013-05-26 10:18:40 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-05-26 10:15:28 ----D---- C:\Users\Jakubko\AppData\Roaming\WinRAR
2013-05-26 10:15:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-26 10:15:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-26 10:15:18 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-26 10:15:18 ----A---- C:\Windows\system32\smss.exe
2013-05-26 10:15:18 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-26 10:15:17 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-26 10:14:37 ----A---- C:\Windows\system32\odbc32.dll
2013-05-26 10:14:36 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-05-26 10:14:34 ----A---- C:\Windows\system32\ntdll.dll
2013-05-26 10:14:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-05-26 10:14:32 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-05-26 10:14:32 ----A---- C:\Windows\system32\srvsvc.dll
2013-05-26 10:13:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-05-26 10:13:41 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-05-26 10:13:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-05-26 10:13:41 ----A---- C:\Windows\system32\cryptsvc.dll
2013-05-26 10:13:41 ----A---- C:\Windows\system32\cryptnet.dll
2013-05-26 10:13:41 ----A---- C:\Windows\system32\crypt32.dll
2013-05-26 09:58:30 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-05-26 09:58:26 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-05-26 09:58:18 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-05-26 09:58:14 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-05-26 09:58:12 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-05-26 09:58:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-05-26 09:58:10 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-05-26 09:57:58 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-05-26 09:57:56 ----A---- C:\Windows\system32\aswBoot.exe
2013-05-26 09:55:31 ----D---- C:\Program Files\WinRAR
2013-05-26 09:48:14 ----A---- C:\Windows\avastSS.scr
2013-05-26 09:47:51 ----D---- C:\Program Files\AVAST Software
2013-05-26 09:47:20 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-05-26 09:47:20 ----A---- C:\Windows\system32\packager.dll
2013-05-26 09:46:21 ----D---- C:\ProgramData\AVAST Software
2013-05-26 00:07:17 ----D---- C:\Windows\Panther
2013-05-25 23:53:01 ----SHD---- C:\Windows\Installer
2013-05-25 23:50:45 ----N---- C:\Windows\system32\MpSigStub.exe
2013-05-25 23:48:48 ----D---- C:\Program Files (x86)\Google
2013-05-25 23:40:35 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-05-25 23:40:35 ----A---- C:\Windows\system32\cabview.dll
2013-05-25 23:40:27 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-05-25 23:40:27 ----A---- C:\Windows\system32\rdpcore.dll
2013-05-25 23:40:27 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-05-25 23:28:39 ----A---- C:\Windows\system32\wups2.dll
2013-05-25 23:28:39 ----A---- C:\Windows\system32\wucltux.dll
2013-05-25 23:28:39 ----A---- C:\Windows\system32\wuaueng.dll
2013-05-25 23:28:39 ----A---- C:\Windows\system32\wuauclt.exe
2013-05-25 23:28:21 ----A---- C:\Windows\system32\wups.dll
2013-05-25 23:28:21 ----A---- C:\Windows\system32\wudriver.dll
2013-05-25 23:28:21 ----A---- C:\Windows\system32\wuapi.dll
2013-05-25 23:28:07 ----A---- C:\Windows\system32\wuwebv.dll
2013-05-25 23:28:07 ----A---- C:\Windows\system32\wuapp.exe
2013-05-25 23:27:48 ----D---- C:\Users\Jakubko\AppData\Roaming\Identities
2013-05-25 23:27:28 ----SD---- C:\Users\Jakubko\AppData\Roaming\Microsoft
2013-05-25 23:27:28 ----D---- C:\Users\Jakubko\AppData\Roaming\Media Center Programs
2013-05-25 23:11:14 ----D---- C:\Windows\SoftwareDistribution
2013-05-25 23:08:10 ----D---- C:\Windows\Prefetch
2013-05-25 23:07:52 ----ASH---- C:\hiberfil.sys
2013-05-25 22:30:31 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2013-05-30 21:34:16 ----D---- C:\Windows\Temp
2013-05-30 21:34:12 ----RD---- C:\Program Files
2013-05-30 14:16:41 ----D---- C:\Windows\rescache
2013-05-30 14:14:25 ----D---- C:\Windows\system32\config
2013-05-29 23:51:54 ----D---- C:\Windows\SysWOW64
2013-05-29 23:51:31 ----HD---- C:\ProgramData
2013-05-29 23:51:21 ----RD---- C:\Program Files (x86)
2013-05-29 23:51:21 ----D---- C:\Program Files (x86)\Common Files
2013-05-29 23:50:56 ----SHD---- C:\System Volume Information
2013-05-29 23:19:36 ----D---- C:\Windows\System32
2013-05-29 23:19:36 ----D---- C:\Windows\inf
2013-05-29 23:19:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-29 23:18:13 ----SD---- C:\ProgramData\Microsoft
2013-05-29 23:18:12 ----D---- C:\Windows\system32\drivers
2013-05-29 23:18:10 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-29 22:25:53 ----SHD---- C:\$Recycle.Bin
2013-05-29 22:25:25 ----RD---- C:\Users
2013-05-28 19:20:06 ----D---- C:\Windows
2013-05-28 18:38:21 ----D---- C:\Windows\system32\wdi
2013-05-28 07:26:08 ----D---- C:\Windows\winsxs
2013-05-28 07:24:51 ----D---- C:\Windows\system32\DriverStore
2013-05-27 21:52:20 ----D---- C:\Windows\Microsoft.NET
2013-05-27 21:52:07 ----RSD---- C:\Windows\assembly
2013-05-27 20:55:20 ----D---- C:\Windows\system32\catroot
2013-05-27 20:55:19 ----D---- C:\Windows\system32\catroot2
2013-05-27 20:48:08 ----D---- C:\Program Files\Common Files\System
2013-05-27 20:48:07 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-05-27 20:48:06 ----D---- C:\Windows\system32\sk-SK
2013-05-27 20:48:05 ----D---- C:\Windows\ehome
2013-05-27 20:48:02 ----D---- C:\Program Files\Windows Mail
2013-05-27 20:48:02 ----D---- C:\Program Files (x86)\Windows Mail
2013-05-27 20:47:50 ----D---- C:\Windows\AppPatch
2013-05-27 20:47:35 ----D---- C:\Windows\system32\Boot
2013-05-27 20:47:34 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-27 20:47:33 ----D---- C:\Windows\SYSWOW64\migration
2013-05-27 20:47:31 ----D---- C:\Windows\system32\migration
2013-05-27 20:47:30 ----D---- C:\Program Files\Internet Explorer
2013-05-27 20:47:23 ----D---- C:\Program Files\Windows Media Player
2013-05-27 20:47:23 ----D---- C:\Program Files (x86)\Windows Media Player
2013-05-27 20:47:14 ----D---- C:\Program Files\Windows Journal
2013-05-27 15:36:39 ----D---- C:\Windows\LiveKernelReports
2013-05-26 13:44:08 ----D---- C:\Windows\Logs
2013-05-26 12:47:38 ----D---- C:\Program Files\Common Files
2013-05-26 09:58:01 ----D---- C:\Windows\system32\Tasks
2013-05-26 00:06:44 ----D---- C:\Windows\system32\oobe
2013-05-26 00:06:44 ----D---- C:\Windows\Setup
2013-05-25 23:48:52 ----D---- C:\Windows\Tasks
2013-05-25 23:27:44 ----D---- C:\Windows\system32\restore
2013-05-25 23:27:14 ----SHD---- C:\Recovery
2013-05-25 23:27:14 ----D---- C:\Windows\system32\Recovery
2013-05-25 23:25:09 ----D---- C:\Windows\debug
2013-05-25 23:17:47 ----D---- C:\Windows\system32\CodeIntegrity
2013-05-25 23:12:39 ----D---- C:\Windows\system32\sysprep

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-05-09 189936]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-05-09 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-05-09 378432]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 64288]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552448]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-25 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-25 116648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-27 1255736]

-----------------EOF-----------------

Zdravím!

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Zdravím!

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Este dodam ze potom ako som chytil toho trojana mi uplne prestal ist comp,tak som preinstaloval win.ale bez zformatovania disku.




ComboFix 13-05-30.02 - Jakubko . 05. 2013 22:22:08.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.1790.930 [GMT 2:00]
Running from: c:\users\Jakubko\Downloads\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2013-04-28 to 2013-05-30 )))))))))))))))))))))))))))))))
.
.
2013-05-30 20:28 . 2013-05-30 20:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-05-30 19:34 . 2013-05-30 19:34 -------- d-----w- C:\rsit
2013-05-30 19:34 . 2013-05-30 19:34 -------- d-----w- c:\program files\trend micro
2013-05-29 21:51 . 2013-05-29 21:51 -------- d-----w- c:\programdata\YTD Video Downloader
2013-05-29 21:51 . 2013-05-29 21:51 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-05-29 21:51 . 2013-05-29 21:51 -------- d-----w- c:\program files (x86)\GreenTree Applications
2013-05-29 20:30 . 2013-05-29 20:30 -------- d-----w- c:\windows\system32\SPReview
2013-05-29 20:25 . 2013-05-29 20:26 -------- d-----w- c:\users\Anjelik
2013-05-28 16:51 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2FB5F64F-55F1-4B0E-A3C0-6D08A8876AE3}\mpengine.dll
2013-05-27 20:55 . 2013-05-27 20:55 -------- d-----w- c:\windows\system32\EventProviders
2013-05-27 18:56 . 2011-04-28 03:58 552448 ----a-w- c:\windows\system32\drivers\bthport.sys
2013-05-27 18:56 . 2011-04-28 03:58 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2013-05-27 18:47 . 2013-05-27 18:47 -------- d-----w- c:\windows\SysWow64\Wat
2013-05-27 18:47 . 2013-05-27 18:47 -------- d-----w- c:\windows\system32\Wat
2013-05-26 12:00 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2013-05-26 12:00 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2013-05-26 11:45 . 2009-11-25 10:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2013-05-26 11:45 . 2009-11-25 10:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2013-05-26 11:45 . 2009-11-25 10:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2013-05-26 11:45 . 2009-11-25 10:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2013-05-26 11:45 . 2009-11-25 10:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2013-05-26 11:45 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2013-05-26 11:45 . 2009-11-25 10:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-05-26 11:45 . 2009-11-25 10:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2013-05-26 11:45 . 2009-11-25 10:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2013-05-26 11:45 . 2009-11-25 10:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2013-05-26 11:44 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-05-26 11:27 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-05-26 11:27 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-05-26 11:27 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-05-26 11:27 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-05-26 11:27 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-05-26 11:27 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-05-26 11:22 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-05-26 11:22 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2013-05-26 11:22 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-05-26 11:22 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2013-05-26 11:22 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-05-26 10:47 . 2013-05-26 10:47 -------- d-----w- c:\program files\Common Files\Adobe
2013-05-26 10:43 . 2013-05-26 10:43 -------- d-----w- c:\program files\Adobe
2013-05-26 08:39 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-05-26 08:39 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2013-05-26 08:39 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2013-05-26 08:39 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2013-05-26 08:39 . 2013-02-12 15:37 3138048 ----a-w- c:\windows\system32\mstscax.dll
2013-05-26 08:39 . 2013-02-12 15:13 2691072 ----a-w- c:\windows\SysWow64\mstscax.dll
2013-05-26 08:39 . 2013-02-12 15:42 44032 ----a-w- c:\windows\system32\tsgqec.dll
2013-05-26 08:39 . 2013-02-12 15:31 158208 ----a-w- c:\windows\system32\aaclient.dll
2013-05-26 08:39 . 2013-02-12 15:07 131072 ----a-w- c:\windows\SysWow64\aaclient.dll
2013-05-26 08:39 . 2013-02-12 13:59 36864 ----a-w- c:\windows\SysWow64\tsgqec.dll
2013-05-26 08:39 . 2012-11-09 05:34 2048 ----a-w- c:\windows\system32\tzres.dll
2013-05-26 08:39 . 2012-11-09 04:49 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-05-26 08:38 . 2013-03-01 03:32 3150848 ----a-w- c:\windows\system32\win32k.sys
2013-05-26 08:38 . 2010-12-23 06:07 961024 ----a-w- c:\windows\system32\CPFilters.dll
2013-05-26 08:38 . 2010-12-23 06:07 1118720 ----a-w- c:\windows\system32\sbe.dll
2013-05-26 08:38 . 2010-12-23 06:02 259072 ----a-w- c:\windows\system32\mpg2splt.ax
2013-05-26 08:38 . 2010-12-23 05:28 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2013-05-26 08:38 . 2010-12-23 05:28 850432 ----a-w- c:\windows\SysWow64\sbe.dll
2013-05-26 08:38 . 2010-12-23 05:24 199680 ----a-w- c:\windows\SysWow64\mpg2splt.ax
2013-05-26 08:38 . 2010-08-26 05:27 148992 ----a-w- c:\windows\system32\t2embed.dll
2013-05-26 08:38 . 2010-08-26 04:39 109056 ----a-w- c:\windows\SysWow64\t2embed.dll
2013-05-26 08:37 . 2011-10-26 05:22 1572864 ----a-w- c:\windows\system32\quartz.dll
2013-05-26 08:37 . 2011-10-26 04:28 1328640 ----a-w- c:\windows\SysWow64\quartz.dll
2013-05-26 08:37 . 2011-10-26 05:22 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-05-26 08:37 . 2011-10-26 04:28 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-05-26 08:35 . 2010-05-05 07:37 483840 ----a-w- c:\windows\system32\StructuredQuery.dll
2013-05-26 08:35 . 2010-05-05 06:46 363520 ----a-w- c:\windows\SysWow64\StructuredQuery.dll
2013-05-26 08:35 . 2011-07-09 02:44 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2013-05-26 08:35 . 2011-05-04 02:51 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2013-05-26 08:35 . 2011-05-04 02:51 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2013-05-26 08:35 . 2011-11-17 07:12 395776 ----a-w- c:\windows\system32\webio.dll
2013-05-26 08:35 . 2011-11-17 05:39 314368 ----a-w- c:\windows\SysWow64\webio.dll
2013-05-26 08:35 . 2009-09-03 07:36 1975296 ----a-w- c:\windows\system32\CertEnroll.dll
2013-05-26 08:35 . 2009-09-03 07:04 1320960 ----a-w- c:\windows\SysWow64\CertEnroll.dll
2013-05-26 08:31 . 2013-01-04 05:37 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-05-26 08:30 . 2012-09-25 22:39 95744 ----a-w- c:\windows\system32\synceng.dll
2013-05-26 08:30 . 2012-09-25 21:55 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2013-05-26 08:30 . 2013-03-02 05:43 9377280 ----a-w- c:\windows\system32\mshtml.dll
2013-05-26 08:30 . 2013-03-02 05:42 12405760 ----a-w- c:\windows\system32\ieframe.dll
2013-05-26 08:28 . 2012-06-02 05:27 340992 ----a-w- c:\windows\system32\schannel.dll
2013-05-26 08:27 . 2012-03-17 07:55 75632 ----a-w- c:\windows\system32\drivers\partmgr.sys
2013-05-26 08:26 . 2012-04-26 05:28 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2013-05-26 08:26 . 2012-04-26 05:34 76288 ----a-w- c:\windows\system32\rdpwsx.dll
2013-05-26 08:26 . 2012-04-26 05:34 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2013-05-26 08:22 . 2011-04-29 03:13 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2013-05-26 08:21 . 2010-06-19 06:23 37376 ----a-w- c:\windows\SysWow64\rtutils.dll
2013-05-26 08:20 . 2009-10-31 06:34 2870272 ----a-w- c:\windows\explorer.exe
2013-05-26 08:19 . 2011-12-16 08:42 634368 ----a-w- c:\windows\system32\msvcrt.dll
2013-05-26 08:19 . 2011-12-16 07:59 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2013-05-26 08:18 . 2011-10-15 06:25 723456 ----a-w- c:\windows\system32\EncDec.dll
2013-05-26 08:18 . 2011-10-15 05:48 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2013-05-26 08:18 . 2012-04-02 05:26 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-05-26 08:18 . 2012-04-02 05:24 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-05-26 08:18 . 2012-04-02 05:24 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-05-26 08:18 . 2012-04-02 05:24 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-05-26 08:18 . 2012-04-02 04:40 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-05-26 08:15 . 2013-03-19 06:19 5497688 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-26 08:15 . 2013-03-19 05:06 3958120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-05-26 08:15 . 2013-03-19 05:54 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-05-26 08:15 . 2013-03-19 05:06 3902312 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-05-26 08:15 . 2013-03-19 03:19 112640 ----a-w- c:\windows\system32\smss.exe
2013-05-26 08:15 . 2013-03-19 04:53 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-05-26 08:15 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-05-26 08:13 . 2012-06-02 05:25 182272 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-26 08:13 . 2012-06-02 05:25 1462784 ----a-w- c:\windows\system32\crypt32.dll
2013-05-26 08:13 . 2012-06-02 05:25 140288 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-26 08:13 . 2012-06-02 04:45 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-05-26 08:13 . 2012-06-02 04:45 1157632 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-05-26 08:13 . 2012-06-02 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-05-26 07:58 . 2013-05-09 08:59 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-26 07:58 . 2013-05-09 08:59 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-26 07:58 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-26 07:58 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-26 07:58 . 2013-05-09 08:59 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-26 07:58 . 2013-05-09 08:59 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-26 07:58 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-26 07:57 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-26 07:57 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-26 07:55 . 2013-05-26 07:55 -------- d-----w- c:\program files\WinRAR
2013-05-26 07:48 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-05-26 07:47 . 2013-05-26 07:47 -------- d-----w- c:\program files\AVAST Software
2013-05-26 07:47 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2013-05-26 07:47 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-05-26 07:46 . 2013-05-26 07:47 -------- d-----w- c:\programdata\AVAST Software
2013-05-25 22:07 . 2013-05-25 21:27 -------- d-----w- c:\windows\Panther
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"googletalk"="c:\users\Jakubko\AppData\Roaming\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-05-27 1255736]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 203264]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-05-25 21:49 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.94\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-05-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-25 21:48]
.
2013-05-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-25 21:48]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 217.119.113.244 217.119.113.245
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-05-30 22:30:47
ComboFix-quarantined-files.txt 2013-05-30 20:30
.
Pre-Run: 265 793 679 360 bytes free
Post-Run: 267 027 202 048 bytes free
.
- - End Of File - - 7AD971EFB71EFDAF807A353FF47C0727

Je to vidět, log je OK. Zkuste PC vyčistit CCleanerem: http://forum.viry.cz/viewtopic.php?f=46&t=7478 . Zamrzání se vyskytuje nahodile, nebo s nějakou konkrétní aplikací?

Len tak nahodne,zostane seda obrazovka,pripadne nejake pasiky a musim ho natvrdo restart.Par krat zamrzol hned pri starte.Skusim este cleaner

A přeinstalujte ovladač gr. karty.