VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Kontrola

https://forum.viry.cz:443/viewtopic.php?t=130906

Stránka 1 z 1

Kontrola

Napsal: 14 čer 2013 10:42
od Dahed
Prosím o kontrolu, děkuju.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Dahed at 2013-06-14 11:39:28
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 299 GB (63%) free of 477 GB
Total RAM: 4095 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:39:32, on 14.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Xfire\Xfire.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Program Files\trend micro\Dahed.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=1198 ... 1D92EC35F1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} (Creative Software AutoUpdate 2) - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BrowserProtect - Unknown owner - C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9339 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
taskeng.exe {00290143-A310-4CA5-B9EB-0D24AD13CF20}
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe" /PROTECT
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
"C:\Windows\System32\rundll32.exe" SPIRunE.dll,RunDLLEntry
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Xfire\Xfire.exe"
"C:\Program Files (x86)\Xfire\xfire64.exe" xfire64.exe /pid 3340
"C:\Program Files (x86)\Steam\Steam.exe"
taskmgr.exe /3
"C:\Program Files (x86)\Xfire\xfire64.exe" xfire64.exe /pid 3340
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4776.c7b0200.1568520179 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4776 "\\.\pipe\gecko-crash-server-pipe.4776" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe" --proxy-stub-channel=Flash4692.6815BDE0.26121 --host-broker-channel=Flash4692.6815BDE0.11280 --host-pid=4692 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe" --channel=5116.001CF3EC.1574072242 --proxy-stub-channel=Flash4692.6815BDE0.26121 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll" --host-npapi-version=27 --type=renderer
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Dahed\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey D40B3F66-8E59-2C8B-541E-9F517D5381E3 -Reinvoke
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.delta-search.com/?affID=1198 ... 1D92EC35F1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml

C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\extensions\
{0b38152b-1b20-484d-a11f-5e04a9b0661f}
{3d7eb24f-2740-49df-8937-200b1cc08f8a}

C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\searchplugins\
aol-search.xml
babylon.xml
BrowserProtect.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll [2013-03-25 2089520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll [2013-03-25 2089520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 1281512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18642024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2013-06-07 1641896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 442880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"VolPanel"=C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2007-02-28 180224]
"SPIRunE"=Rundll32 SPIRunE.dll,RunDLLEntry []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2012-06-28 74752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.XFR1"=xfcodec64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2013-06-14 11:39:28 ----D---- C:\rsit
2013-06-14 11:39:28 ----D---- C:\Program Files\trend micro
2013-06-12 23:42:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-12 23:42:41 ----A---- C:\Windows\system32\ieui.dll
2013-06-12 23:42:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-12 23:42:40 ----A---- C:\Windows\system32\iesetup.dll
2013-06-12 23:42:39 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-12 23:42:39 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-12 23:42:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-12 23:42:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-12 23:42:39 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-12 23:42:39 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-12 23:42:39 ----A---- C:\Windows\system32\iernonce.dll
2013-06-12 23:42:39 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-12 23:42:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-12 23:42:38 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-12 23:42:38 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-12 23:42:38 ----A---- C:\Windows\system32\jscript.dll
2013-06-12 23:42:38 ----A---- C:\Windows\system32\iertutil.dll
2013-06-12 23:42:37 ----A---- C:\Windows\system32\jscript9.dll
2013-06-12 23:42:36 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-12 23:42:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-12 23:42:35 ----A---- C:\Windows\system32\urlmon.dll
2013-06-12 23:42:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-12 23:42:34 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-12 23:42:34 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-12 23:42:33 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-12 23:42:33 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 23:42:32 ----A---- C:\Windows\system32\ieframe.dll
2013-06-12 23:42:31 ----A---- C:\Windows\system32\mshtml.dll
2013-06-12 23:42:29 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-12 22:42:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-12 22:42:32 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-12 22:42:32 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 22:42:29 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-06-12 22:42:29 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 22:42:26 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-12 22:42:26 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 22:42:14 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-12 22:42:14 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-06-12 22:42:14 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 22:42:14 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 22:42:14 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 22:42:14 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 22:42:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-12 22:42:13 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-12 22:42:13 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 22:42:12 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-06-12 22:42:07 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-06-12 22:42:07 ----A---- C:\Windows\system32\d3d11.dll
2013-06-09 22:50:26 ----D---- C:\Soubor.1828.V1
2013-06-09 22:46:59 ----D---- C:\vv
2013-06-05 14:54:49 ----D---- C:\Users\Dahed\AppData\Roaming\Awesomium
2013-06-01 22:40:45 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2013-05-21 13:07:22 ----D---- C:\Program Files (x86)\OpenAL
2013-05-21 10:56:40 ----A---- C:\Windows\game.ini
2013-05-18 16:02:14 ----D---- C:\ProgramData\RELOADED
2013-05-15 14:08:52 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 14:08:52 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 14:08:52 ----A---- C:\Windows\system32\authui.dll
2013-05-15 14:08:51 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-15 14:08:51 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-15 14:08:51 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-15 14:08:51 ----A---- C:\Windows\system32\consent.exe
2013-05-15 14:08:51 ----A---- C:\Windows\system32\appinfo.dll
2013-05-15 14:08:44 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 14:08:44 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 14:08:44 ----A---- C:\Windows\system32\cdd.dll
2013-05-15 14:08:43 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 14:08:43 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 14:08:43 ----A---- C:\Windows\system32\win32k.sys
2013-05-14 16:53:15 ----D---- C:\Users\Dahed\AppData\Roaming\The Creative Assembly
2013-05-06 15:42:21 ----D---- C:\Windows\SYSWOW64\searchplugins
2013-05-06 15:42:21 ----D---- C:\Windows\SYSWOW64\Extensions
2013-05-05 18:39:10 ----D---- C:\ProgramData\Steam
2013-04-27 11:45:55 ----D---- C:\Program Files (x86)\Rockstar Games
2013-04-26 16:52:35 ----D---- C:\ProgramData\Winamp Toolbar
2013-04-26 16:52:35 ----D---- C:\Program Files (x86)\Winamp Toolbar
2013-04-26 16:51:57 ----D---- C:\Users\Dahed\AppData\Roaming\Winamp
2013-04-26 16:51:57 ----D---- C:\Program Files (x86)\Winamp
2013-04-25 15:00:27 ----D---- C:\Program Files (x86)\Google
2013-04-24 14:10:49 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-18 16:21:27 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-04-18 16:21:27 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-04-18 16:21:27 ----A---- C:\Windows\SYSWOW64\java.exe
2013-04-11 08:41:34 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-11 08:41:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-11 08:41:31 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-11 08:41:31 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-11 08:41:30 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-11 08:41:30 ----A---- C:\Windows\system32\smss.exe
2013-04-11 08:41:30 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-07 19:14:39 ----D---- C:\Users\Dahed\AppData\Roaming\Omerta
2013-04-07 19:09:15 ----D---- C:\ProgramData\Package Cache
2013-03-31 21:48:47 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-03-31 21:48:47 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-03-31 21:48:47 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-03-31 21:48:47 ----A---- C:\Windows\system32\nvopencl.dll
2013-03-31 21:48:47 ----A---- C:\Windows\system32\nvoglv64.dll
2013-03-31 21:48:47 ----A---- C:\Windows\system32\nvhdap64.dll
2013-03-31 21:48:47 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-03-31 21:48:47 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-03-31 21:48:46 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-03-31 21:48:46 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-03-31 21:48:46 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-03-31 21:48:46 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-03-31 21:48:46 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvinitx.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvdispgenco6431422.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvdispco6431422.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvcuvid.dll
2013-03-31 21:48:46 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-03-31 21:48:45 ----A---- C:\Windows\system32\nvcuda.dll
2013-03-31 21:48:44 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-03-31 21:48:44 ----A---- C:\Windows\system32\nvcompiler.dll
2013-03-31 19:49:54 ----D---- C:\ProgramData\Solidshield
2013-03-29 18:51:09 ----D---- C:\ProgramData\BrowserProtect
2013-03-29 18:50:49 ----D---- C:\Users\Dahed\AppData\Roaming\Babylon
2013-03-29 18:50:49 ----D---- C:\ProgramData\Babylon
2013-03-29 18:49:57 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-03-29 18:49:51 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-03-27 20:49:43 ----D---- C:\Program Files (x86)\TeamViewer
2013-03-25 18:07:28 ----D---- C:\Program Files (x86)\Czech Soccer Manager 2002 FE
2013-03-24 17:59:53 ----D---- C:\Users\Dahed\AppData\Roaming\NationRed
2013-03-23 16:15:24 ----A---- C:\Windows\SYSWOW64\pbsvc_bc2.exe
2013-03-22 09:08:01 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-03-22 09:08:00 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-22 09:08:00 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-22 09:08:00 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-03-22 09:08:00 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-22 09:08:00 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-03-22 09:08:00 ----A---- C:\Windows\system32\elshyph.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-22 09:07:59 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-22 09:07:58 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-22 09:07:57 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\wextract.exe
2013-03-22 09:07:56 ----A---- C:\Windows\system32\webcheck.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\url.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\msrating.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\msls31.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\inseng.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-22 09:07:56 ----A---- C:\Windows\system32\icardie.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-22 09:07:56 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\vbscript.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-22 09:07:55 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\occache.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\mshta.exe
2013-03-22 09:07:55 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-22 09:07:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\imgutil.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\iexpress.exe
2013-03-22 09:07:55 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-22 09:07:55 ----A---- C:\Windows\system32\iepeers.dll
2013-03-22 09:07:55 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-22 09:07:54 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-21 08:17:45 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-21 06:10:18 ----A---- C:\Windows\SYSWOW64\xfcodec.dll
2013-03-21 06:10:16 ----A---- C:\Windows\system32\xfcodec64.dll
2013-03-20 12:25:55 ----D---- C:\Users\Dahed\AppData\Roaming\QIP
2013-03-16 20:14:15 ----A---- C:\Windows\SYSWOW64\Access.dat
2013-03-16 20:10:12 ----D---- C:\Users\Dahed\AppData\Roaming\Tunngle
2013-03-16 20:10:12 ----A---- C:\Windows\system32\drivers\tap0901t.sys

======List of files/folders modified in the last 3 months======

2013-06-14 11:39:28 ----RD---- C:\Program Files
2013-06-14 11:39:22 ----D---- C:\Windows\Temp
2013-06-14 11:28:30 ----D---- C:\Windows\system32\config
2013-06-14 11:15:32 ----D---- C:\Users\Dahed\AppData\Roaming\Xfire
2013-06-14 11:15:11 ----D---- C:\Program Files (x86)\Steam
2013-06-14 11:11:29 ----D---- C:\Windows\System32
2013-06-14 11:11:29 ----D---- C:\Windows\inf
2013-06-14 11:11:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-14 11:07:00 ----D---- C:\Windows\system32\Tasks
2013-06-14 11:06:53 ----D---- C:\ProgramData\NVIDIA
2013-06-14 11:03:46 ----D---- C:\Windows\Prefetch
2013-06-14 09:37:44 ----D---- C:\Users\Dahed\AppData\Roaming\Skype
2013-06-14 07:54:57 ----D---- C:\Windows\rescache
2013-06-13 23:57:38 ----D---- C:\Users\Dahed\AppData\Roaming\vlc
2013-06-13 12:19:03 ----D---- C:\games
2013-06-13 08:05:16 ----D---- C:\Windows\winsxs
2013-06-13 08:05:14 ----D---- C:\Windows\Panther
2013-06-13 08:03:46 ----D---- C:\Windows\SysWOW64
2013-06-13 08:03:46 ----D---- C:\Windows\system32\drivers
2013-06-13 08:03:46 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-13 08:03:45 ----D---- C:\Program Files\Internet Explorer
2013-06-13 08:03:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-13 08:03:44 ----D---- C:\Windows\system32\cs-CZ
2013-06-12 23:44:40 ----SHD---- C:\Windows\Installer
2013-06-12 23:44:38 ----D---- C:\ProgramData\Microsoft Help
2013-06-12 23:43:05 ----D---- C:\Windows\debug
2013-06-12 23:43:04 ----A---- C:\Windows\system32\MRT.exe
2013-06-12 23:42:52 ----D---- C:\Windows\system32\catroot2
2013-06-12 23:42:52 ----D---- C:\Windows\system32\catroot
2013-06-12 23:41:42 ----SHD---- C:\System Volume Information
2013-06-12 10:08:14 ----D---- C:\Users\Dahed\AppData\Roaming\DAEMON Tools Lite
2013-06-12 09:28:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-11 23:23:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-06-11 23:11:21 ----D---- C:\Windows
2013-06-11 08:28:03 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-06-08 13:42:13 ----D---- C:\ProgramData\Xfire
2013-06-06 14:50:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-06 14:33:11 ----D---- C:\ProgramData\Blizzard Entertainment
2013-06-06 14:32:16 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-06-06 14:29:50 ----D---- C:\Windows\Logs
2013-06-03 20:53:11 ----D---- C:\Windows\system32\wdi
2013-06-01 22:43:43 ----RSD---- C:\Windows\assembly
2013-05-24 22:29:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-24 11:00:32 ----RD---- C:\Program Files (x86)
2013-05-23 12:59:48 ----D---- C:\Windows\SYSWOW64\directx
2013-05-21 13:07:22 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-05-21 13:07:22 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-05-21 13:07:22 ----A---- C:\Windows\system32\wrap_oal.dll
2013-05-21 13:07:22 ----A---- C:\Windows\system32\OpenAL32.dll
2013-05-21 13:04:16 ----D---- C:\Windows\Minidump
2013-05-18 16:02:14 ----HD---- C:\ProgramData
2013-05-16 14:35:16 ----D---- C:\Windows\Microsoft.NET
2013-05-16 14:04:47 ----D---- C:\Windows\AppPatch
2013-05-13 17:43:21 ----D---- C:\Users\Dahed\AppData\Roaming\Wargaming.net
2013-05-02 17:29:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-05-01 15:56:16 ----D---- C:\Program Files\CCleaner
2013-04-26 16:52:30 ----D---- C:\Program Files (x86)\Common Files
2013-04-25 15:01:00 ----D---- C:\Windows\Tasks
2013-04-24 15:46:12 ----SD---- C:\Users\Dahed\AppData\Roaming\Microsoft
2013-04-19 19:04:30 ----D---- C:\ProgramData\Adobe
2013-04-18 16:21:27 ----D---- C:\Program Files (x86)\Java
2013-04-07 00:33:49 ----D---- C:\ProgramData\Skype
2013-04-07 00:33:48 ----RD---- C:\Program Files (x86)\Skype
2013-03-31 21:51:29 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-03-31 21:51:02 ----D---- C:\Windows\system32\DriverStore
2013-03-31 21:49:37 ----D---- C:\Program Files\NVIDIA Corporation
2013-03-31 21:33:32 ----D---- C:\Users\Dahed\AppData\Roaming\Origin
2013-03-31 21:11:54 ----D---- C:\Program Files (x86)\Origin
2013-03-27 20:49:48 ----RSD---- C:\Windows\Fonts
2013-03-22 12:11:33 ----D---- C:\ProgramData\Origin
2013-03-22 09:39:56 ----D---- C:\Program Files (x86)\Xfire
2013-03-22 09:38:50 ----D---- C:\Windows\SYSWOW64\migration
2013-03-22 09:38:50 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-22 09:38:47 ----D---- C:\Windows\system32\migration
2013-03-22 09:38:47 ----D---- C:\Windows\system32\en-US
2013-03-22 09:38:47 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 07:53:06 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-03-15 07:53:06 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-03-15 07:53:06 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-03-15 07:53:06 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-03-15 07:53:06 ----A---- C:\Windows\system32\nvapi64.dll
2013-03-15 06:16:18 ----A---- C:\Windows\system32\nvsvc64.dll
2013-03-15 06:16:17 ----A---- C:\Windows\system32\nvcpl.dll
2013-03-15 06:16:10 ----A---- C:\Windows\system32\nvvsvc.exe
2013-03-15 06:16:10 ----A---- C:\Windows\system32\nvsvcr.dll
2013-03-15 06:16:10 ----A---- C:\Windows\system32\nvshext.dll
2013-03-15 06:16:10 ----A---- C:\Windows\system32\nvmctray.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 230320]
R0 NBVol;Nero Backup Volume Filter Driver; C:\Windows\system32\DRIVERS\NBVol.sys [2011-07-13 72240]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; C:\Windows\system32\DRIVERS\NBVolUp.sys [2011-07-13 15920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-29 283200]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
R3 t3;Sound Blaster X-Fi Xtreme Audio (Vista); C:\Windows\system32\drivers\t3.sys [2007-03-02 635904]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 BrowserProtect;BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-06-03 3085264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 22056]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-09-23 641832]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-06-11 76888]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-25 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-25 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-24 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-05-04 543656]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-20 1255736]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: Kontrola

Napsal: 14 čer 2013 21:38
od Roli
Zdravím, stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo dole klikni na Search.

Po té proběhne sken a po jeho skončení na Tebe vypadne log, který mi sem zkopíruj.

Re: Kontrola

Napsal: 16 čer 2013 07:01
od Dahed
# AdwCleaner v2.303 - Log vytvooen 16/06/2013 v 08:00:58
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Professional Service Pack 1 (64 bits)
# Uživatel : Dahed - DAHED-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Dahed\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****

Nalezeno : BrowserProtect

***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Common Files\Software Update Utility
Složka Nalezeno : C:\Program Files (x86)\Winamp Toolbar
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\BrowserProtect
Složka Nalezeno : C:\ProgramData\Winamp Toolbar
Složka Nalezeno : C:\Users\Dahed\AppData\Local\Winamp Toolbar
Složka Nalezeno : C:\Users\Dahed\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
Složka Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\WinampToolbarData
Složka Nalezeno : C:\Users\Dahed\AppData\Roaming\OpenCandy
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Soubor Nalezeno : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Soubor Nalezeno : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Soubor Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\bprotector_extensions.sqlite
Soubor Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\bprotector_prefs.js
Soubor Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\searchplugins\Babylon.xml
Soubor Nalezeno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\searchplugins\BrowserProtect.xml

***** [Registry] *****

Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
Klíe Nalezeno : HKCU\Software\BabylonToolbar
Klíe Nalezeno : HKCU\Software\DataMngr
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
Klíe Nalezeno : HKCU\Software\Winamp Toolbar
Klíe Nalezeno : HKCU\Software\586888bbd6fea45
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdate
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{507591C2-2F4E-46A7-92D6-E6CFF82E5F26}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.Downloader
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.Downloader.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper
Klíe Nalezeno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1
Klíe Nalezeno : HKLM\Software\DataMngr
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Nalezeno : HKLM\Software\Winamp Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\586888bbd6fea45
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66DD22B9-6521-4B05-97DB-0EBC00B1DA5D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8C2644D-BF72-4A89-A88C-D85F565F2F46}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66DD22B9-6521-4B05-97DB-0EBC00B1DA5D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
Klíe Nalezeno : HKU\S-1-5-21-2395776706-4025958055-4037763021-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16611

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119816&tt=1 ... 1D92EC35F1
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www.delta-search.com/?affID=119816&tt=1 ... 1D92EC35F1

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\prefs.js

Nalezeno : user_pref("aol_toolbar.surf.date", "73");
Nalezeno : user_pref("aol_toolbar.surf.lastDate", "16");
Nalezeno : user_pref("aol_toolbar.surf.lastMonth", "5");
Nalezeno : user_pref("aol_toolbar.surf.lastYear", "2013");
Nalezeno : user_pref("aol_toolbar.surf.month", "3245");
Nalezeno : user_pref("aol_toolbar.surf.prevMonth", "10182");
Nalezeno : user_pref("aol_toolbar.surf.total", "14516");
Nalezeno : user_pref("aol_toolbar.surf.week", "73");
Nalezeno : user_pref("aol_toolbar.surf.year", "14465");
Nalezeno : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo3&bab[...]
Nalezeno : user_pref("avg.install.userSPSettings", "Delta Search");
Nalezeno : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119816&tt=1 ... absrc=NT_s[...]
Nalezeno : user_pref("browser.search.order.1", "Delta Search");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo3&babsr[...]
Nalezeno : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_466[...]
Nalezeno : user_pref("winamp_toolbar.curtain.congrats", "none");
Nalezeno : user_pref("winamp_toolbar.firsttime.showwindow", false);
Nalezeno : user_pref("winamp_toolbar.guid", "{BFF1104F-83D6-70A3-4589-429EFCCBA4B9}");
Nalezeno : user_pref("winamp_toolbar.homepageprotection.enabled", false);
Nalezeno : user_pref("winamp_toolbar.install.distroid", "winamp");
Nalezeno : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.20.9397");
Nalezeno : user_pref("winamp_toolbar.install.lid", "");
Nalezeno : user_pref("winamp_toolbar.install.mtmhp", "");
Nalezeno : user_pref("winamp_toolbar.install.ncid", "");
Nalezeno : user_pref("winamp_toolbar.metrics.activestampdate", "16");
Nalezeno : user_pref("winamp_toolbar.metrics.activestampmonth", "5");
Nalezeno : user_pref("winamp_toolbar.metrics.activestampyear", "2013");
Nalezeno : user_pref("winamp_toolbar.metrics.log", false);
Nalezeno : user_pref("winamp_toolbar.metrics.originalDate", "25");
Nalezeno : user_pref("winamp_toolbar.metrics.originalHours", "22");
Nalezeno : user_pref("winamp_toolbar.metrics.originalMinutes", "0");
Nalezeno : user_pref("winamp_toolbar.metrics.originalMonth", "4");
Nalezeno : user_pref("winamp_toolbar.metrics.originalSeconds", "0");
Nalezeno : user_pref("winamp_toolbar.metrics.originalYear", "2013");
Nalezeno : user_pref("winamp_toolbar.relatednews.enabled", false);
Nalezeno : user_pref("winamp_toolbar.remote.publish.xml", "1371362395338");
Nalezeno : user_pref("winamp_toolbar.search.button", true);
Nalezeno : user_pref("winamp_toolbar.search.cid", "26-04-2013");
Nalezeno : user_pref("winamp_toolbar.search.instd", "06618591A60A43099F6CA63681AA175E");
Nalezeno : user_pref("winamp_toolbar.search.oid", "25-04-2013");
Nalezeno : user_pref("winamp_toolbar.search.placement", "left");
Nalezeno : user_pref("winamp_toolbar.search.populateoncomplete", false);
Nalezeno : user_pref("winamp_toolbar.search.savehistory", false);
Nalezeno : user_pref("winamp_toolbar.search.searchtype", "web");
Nalezeno : user_pref("winamp_toolbar.search.source", "winamp-ff");
Nalezeno : user_pref("winamp_toolbar.searchprotection.enabled", false);
Nalezeno : user_pref("winamp_toolbar.skin.custom", true);
Nalezeno : user_pref("winamp_toolbar.upgrade.showwindow", false);
Nalezeno : user_pref("winamp_toolbar.weather.degc", "21");
Nalezeno : user_pref("winamp_toolbar.weather.degf", "69");
Nalezeno : user_pref("winamp_toolbar.weather.image", "chrome://winamptoolbar/skin/weather/33_n.png");
Nalezeno : user_pref("winamp_toolbar.weather.locationid", "USNY0996");
Nalezeno : user_pref("winamp_toolbar.weather.metric", true);
Nalezeno : user_pref("winamp_toolbar.weather.tooltip", "New York , NY : Mostly Clear");
Nalezeno : user_pref("winamp_toolbar.weather.update", "1371362395339");
Nalezeno : user_pref("winamp_toolbar.winamp.artist", "");
Nalezeno : user_pref("winamp_toolbar.winamp.button.focus", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.forward", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.open", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.pause", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.play", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.rewind", true);
Nalezeno : user_pref("winamp_toolbar.winamp.button.stop", false);
Nalezeno : user_pref("winamp_toolbar.winamp.button.volume", true);
Nalezeno : user_pref("winamp_toolbar.winamp.ticker.show", true);
Nalezeno : user_pref("winamp_toolbar.winamp.title", "-999999");
Nalezeno : user_pref("winamp_toolbar.winamp.volume", "0");

-\\ Google Chrome v27.0.1453.110

Soubor : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [14762 octets] - [16/06/2013 08:00:58]

########## EOF - C:\AdwCleaner[R1].txt - [14823 octets] ##########

Re: Kontrola

Napsal: 16 čer 2013 21:44
od Roli
Znovu spusť AdwCleaner ale tentokrát klikni na Delete,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té na Tebe opět vypadne log který mi sem zkopíruj.

Re: Kontrola

Napsal: 17 čer 2013 19:58
od Dahed
# AdwCleaner v2.303 - Log vytvooen 17/06/2013 v 20:55:05
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Professional Service Pack 1 (64 bits)
# Uživatel : Dahed - DAHED-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Dahed\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****

Zastaveno & vymazáno : BrowserProtect

***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\Common Files\Software Update Utility
Složka Vymazáno : C:\ProgramData\Babylon
Složka Vymazáno : C:\Users\Dahed\AppData\Roaming\Babylon
Složka Vymazáno : C:\Users\Dahed\AppData\Roaming\OpenCandy
Soubor Vymazáno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Soubor Vymazáno : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Soubor Vymazáno : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Soubor Vymazáno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\bprotector_extensions.sqlite
Soubor Vymazáno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\bprotector_prefs.js
Soubor Vymazáno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\searchplugins\Babylon.xml
Soubor Vymazáno : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\searchplugins\BrowserProtect.xml
Vymazáno poi restartu : C:\ProgramData\BrowserProtect

***** [Registry] *****

Data Vymazáno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Klíe Vymazáno : HKCU\Software\BabylonToolbar
Klíe Vymazáno : HKCU\Software\DataMngr
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Klíe Vymazáno : HKCU\Software\586888bbd6fea45
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Klíe Vymazáno : HKLM\SOFTWARE\Classes\dnUpdate
Klíe Vymazáno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Klíe Vymazáno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Klíe Vymazáno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Klíe Vymazáno : HKLM\Software\DataMngr
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\586888bbd6fea45
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66DD22B9-6521-4B05-97DB-0EBC00B1DA5D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
Klíe Vymazáno : HKU\S-1-5-21-2395776706-4025958055-4037763021-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16611

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119816&tt=1 ... 1D92EC35F1 --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Dahed\AppData\Roaming\Mozilla\Firefox\Profiles\phmh3u4m.default\prefs.js

Vymazáno : user_pref("aol_toolbar.surf.date", "285");
Vymazáno : user_pref("aol_toolbar.surf.lastDate", "16");
Vymazáno : user_pref("aol_toolbar.surf.lastMonth", "5");
Vymazáno : user_pref("aol_toolbar.surf.lastYear", "2013");
Vymazáno : user_pref("aol_toolbar.surf.month", "3457");
Vymazáno : user_pref("aol_toolbar.surf.prevMonth", "10182");
Vymazáno : user_pref("aol_toolbar.surf.total", "14728");
Vymazáno : user_pref("aol_toolbar.surf.week", "285");
Vymazáno : user_pref("aol_toolbar.surf.year", "14677");
Vymazáno : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo3&bab[...]
Vymazáno : user_pref("avg.install.userSPSettings", "Delta Search");
Vymazáno : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119816&tt=1 ... absrc=NT_s[...]
Vymazáno : user_pref("browser.search.order.1", "Delta Search");
Vymazáno : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo3&babsr[...]

-\\ Google Chrome v27.0.1453.110

Soubor : C:\Users\Dahed\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [14867 octets] - [16/06/2013 08:00:58]
AdwCleaner[S1].txt - [6478 octets] - [17/06/2013 20:55:05]

########## EOF - C:\AdwCleaner[S1].txt - [6538 octets] ##########

Re: Kontrola

Napsal: 18 čer 2013 21:21
od Roli
Bezva uklizeno, jaký je stav PC ?

Re: Kontrola

Napsal: 19 čer 2013 14:30
od Dahed
Nemuzu si stezovat, dobry.
Dekuju moc ;)

Re: Kontrola

Napsal: 19 čer 2013 18:17
od Roli
Není zač a :closed:
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz