Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kdyby měl někdo chuť na preventivku...

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Uživatelský avatar
krater
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 128
Registrován: 19 úno 2012 21:23

Kdyby měl někdo chuť na preventivku...

#1 Příspěvek od krater »

Dobrý den, pokud by byla chvilka Vašeho času a někdo mi zkouknul log, udělalo by mi to radost:)
Předem děkuji, Krater
---------------------------------------------------------------------------------------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by User at 2012-03-19 19:28:42
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 181 GB (70%) free of 257 GB
Total RAM: 3000 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:28:45, on 19.3.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\TrueCrypt\TrueCrypt.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;mbank.cz
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = User\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\SysWOW64\rpcnet.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9211 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3624336
\??\C:\Windows\system32\conhost.exe "13273389231636718990-1161230377651173874-17514784961452106582-1340989646-1707552993
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\AEADISRV.EXE
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\SysWOW64\rpcnet.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2028
"taskhost.exe"
"c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a929ae96-b12a-41a0-bd53-0fe15d2eaedf -SystemEventPortName:HostProcess-b5b6c900-7587-4aa2-90f5-984336265a04 -IoCancelEventPortName:HostProcess-e79eaf8a-e0fc-4bdc-bd50-8245f1e50444 -NonStateChangingEventPortName:HostProcess-0e5d8f39-8fa3-4d53-8923-389043ca952b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ca04d518-de3c-4614-b246-03497223dae2
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe" /Start
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\TrueCrypt\TrueCrypt.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\servicing\TrustedInstaller.exe
taskeng.exe {D8F7AEE2-2523-47A7-B5AC-D04F69A268D4}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 80FC8CA3-906B-A76B-98D3-D84F07048E92 -Reinvoke
"C:\Users\User\Downloads\Skenery\RSIT x64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-146033841-32980914-428312729-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-146033841-32980914-428312729-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qlixbhi7.default

prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30, firesheep@codebutler.com:0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.26"
prefs.js - "keyword.URL" - "http://www.google.cz/#hl=cs&source=hp&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.2.1]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qlixbhi7.default\extensions\
firesheep@codebutler.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-01-14 347424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-01-14 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-01-14 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-01-14 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 1436736]
"SoundMAX"=C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-02 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-02 387608]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-02 365592]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2010-01-08 186904]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 2174760]
"Zoner (neodebírat)"=C:\Users\User\Documents\Osobní\Programy\zoner.bat [2011-11-13 60]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Clownfish"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-03-16 26565208]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"QlbCtrl.exe"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-11 287800]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-07-28 258560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-03-17 19:32:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-03-17 19:32:39 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-03-17 19:32:38 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-03-17 19:28:28 ----A---- C:\Windows\system32\win32k.sys
2012-03-17 19:28:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-03-17 19:28:24 ----A---- C:\Windows\system32\DWrite.dll
2012-03-17 19:27:54 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-03-17 19:27:53 ----A---- C:\Windows\system32\rdpwsx.dll
2012-03-17 19:27:53 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-03-17 19:27:44 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-03-17 19:27:44 ----A---- C:\Windows\system32\rdpcore.dll
2012-03-17 19:27:44 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-03-17 19:27:44 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-03-09 20:18:26 ----D---- C:\Program Files (x86)\Postal Plus
2012-03-05 22:56:41 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-03-05 16:40:48 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-03-05 16:40:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-03-05 16:40:48 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-03-05 16:40:48 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-03-05 16:40:45 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-03-05 16:40:45 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-03-03 16:26:34 ----D---- C:\Program Files\Linksys
2012-03-03 16:25:02 ----D---- C:\ProgramData\Pure Networks
2012-03-02 16:26:52 ----D---- C:\ProgramData\CanonIJ
2012-03-02 16:17:59 ----HD---- C:\ProgramData\CanonIJMyPrinter
2012-03-02 16:14:45 ----D---- C:\Program Files\Canon
2012-03-02 15:52:36 ----D---- C:\ProgramData\CanonIJPLM
2012-03-02 15:52:26 ----D---- C:\ProgramData\Canon IJ Network Tool
2012-03-02 15:52:15 ----A---- C:\Windows\SYSWOW64\CNHMCA.dll
2012-03-02 15:52:15 ----A---- C:\Windows\SYSWOW64\CNC_AUU.dll
2012-03-02 15:52:15 ----A---- C:\Windows\SYSWOW64\CNC_AUL.dll
2012-03-02 15:51:18 ----HD---- C:\ProgramData\CanonBJ
2012-03-02 15:50:52 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2012-03-02 15:50:42 ----A---- C:\Windows\system32\CNC_AUL.dll
2012-03-02 15:50:42 ----A---- C:\Windows\system32\CNC_AUI.dll
2012-03-02 15:50:42 ----A---- C:\Windows\system32\CNC_AUC.dll
2012-03-02 15:50:05 ----A---- C:\Windows\system32\CNC_AUO.dll
2012-03-02 15:50:00 ----A---- C:\Windows\system32\CNMIUAU.DLL
2012-03-02 15:49:48 ----HD---- C:\Program Files\CanonBJ
2012-03-02 00:11:16 ----HD---- C:\ProgramData\CanonIJScan
2012-03-01 23:57:58 ----D---- C:\Users\User\AppData\Roaming\Canon
2012-03-01 23:50:54 ----A---- C:\Windows\system32\CNMXLMAU.DLL
2012-03-01 23:49:31 ----D---- C:\ProgramData\CanonIJWSpt
2012-03-01 23:49:27 ----D---- C:\Program Files\Common Files\CANON
2012-03-01 23:47:57 ----D---- C:\Windows\system32\STRING
2012-03-01 23:47:57 ----A---- C:\Windows\system32\CNMN6UI.DLL
2012-03-01 23:47:57 ----A---- C:\Windows\system32\CNMN6PPM.DLL
2012-03-01 23:41:40 ----D---- C:\Program Files (x86)\Canon
2012-03-01 22:45:23 ----A---- C:\Windows\system32\CNMLMAU.DLL
2012-03-01 22:45:10 ----A---- C:\Windows\system32\CNHMCA6.dll
2012-02-27 19:08:10 ----D---- C:\Users\User\AppData\Roaming\Malwarebytes
2012-02-27 19:07:55 ----D---- C:\ProgramData\Malwarebytes
2012-02-27 19:07:53 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-02-26 14:34:06 ----D---- C:\rsit
2012-02-26 14:27:52 ----D---- C:\Windows\pss
2012-02-26 11:45:40 ----D---- C:\Program Files (x86)\Elaborate Bytes
2012-02-25 11:43:50 ----D---- C:\Program Files\Recuva
2012-02-24 13:43:19 ----D---- C:\Program Files (x86)\Spirent Communications
2012-02-24 13:42:40 ----D---- C:\Program Files (x86)\HTC
2012-02-24 13:41:29 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-02-22 22:37:49 ----D---- C:\Program Files (x86)\Hammerfight
2012-02-22 22:35:23 ----D---- C:\Program Files (x86)\Team Meat
2012-02-21 13:39:13 ----A---- C:\Windows\system32\wrap_oal.dll
2012-02-21 13:39:12 ----D---- C:\Program Files (x86)\OpenAL
2012-02-21 13:39:12 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2012-02-21 13:39:12 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2012-02-21 13:39:12 ----A---- C:\Windows\system32\OpenAL32.dll
2012-02-21 13:37:22 ----D---- C:\Program Files (x86)\Gaijin Games
2012-02-21 13:26:29 ----D---- C:\Users\User\AppData\Roaming\Broken Rules
2012-02-21 13:26:28 ----A---- C:\Windows\d3dx.dat
2012-02-21 13:24:57 ----D---- C:\Program Files (x86)\And Yet It Moves
2012-02-21 11:25:39 ----D---- C:\Users\User\AppData\Roaming\Crayon Physics Deluxe
2012-02-21 11:10:25 ----D---- C:\Program Files (x86)\Crayon Physics Deluxe
2012-02-21 09:57:27 ----D---- C:\Users\User\AppData\Roaming\Need for Speed World
2012-02-21 09:41:23 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-02-21 09:41:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-02-21 09:41:23 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-02-21 09:41:23 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-02-21 09:41:22 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-02-21 09:41:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-02-21 09:41:22 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-02-21 09:41:22 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-02-21 09:41:21 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-02-21 09:41:21 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-02-21 09:41:20 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-02-21 09:41:20 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-02-21 09:41:19 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-02-21 09:41:19 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-02-21 09:41:19 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-02-21 09:41:19 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-02-21 09:41:17 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-02-21 09:41:17 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-02-21 09:41:17 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-02-21 09:41:17 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-02-21 09:41:16 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-02-21 09:41:16 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-02-21 09:41:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-02-21 09:41:15 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-02-21 09:41:15 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-02-21 09:41:13 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-02-21 09:41:13 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-02-21 09:41:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-02-21 09:41:12 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-02-21 09:41:11 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-02-21 09:41:11 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-02-21 09:41:09 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-02-21 09:41:09 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-02-21 09:41:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-02-21 09:41:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-02-21 09:41:07 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-02-21 09:41:07 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-02-21 09:41:06 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-02-21 09:41:06 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-02-21 09:41:05 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-02-21 09:41:05 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-02-21 09:41:05 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-02-21 09:41:03 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-02-21 09:41:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-02-21 09:41:03 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-02-21 09:41:03 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-02-21 09:40:59 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-02-21 09:40:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-02-21 09:40:59 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-02-21 09:40:59 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-02-21 09:40:58 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-02-21 09:40:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-02-21 09:40:58 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-02-21 09:40:58 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-02-21 09:40:57 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-02-21 09:40:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-02-21 09:40:57 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-02-21 09:40:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-02-21 09:40:55 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-02-21 09:40:55 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-02-21 09:40:53 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-02-21 09:40:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-02-21 09:40:53 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-02-21 09:40:53 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-02-21 09:40:52 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-02-21 09:40:52 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-02-21 09:40:51 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-02-21 09:40:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-02-21 09:40:51 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-02-21 09:40:51 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-02-21 09:40:50 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-02-21 09:40:50 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-02-21 09:40:49 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-02-21 09:40:49 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-02-21 09:40:48 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-02-21 09:40:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-02-21 09:40:48 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-02-21 09:40:48 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-02-21 09:40:47 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-02-21 09:40:47 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-02-21 09:40:46 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-02-21 09:40:46 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-02-21 09:40:45 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-02-21 09:40:45 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-02-21 09:40:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-02-21 09:40:44 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-02-21 09:40:43 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-02-21 09:40:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-02-21 09:40:43 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-02-21 09:40:43 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-02-21 09:40:42 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-02-21 09:40:42 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-02-21 09:40:41 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-02-21 09:40:41 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-02-21 09:40:39 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-02-21 09:40:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-02-21 09:40:39 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-02-21 09:40:39 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-02-21 09:40:37 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-02-21 09:40:37 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-02-21 09:40:36 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-02-21 09:40:36 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-02-21 09:40:35 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-02-21 09:40:35 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-02-21 09:40:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-02-21 09:40:34 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-02-21 09:40:30 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-02-21 09:40:30 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-02-21 09:40:29 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-02-21 09:40:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-02-21 09:40:29 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-02-21 09:40:29 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-02-21 09:40:28 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-02-21 09:40:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-02-21 09:40:28 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-02-21 09:40:28 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-02-21 09:40:27 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-02-21 09:40:27 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-02-21 09:40:26 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-02-21 09:40:26 ----A---- C:\Windows\system32\xinput1_3.dll
2012-02-21 09:40:25 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-02-21 09:40:25 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-02-21 09:40:23 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-02-21 09:40:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-02-21 09:40:23 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-02-21 09:40:23 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-02-21 09:40:22 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-02-21 09:40:22 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-02-21 09:40:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-02-21 09:40:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-02-21 09:40:19 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-02-21 09:40:19 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-02-21 09:40:18 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-02-21 09:40:18 ----A---- C:\Windows\system32\d3dx10.dll
2012-02-21 09:40:17 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-02-21 09:40:17 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-02-21 09:40:17 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-02-21 09:40:17 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-02-21 09:40:16 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-02-21 09:40:16 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-02-21 09:40:15 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-02-21 09:40:15 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-02-21 09:40:14 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-02-21 09:40:14 ----A---- C:\Windows\system32\xinput1_2.dll
2012-02-21 09:40:13 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-02-21 09:40:13 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-02-21 09:40:13 ----A---- C:\Windows\system32\xinput1_1.dll
2012-02-21 09:40:13 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-02-21 09:40:11 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-02-21 09:40:11 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-02-21 09:40:07 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-02-21 09:40:07 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-02-21 09:40:05 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-02-21 09:40:05 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-02-21 09:40:05 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-02-21 09:40:05 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-02-21 09:40:04 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-02-21 09:40:04 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-02-21 09:40:03 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-02-21 09:40:03 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-02-21 09:40:02 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-02-21 09:40:02 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-02-21 09:40:01 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-02-21 09:40:01 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-02-21 09:40:01 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-02-21 09:40:01 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-02-21 09:39:59 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-02-21 09:39:59 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-02-21 09:37:29 ----HD---- C:\Windows\msdownld.tmp
2012-02-21 09:37:29 ----D---- C:\Windows\SYSWOW64\directx
2012-02-21 09:37:15 ----D---- C:\ProgramData\Electronic Arts
2012-02-21 09:37:15 ----D---- C:\Program Files (x86)\Electronic Arts
2012-02-21 07:43:47 ----D---- C:\Program Files\Synaptics

======List of files/folders modified in the last 1 month======

2012-03-19 19:28:45 ----D---- C:\Windows\Prefetch
2012-03-19 19:28:43 ----D---- C:\Program Files\trend micro
2012-03-19 19:28:31 ----D---- C:\Windows\Temp
2012-03-19 19:28:19 ----D---- C:\Users\User\AppData\Roaming\Dropbox
2012-03-19 19:27:35 ----D---- C:\Users\User\AppData\Roaming\Skype
2012-03-19 19:27:32 ----D---- C:\Windows\ModemLogs
2012-03-19 19:27:32 ----D---- C:\Windows\inf
2012-03-19 19:27:28 ----D---- C:\Windows
2012-03-19 19:25:32 ----D---- C:\Windows\system32\config
2012-03-19 19:15:34 ----D---- C:\Windows\System32
2012-03-19 19:15:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-19 19:11:11 ----A---- C:\Windows\SYSWOW64\rpcnetp.dll
2012-03-19 19:11:09 ----A---- C:\Windows\SYSWOW64\rpcnet.dll
2012-03-19 19:10:44 ----A---- C:\Windows\SYSWOW64\rpcnetp.exe
2012-03-19 19:10:44 ----A---- C:\Windows\system32\rpcnetp.exe
2012-03-18 21:43:47 ----D---- C:\Windows\system32\drivers
2012-03-18 11:02:10 ----D---- C:\Program Files (x86)\Steam
2012-03-18 11:02:07 ----D---- C:\Windows\debug
2012-03-18 11:01:51 ----D---- C:\Program Files\CCleaner
2012-03-18 09:31:24 ----D---- C:\Windows\winsxs
2012-03-18 08:51:12 ----D---- C:\Windows\SysWOW64
2012-03-17 19:32:47 ----D---- C:\Windows\system32\catroot2
2012-03-17 19:32:47 ----D---- C:\Windows\system32\catroot
2012-03-17 19:29:35 ----A---- C:\Windows\system32\MRT.exe
2012-03-17 19:29:05 ----SHD---- C:\System Volume Information
2012-03-09 21:43:05 ----D---- C:\Users\User\AppData\Roaming\tor
2012-03-09 20:18:44 ----SHD---- C:\Windows\Installer
2012-03-09 20:18:26 ----RD---- C:\Program Files (x86)
2012-03-06 22:25:00 ----D---- C:\Windows\Logs
2012-03-06 20:16:49 ----D---- C:\Users\User\AppData\Roaming\GHISLER
2012-03-05 22:56:03 ----RSD---- C:\Windows\assembly
2012-03-04 17:11:23 ----D---- C:\Program Files (x86)\Google
2012-03-04 17:10:31 ----D---- C:\Windows\Tasks
2012-03-04 17:10:31 ----D---- C:\Windows\system32\Tasks
2012-03-04 15:35:59 ----DC---- C:\Windows\system32\DRVSTORE
2012-03-04 15:35:58 ----D---- C:\Windows\system32\DriverStore
2012-03-04 15:35:54 ----D---- C:\Program Files (x86)\Common Files
2012-03-04 15:02:58 ----D---- C:\Windows\system32\FxsTmp
2012-03-03 19:10:59 ----SD---- C:\Users\User\AppData\Roaming\Microsoft
2012-03-03 16:26:34 ----RD---- C:\Program Files
2012-03-03 16:25:02 ----HD---- C:\ProgramData
2012-03-03 13:55:26 ----D---- C:\Users\User\AppData\Roaming\.minecraft
2012-03-02 16:16:41 ----RSD---- C:\Windows\Media
2012-03-02 15:52:19 ----D---- C:\Windows\twain_32
2012-03-01 23:49:27 ----D---- C:\Program Files\Common Files
2012-02-27 18:22:51 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-02-26 17:50:58 ----D---- C:\Windows\system32\drivers\UMDF
2012-02-24 20:22:20 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2012-02-24 15:51:06 ----D---- C:\Windows\Microsoft.NET
2012-02-24 13:42:33 ----D---- C:\Users\User\AppData\Roaming\Adobe
2012-02-24 13:42:33 ----D---- C:\ProgramData\Adobe
2012-02-24 13:42:32 ----D---- C:\Program Files (x86)\Adobe
2012-02-24 13:23:10 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-02-24 11:00:40 ----A---- C:\Windows\SYSWOW64\Upgrd.exe
2012-02-24 11:00:32 ----N---- C:\Windows\SYSWOW64\rpcnet.exe
2012-02-23 14:38:39 ----SD---- C:\ProgramData\Microsoft
2012-02-20 22:05:08 ----D---- C:\Users\User\AppData\Roaming\Wireshark

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-01-08 409112]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-16 40816]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 189440]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2012-02-09 231376]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2011-12-19 224048]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2011-12-19 130864]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 497152]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-04-06 1208320]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-12-16 2978296]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-01 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
R3 HBtnKey;HP Hotkey Device; C:\Windows\system32\DRIVERS\cpqbttn64.sys [2009-04-20 11264]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-07-28 7345632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 40832]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 84864]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1379376]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-12-19 146736]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2011-12-19 165680]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-12-19 117040]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 111616]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 864032]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2010-01-08 354840]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2011-02-07 138192]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 12784]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-09-15 88576]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\Windows\SysWOW64\rpcnet.exe [2012-02-24 58288]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-04 136176]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-04 136176]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-02-23 489256]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-17 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Kdyby měl někdo chuť na preventivku...

#2 Příspěvek od Caroprd111 »

Zdravím. :)

Prosím o chvilku strpení, mrknu na to. :wink:
Obrázek

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Kdyby měl někdo chuť na preventivku...

#3 Příspěvek od Caroprd111 »

:arrow: Předpokládám správně, že soubor C:\Users\User\Documents\Osobní\Programy\zoner.bat znáte :???:

:arrow: V logu vidím Malwarebytes' Anti-Malware; dělal jste pomocí něho sken? Běží vám ochrana v reálném čase :???:


Obrázek Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
Obrázek Záložka Čistič
  • Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

    Obrázek Záložka Registry
  • Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
Obrázek OK Obrázek Zavřít
Obrázek

Uživatelský avatar
krater
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 128
Registrován: 19 úno 2012 21:23

Re: Kdyby měl někdo chuť na preventivku...

#4 Příspěvek od krater »

Právě jsem zjistil, že jsem zapomněl poděkovat:) Tak tedy děkuji za rady, počítač čistím CCleanerem (vč. registrů) docela pravidelně a soubor zoner.bat znám. Malwarebytes mám nainstalovaný pouze pro skeny na žádost rádců zde, ochranu v reálném čase i spouštění po startu mám vypnuté. Na to používám jiný antivirus.

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Kdyby měl někdo chuť na preventivku...

#5 Příspěvek od Caroprd111 »

Není zač.:)
Obrázek

Zamčeno