PC-HELP.CZ

Dobry den poprosila bych zda by se me nekdo neujmul a pomoh mi vyresit problem s kterym si sama nevim rady a obtezuje me to.

Co se stalo:asi pre tejdnem mi antivirak ESS hlasil,ze ne webowe strance Faceonbody.com se nachazi trojsky kun a okamzite me zablokoval,tehdy jsem si vzpomela,ze tento program FaceonBOdy,uz davno mam z tech webovych stranek a nechala si ho proskenerovat na strane VIRUSTOTAL.COM,kde ruzne antiviraky zacali nahazovat svoje vysledky,Trojan,Malware,Dangerous virus atd.

Tuto aplikaci jsem okamzite vymazala a nechala jsem jeste jednou vsechno projit programem SUPERANTISPYWARE,kde mi pri hloubkove analyze nasel TROJANA v registrech od FACEONBODY.

Vymazala jsem ho a pred restartem jsem vypnula ochranu sledovani systemu a po restartu ho zase zapinala.Asi to byla chyba 7 neni XP a ma asi jine pravidla,nevim proto se ptam na odbornika co mam delat.

Negativne dusledky.Windows-7 se mi dlouho nacitava ikdyz je to 64 bit verze pozadavky na pc sestavu splneny,ale vyhazuje se mi porad otravni napis

Program Windows Pruzkumnik prestal pracovat/opakovaci interval po 10 vterinach/
Program Windows Module Installer prestal pracovat/opakovaci interval po 10 vterinach,kde se porad rozmnozuje jako spam a neda se opravit ani vypnout/

Tento problem se zacne aktivovat,jenom co se pripojim na internet mam mobilni internet-UFON a ovladace a instalace jsou spravne,uz jsem to 3x preinstalovala nepomaha to.

Problikne obrazovka a motiv na AERO se prepina na zakladni aktivaci a barvu,pak zase na hezky vzhled,uz me to obtezuje a nemuzu se zbavit problikavani a otravniho napisu.

Pokud nejsem pripojena na internet nic se nedeje.Prosim pomozte mi,autospusteni vyhledani problemu je neucinne system prej nic nenasel,ovladace grafiky jsou aktualizovane

Pravdepodobne mam v systemu nebezpecny virus a nejsem schopna sama si vyresit tento problem.

Posilam log a dekuji predem za pomoc a instrukce co mam nadale delat


Popis problemu WINDOWS Modules Installer :

Soubory, které popisují problém:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_TrustedInstaller_ac130df80503bcb11ae103f214f7be6327ef19_cab_0f2aa8bd\WERA871.tmp.hdmp

Přečtěte si prohlášení o zásadách ochrany osobních údajů online:
http://go.microsoft.com/fwlink/?linkid= ... cid=0x0405

Pokud není k dispozici Prohlášení o zásadách ochrany osobních údajů online, přečtěte si toto prohlášení offline:
C:\Windows\system32\cs-CZ\erofflps.txt

Prestavaji fungovat i aktualizace nestahuje to,uz nic
Tuneup 2010 mi hlasil chybu na jednotce C,kde je system a byla vykonana oprava a hloubkova analyza a oprava clusteru programem CHKDSK.Stejne se problem Windows Modle Installer nevyresil a start nezrychlil

Logfile of random's system information tool 1.07 (written by random/random)
Run by Skynet-2010 at 2010-06-11 02:23:20
Microsoft Windows 7 Home Premium Service Pack 3
System drive C: has 13 GB (42%) free of 31 GB
Total RAM: 4094 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:23:30, on 11.6.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
D:\Aplikacie a Programy\Pohybove Tapety\Tapety.exe
C:\Program Files (x86)\Vertex Wireless\VW100 Connection Manager\Connection Manager.exe
D:\Aplikacie a Programy\Prohlizec Firefox\firefox.exe
D:\Aplikacie a Programy\Antispyware-Program\SUPERAntiSpyware.exe
C:\Users\Skynet-2010\4-Postova Schranka\RSIT.exe
C:\Program Files (x86)\trend micro\Skynet-2010.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mojebanka.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Tapety 2.01.lnk = D:\Aplikacie a Programy\Pohybove Tapety\Tapety.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{36EF4781-BA0E-431F-ADCA-5035C6994CEE}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{36EF4781-BA0E-431F-ADCA-5035C6994CEE}: NameServer = 78.136.128.4 78.136.128.12
O20 - Winlogon Notify: !SASWinLogon - D:\Aplikacie a Programy\Antispyware-Program\SASWINLO.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - D:\Aplikacie a Programy\Antivirus-ESET\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - D:\Aplikacie a Programy\Antivirus-ESET\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - C:\Windows\
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6959 bytes

======Scheduled tasks folder======

C:\Windows\tasks\SmartDefrag.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-06-06 41760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

C:\Users\Skynet-2010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Tapety 2.01.lnk - D:\Aplikacie a Programy\Pohybove Tapety\Tapety.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Aplikacie a Programy\Antispyware-Program\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Aplikacie a Programy\Antispyware-Program\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{607425af-70d7-11df-bcce-001fd0d74acb}]
shell\AutoRun\command - N:\VW100_Modem_Installation.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-06-11 02:23:21 ----D---- C:\Program Files (x86)\trend micro
2010-06-11 02:23:20 ----D---- C:\rsit
2010-06-11 01:26:07 ----D---- C:\Program Files (x86)\Vertex Wireless
2010-06-10 09:19:45 ----D---- C:\ProgramData\Pinnacle
2010-06-10 08:58:57 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Skype
2010-06-10 08:58:45 ----D---- C:\ProgramData\Skype
2010-06-10 07:15:05 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2010-06-10 07:14:53 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-06-10 07:14:50 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-06-10 07:14:49 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-06-10 07:14:48 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-06-10 07:14:46 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-06-10 07:14:46 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-06-10 07:14:45 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-06-10 07:14:44 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2010-06-10 07:14:34 ----A---- C:\Windows\SysWOW64\atmlib.dll
2010-06-10 07:14:34 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-06-08 05:56:07 ----D---- C:\Users\Skynet-2010\AppData\Roaming\My Pictures 3D
2010-06-08 05:09:59 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Marine Aquarium 3
2010-06-08 05:02:38 ----A---- C:\Windows\SysWOW64\fmod.dll
2010-06-08 05:02:37 ----A---- C:\Windows\SysWOW64\dx8vb.dll
2010-06-08 05:02:37 ----A---- C:\Windows\SysWOW64\dx7vb.dll
2010-06-08 05:02:36 ----A---- C:\Windows\SysWOW64\smartsubclass.dll
2010-06-08 05:02:35 ----A---- C:\Windows\SysWOW64\zip32.dll
2010-06-08 05:02:35 ----A---- C:\Windows\SysWOW64\unzip32.dll
2010-06-08 04:56:03 ----D---- C:\Users\Skynet-2010\AppData\Roaming\VitySoft
2010-06-08 04:34:23 ----D---- C:\Users\Skynet-2010\AppData\Roaming\teamspeak2
2010-06-08 04:21:56 ----D---- C:\Program Files (x86)\Common Files\DivX Shared
2010-06-08 04:19:27 ----D---- C:\Users\Skynet-2010\AppData\Roaming\vlc
2010-06-08 04:02:30 ----D---- C:\Program Files (x86)\Common Files\PX Storage Engine
2010-06-08 04:02:26 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Winamp-Prehravac
2010-06-08 03:33:59 ----D---- C:\ProgramData\SmartSound Software Inc
2010-06-08 03:33:59 ----D---- C:\Program Files (x86)\SmartSound Software
2010-06-08 03:25:13 ----A---- C:\Windows\SysWOW64\Wnaspint.dll
2010-06-08 03:25:07 ----D---- C:\Program Files (x86)\Acoustica Shared Effects
2010-06-08 03:02:46 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Any DVD Converter Professional
2010-06-08 03:00:38 ----A---- C:\Windows\SysWOW64\winitn.dll
2010-06-08 03:00:37 ----A---- C:\Windows\SysWOW64\agsaamj.dll
2010-06-08 03:00:37 ----A---- C:\Windows\SysWOW64\agsaami.dll
2010-06-08 03:00:37 ----A---- C:\Windows\SysWOW64\agsaamg.dll
2010-06-08 03:00:36 ----A---- C:\Windows\SysWOW64\agsaamc.dll
2010-06-08 03:00:34 ----A---- C:\Windows\sslzdlt.dll
2010-06-08 03:00:33 ----A---- C:\Windows\SysWOW64\msvcr70.dll
2010-06-08 03:00:33 ----A---- C:\Windows\SysWOW64\msvcp70.dll
2010-06-08 03:00:32 ----A---- C:\Windows\SysWOW64\mfc70.dll
2010-06-08 03:00:32 ----A---- C:\Windows\SysWOW64\lame_enc.dll
2010-06-07 15:50:15 ----SHD---- C:\found.000
2010-06-07 13:16:37 ----D---- C:\Users\Skynet-2010\AppData\Roaming\DAEMON Tools Lite
2010-06-07 13:16:29 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-07 13:13:18 ----D---- C:\Program Files (x86)\Common Files\EZB Systems
2010-06-07 11:41:18 ----A---- C:\Windows\GSetup.ini
2010-06-07 11:35:46 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Thinstall
2010-06-07 11:34:32 ----D---- C:\Program Files (x86)\Reallusion
2010-06-07 11:34:21 ----D---- C:\Program Files (x86)\Common Files\Reallusion
2010-06-07 11:32:17 ----D---- C:\Users\Skynet-2010\AppData\Roaming\InstallShield
2010-06-07 09:25:01 ----D---- C:\ProgramData\Bluetooth
2010-06-07 07:53:48 ----D---- C:\Users\Skynet-2010\AppData\Roaming\GHISLER
2010-06-07 04:58:50 ----D---- C:\Emux
2010-06-07 03:08:10 ----D---- C:\ProgramData\SlySoft
2010-06-07 03:08:05 ----ASH---- C:\Windows\S628BE554.tmp
2010-06-07 02:22:07 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Ashampoo
2010-06-07 02:17:48 ----D---- C:\ProgramData\ashampoo
2010-06-07 00:40:13 ----D---- C:\Users\Skynet-2010\AppData\Roaming\NVIDIA
2010-06-07 00:38:41 ----D---- C:\Users\Skynet-2010\AppData\Roaming\CyberLink
2010-06-07 00:21:05 ----D---- C:\ProgramData\CyberLink
2010-06-07 00:20:59 ----D---- C:\Program Files (x86)\Cyberlink
2010-06-07 00:20:41 ----D---- C:\Program Files (x86)\Common Files\CyberLink
2010-06-07 00:19:13 ----A---- C:\Windows\SysWOW64\msxml3a.dll
2010-06-07 00:19:13 ----A---- C:\Windows\SysWOW64\msvcr71.dll
2010-06-07 00:19:13 ----A---- C:\Windows\SysWOW64\msvcp71.dll
2010-06-07 00:18:09 ----D---- C:\ProgramData\Temp
2010-06-06 23:36:20 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-06-06 23:36:20 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-06-06 23:36:20 ----A---- C:\Windows\SysWOW64\java.exe
2010-06-06 23:36:03 ----D---- C:\Program Files (x86)\Java
2010-06-06 22:03:34 ----D---- C:\Users\Skynet-2010\AppData\Roaming\IObit
2010-06-06 21:42:30 ----A---- C:\Windows\SysWOW64\uxtuneup.dll
2010-06-06 21:42:29 ----A---- C:\Windows\SysWOW64\authuitu.dll
2010-06-06 21:42:12 ----D---- C:\Users\Skynet-2010\AppData\Roaming\TuneUp Software
2010-06-06 21:40:33 ----D---- C:\ProgramData\TuneUp Software
2010-06-06 21:40:22 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-06-06 20:00:09 ----D---- C:\Program Files (x86)\Common Files\Creative
2010-06-06 19:59:59 ----HD---- C:\Program Files (x86)\Creative Installation Information
2010-06-06 19:59:56 ----A---- C:\Windows\SysWOW64\wrap_oal.dll
2010-06-06 19:59:56 ----A---- C:\Windows\SysWOW64\OpenAL32.dll
2010-06-06 19:59:55 ----N---- C:\Windows\SysWOW64\Sens_oal.dll
2010-06-06 19:59:38 ----D---- C:\Program Files (x86)\Common Files\Creative Labs Shared
2010-06-06 19:58:50 ----D---- C:\ProgramData\Creative
2010-06-06 19:58:46 ----A---- C:\Windows\SysWOW64\CmdRtr.DLL
2010-06-06 19:58:46 ----A---- C:\Windows\SysWOW64\APOMngr.DLL
2010-06-06 19:58:05 ----A---- C:\Windows\SysWOW64\INRES.DLL
2010-06-06 19:58:04 ----D---- C:\Program Files (x86)\Creative
2010-06-06 19:32:11 ----D---- C:\Windows\SysWOW64\RTCOM
2010-06-06 19:31:33 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-06-06 19:31:33 ----D---- C:\Program Files (x86)\Realtek
2010-06-06 19:31:28 ----HD---- C:\Program Files (x86)\Temp
2010-06-06 19:31:28 ----A---- C:\Windows\RtlExUpd.dll
2010-06-06 19:31:23 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-06-06 18:34:46 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-06-06 18:34:46 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-06-06 18:34:46 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-06-06 18:34:46 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-06-06 18:34:46 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-06-06 18:34:45 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-06-06 18:34:45 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-06-06 18:34:45 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-06-06 18:34:45 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-06-06 18:34:45 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-06-06 18:34:44 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-06-06 18:34:43 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-06-06 18:34:42 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-06-06 18:34:41 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-06-06 18:34:40 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-06-06 18:34:40 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-06-06 18:34:40 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-06-06 18:34:40 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-06-06 18:34:40 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-06-06 18:34:39 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-06-06 18:34:38 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-06-06 18:34:38 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-06-06 18:34:38 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-06-06 18:34:38 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-06-06 18:34:38 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-06-06 18:34:37 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-06-06 18:34:37 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-06-06 18:34:37 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-06-06 18:34:37 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-06-06 18:34:37 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-06-06 18:34:36 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-06-06 18:34:33 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-06-06 18:34:32 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-06-06 18:34:32 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-06-06 18:34:32 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-06-06 18:34:32 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-06-06 18:34:32 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-06-06 18:34:31 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-06-06 18:34:31 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-06-06 18:34:31 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-06-06 18:08:29 ----D---- C:\Windows\Sun
2010-06-06 18:08:28 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Sun
2010-06-06 18:07:07 ----A---- C:\Windows\SysWOW64\deploytk.dll
2010-06-06 18:02:26 ----D---- C:\ProgramData\Adobe
2010-06-06 18:02:03 ----HD---- C:\Program Files (x86)\Common Files\Adobe
2010-06-06 17:50:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-06-06 17:35:39 ----D---- C:\ProgramData\NVIDIA
2010-06-06 17:34:56 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-06-06 17:32:59 ----A---- C:\Windows\SysWOW64\OpenCL.dll
2010-06-06 17:32:59 ----A---- C:\Windows\SysWOW64\nvwgf2um.dll
2010-06-06 17:32:58 ----A---- C:\Windows\SysWOW64\nvoglv32.dll
2010-06-06 17:32:58 ----A---- C:\Windows\SysWOW64\nvencodemft.dll
2010-06-06 17:32:58 ----A---- C:\Windows\SysWOW64\nvdecodemft.dll
2010-06-06 17:32:57 ----A---- C:\Windows\SysWOW64\nvd3dum.dll
2010-06-06 17:32:57 ----A---- C:\Windows\SysWOW64\nvcuvid.dll
2010-06-06 17:32:57 ----A---- C:\Windows\SysWOW64\nvcuvenc.dll
2010-06-06 17:32:56 ----A---- C:\Windows\SysWOW64\nvcuda.dll
2010-06-06 17:32:55 ----A---- C:\Windows\SysWOW64\nvcompiler.dll
2010-06-06 17:32:54 ----A---- C:\Windows\SysWOW64\nvapi.dll
2010-06-06 05:43:38 ----D---- C:\Users\Skynet-2010\AppData\Roaming\WinRAR
2010-06-06 04:28:48 ----D---- C:\Users\Skynet-2010\AppData\Roaming\aicon
2010-06-06 03:34:48 ----D---- C:\Windows\SysWOW64\Wat
2010-06-06 03:04:15 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2010-06-06 02:45:30 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Macromedia
2010-06-06 02:45:30 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Adobe
2010-06-06 02:45:25 ----D---- C:\Windows\SysWOW64\Macromed
2010-06-06 02:35:02 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-06-06 02:34:57 ----A---- C:\Windows\SysWOW64\vbscript.dll
2010-06-06 02:34:47 ----A---- C:\Windows\SysWOW64\wmp.dll
2010-06-06 02:34:45 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2010-06-06 02:34:42 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2010-06-06 02:34:27 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2010-06-06 02:34:27 ----A---- C:\Windows\SysWOW64\secproc.dll
2010-06-06 02:34:26 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2010-06-06 02:34:26 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2010-06-06 02:34:26 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2010-06-06 02:34:25 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2010-06-06 02:34:25 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2010-06-06 02:34:25 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2010-06-06 02:34:21 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2010-06-06 02:34:18 ----A---- C:\Windows\SysWOW64\t2embed.dll
2010-06-06 02:34:17 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-06-06 02:34:17 ----A---- C:\Windows\SysWOW64\explorer.exe
2010-06-06 02:34:17 ----A---- C:\Windows\explorer.exe
2010-06-06 02:34:12 ----A---- C:\Windows\SysWOW64\setup16.exe
2010-06-06 02:34:11 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2010-06-06 02:34:10 ----A---- C:\Windows\SysWOW64\wow32.dll
2010-06-06 02:34:10 ----A---- C:\Windows\SysWOW64\user.exe
2010-06-06 02:34:10 ----A---- C:\Windows\SysWOW64\instnm.exe
2010-06-06 02:33:51 ----A---- C:\Windows\SysWOW64\quartz.dll
2010-06-06 02:33:50 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2010-06-06 02:33:50 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2010-06-06 02:33:49 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2010-06-06 02:33:49 ----A---- C:\Windows\SysWOW64\avifil32.dll
2010-06-06 02:33:48 ----A---- C:\Windows\SysWOW64\msyuv.dll
2010-06-06 02:33:48 ----A---- C:\Windows\SysWOW64\msrle32.dll
2010-06-06 02:33:47 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2010-06-06 02:33:45 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2010-06-06 02:33:44 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2010-06-06 02:33:43 ----A---- C:\Windows\SysWOW64\jscript.dll
2010-06-06 02:33:36 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-06-06 02:33:34 ----A---- C:\Windows\SysWOW64\sspicli.dll
2010-06-06 02:33:34 ----A---- C:\Windows\SysWOW64\secur32.dll
2010-06-06 02:33:19 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2010-06-06 02:33:16 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2010-06-06 02:33:05 ----A---- C:\Windows\SysWOW64\msasn1.dll
2010-06-06 02:23:45 ----A---- C:\Windows\SysWOW64\wintrust.dll
2010-06-06 02:23:41 ----A---- C:\Windows\SysWOW64\cabview.dll
2010-06-06 02:19:39 ----D---- C:\ProgramData\Vertex Wireless
2010-06-06 02:03:58 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2010-06-06 02:03:45 ----D---- C:\Users\Skynet-2010\AppData\Roaming\SUPERAntiSpyware.com
2010-06-06 02:02:34 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2010-06-06 01:58:56 ----D---- C:\ProgramData\ESET
2010-06-06 01:32:05 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Thunderbird
2010-06-06 00:46:04 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Mozilla
2010-06-05 21:35:38 ----A---- C:\Windows\ODBC.INI
2010-06-05 21:35:36 ----A---- C:\Windows\vbaddin.ini
2010-06-05 21:35:00 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-06-05 21:34:56 ----D---- C:\Program Files (x86)\Common Files\Designer
2010-06-05 21:34:06 ----D---- C:\Program Files (x86)\Microsoft FrontPage
2010-06-05 21:33:22 ----D---- C:\Windows\Msagent
2010-06-05 21:31:38 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Microsoft Web Folders
2010-06-05 21:31:38 ----D---- C:\Program Files (x86)\Microsoft Office
2010-06-05 21:29:25 ----SHD---- C:\Windows\Installer
2010-06-04 07:37:32 ----D---- C:\Windows\Panther
2010-06-04 07:00:57 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Identities
2010-06-04 07:00:48 ----SD---- C:\Users\Skynet-2010\AppData\Roaming\Microsoft
2010-06-04 07:00:48 ----D---- C:\Users\Skynet-2010\AppData\Roaming\Media Center Programs
2010-06-04 07:00:43 ----SHD---- C:\Recovery
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Šablony
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Plocha
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Oblíbené položky
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Nabídka Start
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Dokumenty
2010-06-04 07:00:43 ----SHD---- C:\ProgramData\Data aplikací
2010-06-04 06:41:29 ----D---- C:\Windows\SoftwareDistribution
2010-06-04 06:38:52 ----D---- C:\Windows\Prefetch
2010-06-04 06:38:26 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 months======

2010-06-11 02:23:26 ----D---- C:\Windows\Temp
2010-06-11 02:23:21 ----RHD---- C:\Program Files (x86)
2010-06-11 01:39:53 ----D---- C:\Windows\System32
2010-06-11 01:39:52 ----D---- C:\Windows\inf
2010-06-11 01:34:16 ----D---- C:\Windows
2010-06-10 10:10:48 ----RSD---- C:\Windows\Fonts
2010-06-10 10:10:48 ----HD---- C:\ProgramData
2010-06-10 10:10:48 ----HD---- C:\Program Files (x86)\Common Files
2010-06-10 10:10:48 ----D---- C:\Windows\SysWOW64
2010-06-10 07:45:58 ----D---- C:\Windows\debug
2010-06-10 07:31:25 ----D---- C:\Windows\SysWOW64\migration
2010-06-10 07:31:25 ----D---- C:\Program Files (x86)\Internet Explorer
2010-06-10 07:19:04 ----D---- C:\Windows\winsxs
2010-06-08 04:22:36 ----RD---- C:\Program Files
2010-06-08 03:00:36 ----D---- C:\Windows\system
2010-06-07 15:00:01 ----D---- C:\Windows\Tasks
2010-06-07 14:57:38 ----SD---- C:\ProgramData\Microsoft
2010-06-07 14:29:00 ----D---- C:\Windows\registration
2010-06-07 09:16:30 ----D---- C:\Windows\SysWOW64\drivers
2010-06-07 08:56:26 ----D---- C:\Windows\rescache
2010-06-07 01:04:04 ----D---- C:\Windows\Microsoft.NET
2010-06-07 00:18:09 ----RHD---- C:\Users
2010-06-07 00:02:11 ----D---- C:\Admin
2010-06-06 18:34:36 ----RSD---- C:\Windows\assembly
2010-06-06 18:34:01 ----D---- C:\Windows\Logs
2010-06-06 17:35:24 ----D---- C:\Windows\Help
2010-06-06 03:21:02 ----D---- C:\Program Files (x86)\Windows Media Player
2010-06-06 03:21:02 ----D---- C:\Program Files (x86)\Windows Mail
2010-06-06 03:20:59 ----D---- C:\Windows\SysWOW64\cs-CZ
2010-06-06 03:20:59 ----D---- C:\Windows\AppPatch
2010-06-06 03:20:58 ----D---- C:\Windows\ehome
2010-06-06 02:21:49 ----D---- C:\Windows\ModemLogs
2010-06-06 02:19:58 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-06-05 21:34:49 ----RSD---- C:\Windows\Media
2010-06-05 21:34:28 ----D---- C:\Program Files (x86)\Common Files\System
2010-06-05 21:33:58 ----D---- C:\Windows\ShellNew
2010-06-04 07:00:56 ----SHD---- C:\$Recycle.Bin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys []
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys []
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys []
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\D:\Aplikacie a Programy\ISO-Manager\drivers\ISODrv64.sys [2007-04-13 105176]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys []
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys []
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys []
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys []
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys []
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys []
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/06/07 00:20:57]; \??\D:\Aplikacie a Programy\Power-DVD\PowerDVD10\NavFilter\000.fcl [2010-04-02 146928]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x64.sys []
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys []
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys []
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys []
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys []
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys []
R3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394; C:\Windows\system32\DRIVERS\1394ohci.sys []
R3 AmdPPM;Ovladač procesoru AMD; C:\Windows\system32\DRIVERS\amdppm.sys []
R3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys [2007-05-11 38160]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 37648]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys []
R3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2007-05-23 19728]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys []
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys []
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []
R3 Maplom;Maplom; C:\Windows\SysWOW64\drivers\Maplom.sys []
R3 MaplomL;MaplomL; C:\Windows\SysWOW64\drivers\MaplomL.sys []
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys []
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys []
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys []
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys []
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []
R3 P17;SB Audigy; C:\Windows\system32\drivers\P17.sys []
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys []
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys []
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys []
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys []
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpUtilitiesDriver64.sys [2009-10-14 11856]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys []
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys []
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\system32\DRIVERS\usbehci.sys []
R3 usbhub;Ovladač standardního rozbočovače USB; C:\Windows\system32\DRIVERS\usbhub.sys []
R3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbohci.sys []
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS []
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2007-03-05 47120]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2007-03-05 63248]
R3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys []
R3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys []
R3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys []
R3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys []
R3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys []
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys []
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S1 SASDIFSV;SASDIFSV; \??\D:\Aplikacie a Programy\Antispyware-Program\SASDIFSV.SYS [2009-11-11 9968]
S1 SASKUTIL;SASKUTIL; \??\D:\Aplikacie a Programy\Antispyware-Program\SASKUTIL.sys [2009-11-11 74480]
S2 TBPanel;TBPanel; C:\Windows\SysWOW64\drivers\TBPanel.sys []
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys []
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys []
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys []
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys []
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys []
S3 akvakqax;akvakqax; C:\Windows\SysWOW64\drivers\akvakqax.sys []
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys []
S3 AmdK8;AMD K8 Processor Driver; C:\Windows\system32\DRIVERS\amdk8.sys []
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys []
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys []
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys []
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys []
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys []
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbda.sys []
S3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60a.sys []
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys []
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys []
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys []
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys []
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys []
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2007-05-23 44688]
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\Windows\system32\DRIVERS\bthmodem.sys []
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys []
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys []
S3 Compbatt;Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys []
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbda.sys []
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys []
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys []
S3 exfat;exFAT File System Driver; C:\Windows\SysWOW64\drivers\exfat.sys []
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys []
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys []
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-06-07 24072]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2010-06-07 30528]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys []
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys []
S3 HidBth;Microsoft Bluetooth HID Miniport; C:\Windows\system32\DRIVERS\hidbth.sys []
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys []
S3 HidUsb;Microsoft HID Class Driver; C:\Windows\system32\DRIVERS\hidusb.sys []
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys []
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys []
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys []
S3 intelide;intelide; C:\Windows\system32\DRIVERS\intelide.sys []
S3 intelppm;Intel Processor Driver; C:\Windows\system32\DRIVERS\intelppm.sys []
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys []
S3 isapnp;isapnp; C:\Windows\system32\DRIVERS\isapnp.sys []
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys []
S3 kbdhid;Keyboard HID Driver; C:\Windows\system32\DRIVERS\kbdhid.sys []
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys []
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys []
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys []
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys []
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys []
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys []
S3 mouhid;Mouse HID Driver; C:\Windows\system32\DRIVERS\mouhid.sys []
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys []
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys []
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys []
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys []
S3 MsRPC;MsRPC; C:\Windows\SysWOW64\drivers\MsRPC.sys []
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys []
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys []
S3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys []
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys []
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys []
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys []
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys []
S3 nvstor;nvstor; C:\Windows\system32\DRIVERS\nvstor.sys []
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys []
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys []
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys []
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys []
S3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys []
S3 SASENUM;SASENUM; \??\D:\Aplikacie a Programy\Antispyware-Program\SASENUM.SYS [2009-11-11 7408]
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys []
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys []
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys []
S3 sffdisk;Ovladač třídy úložiště SFF; C:\Windows\system32\DRIVERS\sffdisk.sys []
S3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys []
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys []
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys []
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys []
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys []
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys []
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys []
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys []
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys []
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys []
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys []
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\Windows\system32\DRIVERS\usbccgp.sys []
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys []
S3 usbprint;Microsoft USB PRINTER Class; C:\Windows\system32\DRIVERS\usbprint.sys []
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\system32\DRIVERS\usbuhci.sys []
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys []
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys []
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys []
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys []
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys []
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys []
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys []
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2008-11-18 307200]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; D:\Aplikacie a Programy\Antivirus-ESET\x86\ekrn.exe [2010-03-31 810120]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-04-17 247152]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe []
R2 StarWindServiceAE;StarWind AE Service; D:\Aplikacie a Programy\Alcohol 120%\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-03-16 240232]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpUtilitiesService64.exe [2009-12-18 1394504]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 194048]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]

S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-06-06 79360]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe []
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2009-07-14 696832]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 127488]
S3 EhttpSrv;ESET HTTP Server; D:\Aplikacie a Programy\Antivirus-ESET\EHttpSrv.exe [2010-03-31 42336]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe []
S3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42840]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 856384]
S3 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe []
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe []
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TuneUp.Defrag;@D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpDefragService.exe,-1; D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpDefragService.exe [2010-06-06 607048]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe []
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe []
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe []
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe []
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]

-----------------EOF-----------------

Téma přesunuto do sekce HiJackThis, aby jej experti na viry spíše objevili a poradili co s tím.

nemusíš hned mazat vše , co Ti ty programy označí za nákazu. Mohou mazat infikované soubory win , ale náhradu za ně už neposkytují. I ony mají své chyby a špatná vyhodnocení..

Stáhni si program OTM (by OldTimer)
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:
Poznámka: Nepoužij k označení funkci VYBRAT VŠE


- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMo
veIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Ahoj,dekuji ti za radu udelala jsem vsechno co se dalo program pro radce OTM neni vstavany na tento system tak se mi vyhodila hlaska,ale dle instrukci jsem udelala MOVE ILT a pak restar systemu.

ATF-Cleaner jsem pouzila,ale mela jsem radeji nechat na pokoji slozku PRETECH,program TuneUp-Utilities-2010 mi hlasi,ze systemu chybi slozka PRETECH a znacne se jeste vice spomalil proces.Je dulezita slozka PRETECH?pro system nebo ne?jako jestli si system udela novsi to me zajima.

No a cez program MBAM jsem udelala sken a nasel mi jednu infiltraci,posilam log

Otravni napis WINDOWS MODULE INSTALLER PRESTAL PRACOVAT se porad objevuje na plose monitora a rozsiruje se jako SPAM nestacim to,uz mazat ve slozce je mam aj kolem 100,opakuje se to kazdych 10 vterin,kdyz jsem pripojena na net,pokud ne neukazuje se to,Udelala jsem pokus v C:Windows/services/Thundinstaller-to je tem Module installer to rucne odstranit,ale system mi to nedovoli nejde to

Mam obavu,ze nakonec dojde k reinstalaci systemu 7 a to mi zabere nejmene 6 hodin prace doinstalovat programy atd.Da se to jeste nejak zachranit?Ten vir zatim nechavam nejsem si jista zda to neni falesny vir a muze se jednat o systemovy registr,ktery je mozna dulezity

Cekam na tvoji odpoved zatim ti dekuji za ochotu,jsem rada,ze jsem nekoho nasla.


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4189

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11.6.2010 21:39:46
mbam-log-2010-06-11 (21-39-46).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 194052
Uplynulý čas: 15 minuta(y), 33 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 1
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit nový log z MbAM.


PRETECH?, snad PREFETCH ne?

http://windows.microsoft.com/en-us/wind ... tch-folder
http://translate.google.cz/translate?hl ... tch-folder

Každopádně si zazálohuj , co potřebuješ. Radím zatím nic nemazat v jiných programech , než Ti píši já.

Stáhni si OTH
na svojí plochu( pokud používáš Firefox , pravým klikni na OTH link a vyber uložit jako (Save as..).

Stáhni si OTL
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Stáhni si soubor Scan.txt
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Poklepej na soubor OTH na ploše , po spuštění programu klikni na Kill All Processes.Poté klikni na Start OTL .Poklepej Do prázdného okna pod Vlastní skenování /opravy ( Custom Scans box). Objeví se zpráva: Kliknutím na OK vyberete cestu k souboru, kliknutím na Zrušit zrušíte výběr.
Klikni na OK. Objeví se okno průzkumníku , zde klikneš na plochu a najdeš na ní soubor Scan.txt .Klikni na Otevřít.
Poté klikni na Rychle prohledat (Quick Scan). Neměň žádná jiná nastavení . Sken může trvat dlouho.
Kdy sken skončí , objeví se na ploše dva logy:
OTL.Txt a Extras.Txt , jsou uloženy ve stejném místě jako OTL.
Zkopíruj sem prosím celý obsah obou logů.

No spravne PREFETCH,ale oba vime oco jde,nemela jsem to vymazavat dlouhy start W-7,cekam skoro 5 minut

Priste budu vedet,ze to mam nechat na pokoji dekuji za odkaz no posilam ti loga

OTL logfile created on: 12.6.2010 3:44:39 - Run 2
OTL by OldTimer - Version 3.2.6.0 Folder = C:\Users\Skynet-2010\4-Postova Schranka
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 74,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 30,18 Gb Total Space | 11,76 Gb Free Space | 38,98% Space Free | Partition Type: NTFS
Drive D: | 901,23 Gb Total Space | 895,96 Gb Free Space | 99,41% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 1863,01 Gb Total Space | 1759,78 Gb Free Space | 94,46% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: POCITAC-AMD
Current User Name: Skynet-2010
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010.06.12 03:40:26 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Users\Skynet-2010\4-Postova Schranka\OTL.exe
PRC - [2010.06.12 03:39:57 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Skynet-2010\4-Postova Schranka\OTH.scr
PRC - [2010.04.01 19:59:58 | 000,910,296 | ---- | M] (Mozilla Corporation) -- D:\Aplikacie a Programy\Prohlizec Firefox\firefox.exe
PRC - [2010.03.31 08:23:00 | 000,810,120 | ---- | M] (ESET) -- D:\Aplikacie a Programy\Antivirus-ESET\x86\ekrn.exe
PRC - [2010.03.16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2007.05.28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- D:\Aplikacie a Programy\Alcohol 120%\StarWind\StarWindServiceAE.exe


========== Modules (SafeList) ==========

MOD - [2010.06.12 03:40:26 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Users\Skynet-2010\4-Postova Schranka\OTL.exe
MOD - [2010.05.06 14:41:49 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Internet Explorer\ieproxy.dll
MOD - [2009.07.14 03:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll
MOD - [2009.07.14 03:16:18 | 001,011,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll
MOD - [2009.07.14 03:16:16 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll
MOD - [2009.07.14 03:16:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\thumbcache.dll
MOD - [2009.07.14 03:16:15 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\StructuredQuery.dll
MOD - [2009.07.14 03:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll
MOD - [2009.07.14 03:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll
MOD - [2009.07.14 03:16:13 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SearchFolder.dll
MOD - [2009.07.14 03:16:13 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll
MOD - [2009.07.14 03:16:11 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntshrui.dll
MOD - [2009.07.14 03:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IconCodecService.dll
MOD - [2009.07.14 03:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll
MOD - [2009.07.14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009.07.14 03:15:07 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll
MOD - [2009.07.14 03:14:52 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\actxprxy.dll
MOD - [2009.07.14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010.06.06 03:34:48 | 001,255,736 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV:64bit: - [2009.12.18 00:09:00 | 000,036,168 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2009.07.14 03:41:59 | 000,229,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
SRV:64bit: - [2009.07.14 03:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
SRV:64bit: - [2009.07.14 03:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
SRV:64bit: - [2009.07.14 03:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2009.07.14 03:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
SRV:64bit: - [2009.07.14 03:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
SRV:64bit: - [2009.07.14 03:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
SRV:64bit: - [2009.07.14 03:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:41:18 | 000,231,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
SRV:64bit: - [2009.07.14 03:40:54 | 001,127,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:64bit: - [2009.07.14 03:40:28 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2009.07.14 03:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (DEFRAGSVC)
SRV:64bit: - [2009.07.14 03:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
SRV:64bit: - [2009.07.14 03:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
SRV:64bit: - [2009.07.14 03:40:05 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
SRV:64bit: - [2009.07.14 03:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
SRV:64bit: - [2009.07.14 03:39:51 | 001,503,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
SRV:64bit: - [2009.07.14 03:39:28 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
SRV:64bit: - [2009.07.14 03:39:11 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
SRV - [2010.06.06 21:42:19 | 000,607,048 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.03.31 08:27:28 | 000,042,336 | ---- | M] (ESET) [On_Demand | Stopped] -- D:\Aplikacie a Programy\Antivirus-ESET\EHttpSrv.exe -- (EhttpSrv)
SRV - [2010.03.31 08:23:00 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- D:\Aplikacie a Programy\Antivirus-ESET\x86\ekrn.exe -- (ekrn)
SRV - [2010.03.16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.12.18 00:13:58 | 001,394,504 | ---- | M] (TuneUp Software) [Auto | Running] -- D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009.12.18 00:08:54 | 000,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) Služba DTC (Distributed Transaction Coordinator)
SRV - [2009.07.14 03:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
SRV - [2009.07.14 03:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV - [2009.07.13 22:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2009.06.10 22:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2007.05.28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- D:\Aplikacie a Programy\Alcohol 120%\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.06.07 00:56:14 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.03.31 08:24:18 | 000,124,760 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV:64bit: - [2010.03.31 08:22:38 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2010.03.31 08:17:56 | 000,164,912 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2010.03.04 15:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.12.11 12:29:27 | 000,153,160 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
DRV:64bit: - [2009.09.26 08:20:38 | 000,223,448 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:48:04 | 000,014,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
DRV:64bit: - [2009.07.14 03:47:49 | 000,055,376 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:56 | 000,022,096 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount)
DRV:64bit: - [2009.07.14 03:45:55 | 000,217,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
DRV:64bit: - [2009.07.14 03:45:55 | 000,036,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 03:45:46 | 000,214,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
DRV:64bit: - [2009.07.14 03:45:45 | 000,050,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw)
DRV:64bit: - [2009.07.14 03:43:14 | 000,460,504 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
DRV:64bit: - [2009.07.14 02:17:46 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus)
DRV:64bit: - [2009.07.14 02:16:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP)
DRV:64bit: - [2009.07.14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:64bit: - [2009.07.14 02:10:24 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2)
DRV:64bit: - [2009.07.14 02:09:26 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf)
DRV:64bit: - [2009.07.14 02:08:13 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap)
DRV:64bit: - [2009.07.14 02:07:21 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus)
DRV:64bit: - [2009.07.14 02:07:13 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
DRV:64bit: - [2009.07.14 02:07:00 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV:64bit: - [2009.07.14 02:06:52 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass)
DRV:64bit: - [2009.07.14 02:06:24 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf)
DRV:64bit: - [2009.07.14 02:05:37 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
DRV:64bit: - [2009.07.14 02:02:08 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig)
DRV:64bit: - [2009.07.14 02:00:34 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2009.07.14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\beep.sys -- (Beep)
DRV:64bit: - [2009.07.14 01:52:39 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
DRV:64bit: - [2009.07.14 01:50:17 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
DRV:64bit: - [2009.07.14 01:37:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\discache.sys -- (discache)
DRV:64bit: - [2009.07.14 01:31:06 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt)
DRV:64bit: - [2009.07.14 01:31:03 | 000,017,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt)
DRV:64bit: - [2009.07.14 01:27:17 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
DRV:64bit: - [2009.07.14 01:19:25 | 000,060,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.29 10:02:24 | 000,157,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vwmfmdm.sys -- (vwmfmdm)
DRV:64bit: - [2009.05.29 10:02:24 | 000,125,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vwmfserd.sys -- (vwmfserd) Vertex Wireless Device Management Port Driver (WDM)
DRV:64bit: - [2009.05.29 10:02:24 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vwmfmdfl.sys -- (vwmfmdfl)
DRV:64bit: - [2009.05.29 10:02:22 | 000,125,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vwmfdiag.sys -- (vwmfdiag) Vertex Wireless Diagnostic Monitor Port Driver (WDM)
DRV:64bit: - [2009.05.29 10:02:22 | 000,116,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vwmfbus.sys -- (vwmfbus) Vertex Wireless Composite Device driver (WDM)
DRV:64bit: - [2009.03.20 15:57:52 | 000,049,288 | ---- | M] (SlySoft Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\maplom.sys -- (Maplom)
DRV:64bit: - [2009.03.20 15:57:04 | 000,050,824 | ---- | M] (SlySoft Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\maploml.sys -- (MaplomL)
DRV:64bit: - [2009.02.17 19:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2007.06.13 09:55:56 | 001,272,320 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\P17.sys -- (P17)
DRV:64bit: - [2007.05.23 04:25:18 | 000,019,728 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BtNetDrv.sys -- (BT)
DRV:64bit: - [2007.05.23 04:25:12 | 000,044,688 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btcusb.sys -- (Btcsrusb)
DRV:64bit: - [2007.05.11 03:12:06 | 000,038,160 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\blueletaudio.sys -- (BlueletAudio)
DRV:64bit: - [2007.03.05 05:48:12 | 000,037,648 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV:64bit: - [2007.03.05 05:39:28 | 000,063,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VcommMgr.sys -- (VcommMgr)
DRV:64bit: - [2007.03.05 05:38:20 | 000,047,120 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VComm.sys -- (VComm)
DRV:64bit: - [2007.02.16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2010.06.11 09:48:48 | 000,024,072 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010.06.11 09:40:53 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2010.04.02 09:11:16 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/06/07 00:20:57] [Kernel | Auto | Running] -- D:\Aplikacie a Programy\Power-DVD\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2009.11.11 10:44:50 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- D:\Aplikacie a Programy\Antispyware-Program\SASENUM.SYS -- (SASENUM)
DRV - [2009.11.11 10:44:48 | 000,009,968 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- D:\Aplikacie a Programy\Antispyware-Program\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.11.11 10:44:46 | 000,074,480 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- D:\Aplikacie a Programy\Antispyware-Program\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009.10.14 07:24:44 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- D:\Aplikacie a Programy\Tune UP-Utilities\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.14 03:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS)
DRV - [2009.06.10 23:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2009.06.10 23:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)
DRV - [2009.02.17 15:33:14 | 000,089,256 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysWOW64\ElbyCDIO.dll -- (ElbyCDIO)
DRV - [2007.05.23 04:25:18 | 000,019,728 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\btnetdrv.sys -- (BT)
DRV - [2007.05.23 04:25:12 | 000,044,688 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2007.05.11 03:12:06 | 000,038,160 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2007.04.13 17:43:10 | 000,105,176 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- D:\Aplikacie a Programy\ISO-Manager\drivers\ISODrv64.sys -- (ISODrive)
DRV - [2007.03.05 05:48:12 | 000,037,648 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2007.03.05 05:42:54 | 000,049,680 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2007.03.05 05:41:34 | 000,024,976 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2007.03.05 05:39:28 | 000,063,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\VCommMgr.sys -- (VcommMgr)
DRV - [2007.03.05 05:38:20 | 000,047,120 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\VComm.sys -- (VComm)
DRV - [2007.02.16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2007.02.07 20:27:46 | 000,014,104 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 38 65 69 B4 93 05 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: D:\Aplikacie a Programy\Prohlizec Firefox\components [2010.06.08 04:02:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: D:\Aplikacie a Programy\Prohlizec Firefox\plugins [2010.06.08 04:02:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Components: D:\Aplikacie a Programy\Muj E-Mail\components [2010.06.06 01:32:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\Aplikacie a Programy\Antivirus-ESET\Mozilla Thunderbird [2010.06.06 01:58:56 | 000,000,000 | ---D | M]

[2010.06.06 01:32:10 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Mozilla\Extensions
[2010.06.06 01:32:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Skynet-2010\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.06.11 08:06:03 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Mozilla\Firefox\Profiles\hlh0gmpi.default\extensions
[2010.06.06 22:26:03 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Skynet-2010\AppData\Roaming\Mozilla\Firefox\Profiles\hlh0gmpi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

O1 HOSTS File: ([2010.06.12 02:18:45 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4:64bit: - HKLM..\Run: [egui] D:\Aplikacie a Programy\Antivirus-ESET\egui.exe (ESET)
O4 - Startup: C:\Users\Skynet-2010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tapety 2.01.lnk = D:\Aplikacie a Programy\Pohybove Tapety\Tapety.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\SearchExtensions: InternetExtensionName =
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\SearchExtensions: InternetExtensionAction =
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_16)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Aplikacie a Programy\Antispyware-Program\SASWINLO.dll - D:\Aplikacie a Programy\Antispyware-Program\SASWINLO.dll (SUPERAntiSpyware.com)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21:64bit: - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\Windows\SysNative\WPDShServiceObj.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Aplikacie a Programy\Antispyware-Program\SASSEH.DLL (SuperAdBlocker.com)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.06.12 02:21:05 | 000,000,000 | -H-D | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010.06.12 02:21:19 | 000,000,000 | -H-D | M] - D:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010.05.18 23:00:03 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010.06.12 02:21:19 | 000,000,000 | -H-D | M] - G:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{001955e1-6f93-11df-b755-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{001955e1-6f93-11df-b755-806e6f6e6963}\Shell\AutoRun\command - "" = F:\CTRun\Start.EXE -- File not found
O33 - MountPoints2\{607425af-70d7-11df-bcce-001fd0d74acb}\Shell - "" = AutoRun
O33 - MountPoints2\{607425af-70d7-11df-bcce-001fd0d74acb}\Shell\AutoRun\command - "" = N:\VW100_Modem_Installation.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs:64bit: Themes - C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
NetSvcs:64bit: BDESVC - C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation)
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 90 Days ==========

[2010.06.12 02:22:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\catroot2
[2010.06.12 02:21:05 | 000,000,000 | -H-D | C] -- C:\Autorun.inf
[2010.06.11 21:17:30 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Malwarebytes
[2010.06.11 21:17:16 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.06.11 21:17:15 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.06.11 21:17:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.06.11 21:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.06.11 11:26:17 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\DivX
[2010.06.11 11:12:53 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Creative
[2010.06.11 10:56:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2010.06.11 05:31:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Data
[2010.06.11 05:31:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Data
[2010.06.11 02:23:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2010.06.11 01:26:29 | 000,157,696 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfmdm.sys
[2010.06.11 01:26:29 | 000,125,952 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfserd.sys
[2010.06.11 01:26:29 | 000,018,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfmdfl.sys
[2010.06.11 01:26:29 | 000,014,848 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfcmnt.sys
[2010.06.11 01:26:29 | 000,014,848 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfcm.sys
[2010.06.11 01:26:28 | 000,125,952 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfdiag.sys
[2010.06.11 01:26:28 | 000,116,224 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfbus.sys
[2010.06.11 01:26:28 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfwhnt.sys
[2010.06.11 01:26:28 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\vwmfwh.sys
[2010.06.11 01:26:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vertex Wireless
[2010.06.10 21:04:57 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Diagnostics
[2010.06.10 11:29:49 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\ElevatedDiagnostics
[2010.06.10 08:58:57 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Skype
[2010.06.10 08:58:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.06.08 07:26:22 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\Searches
[2010.06.08 05:56:07 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\My Pictures 3D
[2010.06.08 05:54:48 | 003,131,392 | ---- | C] (VicMan Software) -- C:\Windows\My Pictures 3D.scr
[2010.06.08 05:09:59 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Marine Aquarium 3
[2010.06.08 05:09:56 | 006,565,888 | ---- | C] (SereneScreen) -- C:\Windows\SysNative\MarineAquarium3.scr
[2010.06.08 05:02:38 | 000,161,280 | ---- | C] (Firelight Technologies Pty, Ltd) -- C:\Windows\SysWow64\fmod.dll
[2010.06.08 05:02:38 | 000,040,960 | ---- | C] (Andrew Keat, aktools@ihug.co.nz, http://aktools.rentmaster.co.nz) -- C:\Windows\SysWow64\akprogressbar.ocx
[2010.06.08 05:02:37 | 000,366,080 | ---- | C] (JB) -- C:\Windows\SysWow64\vbskfr2.ocx
[2010.06.08 05:02:36 | 000,397,312 | ---- | C] (Puma Computer Systems, LLC.) -- C:\Windows\SysWow64\puma lcd simulator v77.ocx
[2010.06.08 05:02:36 | 000,024,576 | ---- | C] (VBSmart) -- C:\Windows\SysWow64\smartsubclass.dll
[2010.06.08 05:02:35 | 000,151,552 | ---- | C] (xFX JumpStart®) -- C:\Windows\SysWow64\dxvumeter3.ocx
[2010.06.08 05:02:35 | 000,143,360 | ---- | C] (Info-ZIP) -- C:\Windows\SysWow64\unzip32.dll
[2010.06.08 05:02:35 | 000,133,120 | ---- | C] (Info-ZIP) -- C:\Windows\SysWow64\zip32.dll
[2010.06.08 05:02:35 | 000,090,112 | ---- | C] (NwX) -- C:\Windows\SysWow64\kcommobj.ocx
[2010.06.08 05:02:35 | 000,090,112 | ---- | C] (DGPDev) -- C:\Windows\SysWow64\dgwaveedit.ocx
[2010.06.08 05:02:35 | 000,069,632 | ---- | C] (Andrew Keat, aktools@ihug.co.nz, http://aktools.rentmaster.co.nz) -- C:\Windows\SysWow64\webupdate.ocx
[2010.06.08 05:02:35 | 000,035,840 | ---- | C] (xFX JumpStart) -- C:\Windows\SysWow64\xfxslider.ocx
[2010.06.08 05:00:42 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\vdownloader
[2010.06.08 04:56:03 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\VitySoft
[2010.06.08 04:34:23 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\teamspeak2
[2010.06.08 04:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2010.06.08 04:21:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DivX Shared
[2010.06.08 04:19:27 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\vlc
[2010.06.08 04:02:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2010.06.08 04:02:26 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Winamp-Prehravac
[2010.06.08 03:59:16 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Downloaded Installations
[2010.06.08 03:33:59 | 000,000,000 | ---D | C] -- C:\ProgramData\SmartSound Software Inc
[2010.06.08 03:33:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartSound Software
[2010.06.08 03:25:17 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\Documents\My Recordings
[2010.06.08 03:25:13 | 000,057,344 | ---- | C] (NexiTech, Inc.) -- C:\Windows\SysWow64\Wnaspint.dll
[2010.06.08 03:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acoustica Shared Effects
[2010.06.08 03:18:49 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\Documents\Any DVD Converter Professional
[2010.06.08 03:02:46 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Any DVD Converter Professional
[2010.06.08 03:00:37 | 002,535,424 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamj.dll
[2010.06.08 03:00:37 | 000,610,304 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamg.dll
[2010.06.08 03:00:37 | 000,090,112 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaami.dll
[2010.06.08 03:00:36 | 000,372,736 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamc.dll
[2010.06.07 13:31:21 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images
[2010.06.07 13:16:37 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\DAEMON Tools Lite
[2010.06.07 13:16:29 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010.06.07 13:13:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
[2010.06.07 13:13:08 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\Documents\My ISO Files
[2010.06.07 12:48:33 | 000,050,824 | ---- | C] (SlySoft Inc.) -- C:\Windows\SysNative\drivers\maploml.sys
[2010.06.07 12:48:33 | 000,049,288 | ---- | C] (SlySoft Inc.) -- C:\Windows\SysNative\drivers\maplom.sys
[2010.06.07 11:35:46 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Thinstall
[2010.06.07 11:34:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reallusion
[2010.06.07 11:34:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Reallusion
[2010.06.07 11:32:17 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\InstallShield
[2010.06.07 11:31:46 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\LiveCraft
[2010.06.07 09:25:01 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\Documents\Bluetooth
[2010.06.07 09:25:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Bluetooth
[2010.06.07 09:16:33 | 000,063,248 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\VcommMgr.sys
[2010.06.07 09:16:33 | 000,049,680 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\BTHidMgr.sys
[2010.06.07 09:16:33 | 000,047,120 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\VComm.sys
[2010.06.07 09:16:33 | 000,044,688 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\btcusb.sys
[2010.06.07 09:16:33 | 000,038,160 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\blueletaudio.sys
[2010.06.07 09:16:33 | 000,037,648 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\BlueletSCOAudio.sys
[2010.06.07 09:16:33 | 000,024,976 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\VBTEnum.sys
[2010.06.07 09:16:33 | 000,023,184 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\VHIDMini.sys
[2010.06.07 09:16:33 | 000,019,728 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\drivers\BtNetDrv.sys
[2010.06.07 09:16:33 | 000,016,144 | ---- | C] (IVT Corporation.) -- C:\Windows\SysNative\btinstall.dll
[2010.06.07 07:53:48 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\GHISLER
[2010.06.07 07:51:46 | 000,019,432 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\drivers\cpuz132_x64.sys
[2010.06.07 07:30:53 | 000,346,144 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2010.06.07 07:30:53 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2010.06.07 05:00:58 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Microsoft Games
[2010.06.07 04:58:50 | 000,000,000 | ---D | C] -- C:\Emux
[2010.06.07 03:08:10 | 000,000,000 | ---D | C] -- C:\ProgramData\SlySoft
[2010.06.07 02:22:07 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Ashampoo
[2010.06.07 02:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo
[2010.06.07 00:40:13 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\NVIDIA
[2010.06.07 00:38:41 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\Documents\CyberLink
[2010.06.07 00:38:41 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\CyberLink
[2010.06.07 00:21:05 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2010.06.07 00:20:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cyberlink
[2010.06.07 00:20:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CyberLink
[2010.06.07 00:18:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp
[2010.06.07 00:05:29 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\Dokumenty
[2010.06.06 23:37:21 | 000,000,000 | -H-D | C] -- C:\Users\Skynet-2010\kbpki
[2010.06.06 23:36:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010.06.06 23:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010.06.06 22:03:34 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\IObit
[2010.06.06 21:42:39 | 000,034,632 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2010.06.06 21:42:33 | 000,036,168 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2010.06.06 21:42:30 | 000,030,024 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2010.06.06 21:42:30 | 000,025,928 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2010.06.06 21:42:29 | 000,021,320 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2010.06.06 21:42:12 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\TuneUp Software
[2010.06.06 21:40:33 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2010.06.06 21:40:22 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010.06.06 20:00:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2010.06.06 19:59:59 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2010.06.06 19:59:56 | 000,419,840 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2010.06.06 19:59:56 | 000,413,696 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2010.06.06 19:59:56 | 000,133,632 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2010.06.06 19:59:56 | 000,110,592 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2010.06.06 19:59:55 | 002,873,820 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll

[2010.06.06 19:59:54 | 001,908,736 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2010.06.06 19:59:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2010.06.06 19:58:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2010.06.06 19:58:05 | 000,011,264 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL
[2010.06.06 19:40:40 | 000,000,000 | RH-D | C] -- C:\Users\Skynet-2010\Videos
[2010.06.06 19:40:40 | 000,000,000 | RH-D | C] -- C:\Users\Skynet-2010\Pictures
[2010.06.06 19:40:39 | 000,000,000 | RH-D | C] -- C:\Users\Skynet-2010\Music
[2010.06.06 19:32:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2010.06.06 19:32:11 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010.06.06 19:31:53 | 002,719,504 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2010.06.06 19:31:53 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2010.06.06 19:31:53 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2010.06.06 19:31:53 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2010.06.06 19:31:53 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2010.06.06 19:31:49 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2010.06.06 19:31:49 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2010.06.06 19:31:49 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2010.06.06 19:31:49 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2010.06.06 19:31:49 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2010.06.06 19:31:49 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2010.06.06 19:31:46 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2010.06.06 19:31:46 | 000,325,904 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010.06.06 19:31:40 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2010.06.06 19:31:40 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2010.06.06 19:31:40 | 000,338,848 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2010.06.06 19:31:39 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2010.06.06 19:31:39 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2010.06.06 19:31:39 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2010.06.06 19:31:38 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2010.06.06 19:31:38 | 000,123,664 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2010.06.06 19:31:38 | 000,122,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2010.06.06 19:31:37 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2010.06.06 19:31:37 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2010.06.06 19:31:37 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2010.06.06 19:31:37 | 000,123,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2010.06.06 19:31:33 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010.06.06 19:31:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010.06.06 19:31:28 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2010.06.06 19:31:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010.06.06 18:08:29 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2010.06.06 18:08:28 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Sun
[2010.06.06 18:02:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010.06.06 18:02:03 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010.06.06 17:50:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2010.06.06 17:43:31 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\WindowsUpdate
[2010.06.06 17:35:39 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010.06.06 17:34:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010.06.06 17:34:45 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010.06.06 17:32:59 | 000,064,616 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010.06.06 17:32:59 | 000,056,424 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010.06.06 05:43:38 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\WinRAR
[2010.06.06 04:28:48 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\aicon
[2010.06.06 03:34:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2010.06.06 03:34:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2010.06.06 02:45:30 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Macromedia
[2010.06.06 02:45:30 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Adobe
[2010.06.06 02:45:25 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010.06.06 02:20:22 | 000,000,000 | ---D | C] -- C:\Program Files\Vertex Wireless
[2010.06.06 02:19:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Vertex Wireless
[2010.06.06 02:03:58 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2010.06.06 02:03:45 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\SUPERAntiSpyware.com
[2010.06.06 02:02:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010.06.06 01:58:56 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2010.06.06 01:32:05 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Thunderbird
[2010.06.06 01:32:05 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Thunderbird
[2010.06.06 00:46:04 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Mozilla
[2010.06.06 00:46:04 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Mozilla
[2010.06.05 21:35:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2010.06.05 21:34:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Designer
[2010.06.05 21:34:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft FrontPage
[2010.06.05 21:33:22 | 000,000,000 | ---D | C] -- C:\Windows\Msagent
[2010.06.05 21:31:38 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Microsoft Web Folders
[2010.06.05 21:31:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010.06.05 21:29:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010.06.05 08:28:16 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\6-Pocitacove Hry
[2010.06.05 08:28:15 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\3-Filmy
[2010.06.05 08:28:15 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\2-Hudba
[2010.06.05 08:28:15 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\1-Obrázky
[2010.06.05 08:28:15 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\5-Pocitacova Zakladna
[2010.06.05 08:28:15 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\4-Postova Schranka
[2010.06.04 07:37:32 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010.06.04 07:00:57 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Identities
[2010.06.04 07:00:56 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\Contacts
[2010.06.04 07:00:55 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\VirtualStore
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\AppData\Local\Temporary Internet Files
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Šablony
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Soubory cookie
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\SendTo
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Poslední
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Okolní tiskárny
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Okolní síť
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Nabídka Start
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Local Settings
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\AppData\Local\History
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Dokumenty
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\Data aplikací
[2010.06.04 07:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Skynet-2010\AppData\Local\Data aplikací
[2010.06.04 07:00:48 | 000,000,000 | --SD | C] -- C:\Users\Skynet-2010\AppData\Roaming\Microsoft
[2010.06.04 07:00:48 | 000,000,000 | RH-D | C] -- C:\Users\Skynet-2010\Desktop
[2010.06.04 07:00:48 | 000,000,000 | R--D | C] -- C:\Users\Skynet-2010\Favorites
[2010.06.04 07:00:48 | 000,000,000 | -H-D | C] -- C:\Users\Skynet-2010\AppData
[2010.06.04 07:00:48 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Temp
[2010.06.04 07:00:48 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Local\Microsoft
[2010.06.04 07:00:48 | 000,000,000 | ---D | C] -- C:\Users\Skynet-2010\AppData\Roaming\Media Center Programs
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010.06.04 07:00:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2010.06.04 06:41:29 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010.06.04 06:38:52 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010.06.04 06:38:26 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010.03.31 08:24:18 | 000,124,760 | ---- | C] (ESET) -- C:\Windows\SysNative\drivers\epfwwfpr.sys
[2010.03.31 08:22:38 | 000,139,704 | ---- | C] (ESET) -- C:\Windows\SysNative\drivers\ehdrv.sys
[2010.03.31 08:17:56 | 000,164,912 | ---- | C] (ESET) -- C:\Windows\SysNative\drivers\eamonm.sys

========== Files - Modified Within 90 Days ==========

[2010.06.12 03:49:22 | 001,572,864 | -H-- | M] () -- C:\Users\Skynet-2010\ntuser.dat
[2010.06.12 03:33:27 | 001,445,734 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.06.12 03:33:27 | 000,622,422 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.06.12 03:33:27 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.06.12 03:33:27 | 000,118,604 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.06.12 03:33:27 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.06.12 03:27:46 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.06.12 03:27:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.06.12 03:27:29 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.06.12 03:26:13 | 000,019,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.06.12 03:26:13 | 000,019,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.06.12 03:25:36 | 005,911,713 | -H-- | M] () -- C:\Users\Skynet-2010\AppData\Local\IconCache.db
[2010.06.12 02:45:09 | 254,941,020 | ---- | M] () -- C:\Users\Skynet-2010\Documents\BackupRegistry(20100612).reg
[2010.06.12 01:50:51 | 000,034,308 | ---- | M] () -- C:\Windows\SysWow64\BASSMOD.dll
[2010.06.12 01:04:24 | 000,001,743 | ---- | M] () -- C:\Users\Public\Desktop\Windows 7 Manager.lnk
[2010.06.11 09:40:53 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys
[2010.06.11 09:40:53 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref
[2010.06.10 21:58:03 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2010.06.10 21:58:03 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2010.06.10 21:58:03 | 000,065,536 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TM.blf
[2010.06.10 21:27:30 | 001,310,720 | -H-- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT_tureg_old
[2010.06.10 19:27:56 | 000,000,017 | ---- | M] () -- C:\Users\Skynet-2010\AppData\Local\resmon.resmoncfg
[2010.06.10 10:52:17 | 000,100,848 | ---- | M] () -- C:\Users\Skynet-2010\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.06.10 10:39:03 | 000,361,192 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.06.10 09:54:15 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2010.06.08 07:42:02 | 000,021,598 | ---- | M] () -- C:\Windows\SysNative\oemlogo.bmp
[2010.06.08 06:01:54 | 000,002,471 | ---- | M] () -- C:\Windows\SysWow64\FlyerPro.002
[2010.06.08 05:58:04 | 000,000,023 | ---- | M] () -- C:\Windows\fls.002
[2010.06.08 05:53:14 | 000,000,674 | ---- | M] () -- C:\Users\Skynet-2010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tapety 2.01.lnk
[2010.06.08 03:00:38 | 000,000,039 | ---- | M] () -- C:\Windows\SysWow64\winitn.dll
[2010.06.08 03:00:37 | 002,535,424 | ---- | M] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamj.dll
[2010.06.08 03:00:37 | 000,610,304 | ---- | M] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamg.dll
[2010.06.08 03:00:37 | 000,372,736 | ---- | M] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaamc.dll
[2010.06.08 03:00:37 | 000,090,112 | ---- | M] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\agsaami.dll
[2010.06.08 03:00:36 | 000,053,760 | ---- | M] () -- C:\Windows\System\ppacklib.dll
[2010.06.07 15:52:01 | 000,000,400 | ---- | M] () -- C:\Windows\tasks\SmartDefrag.job
[2010.06.07 15:47:58 | 000,065,536 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TM.blf
[2010.06.07 15:47:57 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TMContainer00000000000000000002.regtrans-ms
[2010.06.07 15:47:57 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TMContainer00000000000000000001.regtrans-ms
[2010.06.07 13:18:45 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2010.06.07 13:18:45 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2010.06.07 13:18:45 | 000,065,536 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TM.blf
[2010.06.07 13:09:00 | 000,000,044 | -HS- | M] () -- C:\ProgramData\.zreglib
[2010.06.07 12:49:45 | 000,000,028 | ---- | M] () -- C:\Windows\SysWow64\mcheck.mhf
[2010.06.07 11:41:18 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2010.06.07 11:34:38 | 000,000,080 | RHS- | M] () -- C:\Windows\CT4MET.BIN
[2010.06.07 09:17:32 | 000,000,032 | ---- | M] () -- C:\Windows\0
[2010.06.07 09:16:17 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\0
[2010.06.07 07:44:50 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2010.06.07 02:57:39 | 000,001,128 | R--- | M] () -- C:\Users\Skynet-2010\Desktop\Pocitacove Hry.lnk
[2010.06.07 02:53:08 | 000,001,173 | R--- | M] () -- C:\Users\Skynet-2010\Desktop\Pocitacova Zakladna.lnk
[2010.06.07 02:29:31 | 000,001,495 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Windows Media Player.lnk
[2010.06.07 02:28:12 | 000,000,756 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Dokumenty.lnk
[2010.06.07 02:20:38 | 000,001,596 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Napalovacka Ashampo.lnk
[2010.06.07 01:11:25 | 000,000,742 | ---- | M] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk
[2010.06.07 00:56:14 | 000,871,408 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010.06.07 00:25:13 | 000,001,213 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Pocitacova Siet.lnk
[2010.06.07 00:24:02 | 000,001,219 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Centralny Pocitac.lnk
[2010.06.07 00:20:57 | 000,001,011 | R--- | M] () -- C:\Users\Public\Desktop\DVD Prehravac.lnk
[2010.06.06 19:59:56 | 000,419,840 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2010.06.06 19:59:56 | 000,413,696 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2010.06.06 19:59:56 | 000,133,632 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2010.06.06 19:59:56 | 000,110,592 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2010.06.06 19:58:46 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2010.06.06 00:46:05 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat
[2010.06.05 21:35:38 | 000,000,384 | ---- | M] () -- C:\Windows\ODBC.INI
[2010.06.05 21:35:36 | 000,000,035 | ---- | M] () -- C:\Windows\vbaddin.ini
[2010.06.05 06:45:59 | 000,001,409 | ---- | M] () -- C:\Users\Skynet-2010\Desktop\Internet Explorer.lnk
[2010.06.04 07:19:29 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010.06.04 07:19:29 | 000,524,288 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010.06.04 07:19:29 | 000,065,536 | -HS- | M] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010.06.04 07:00:50 | 000,000,020 | -HS- | M] () -- C:\Users\Skynet-2010\ntuser.ini
[2010.06.04 06:42:08 | 000,060,295 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010.06.04 06:42:08 | 000,060,295 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2010.06.04 06:40:57 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\UC.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\RAR.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\PKZIP.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\PKUNZIP.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\NOCLOSE.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\LHA.PIF
[2010.05.19 07:55:00 | 000,000,545 | ---- | M] () -- C:\Windows\ARJ.PIF
[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.04.29 15:39:28 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.03.31 08:24:18 | 000,124,760 | ---- | M] (ESET) -- C:\Windows\SysNative\drivers\epfwwfpr.sys
[2010.03.31 08:22:38 | 000,139,704 | ---- | M] (ESET) -- C:\Windows\SysNative\drivers\ehdrv.sys
[2010.03.31 08:17:56 | 000,164,912 | ---- | M] (ESET) -- C:\Windows\SysNative\drivers\eamonm.sys
[2010.03.17 06:09:10 | 000,338,848 | ---- | M] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2010.03.16 08:51:59 | 000,064,616 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010.03.16 08:51:59 | 000,056,424 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010.03.16 08:51:59 | 000,009,832 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2010.03.16 02:52:54 | 000,276,196 | ---- | M] () -- C:\Windows\SysNative\NvApps.xml
[2010.03.16 02:52:54 | 000,066,714 | ---- | M] () -- C:\Windows\SysNative\NvwsApps.xml

========== Files Created - No Company Name ==========

[2010.06.12 02:08:52 | 254,941,020 | ---- | C] () -- C:\Users\Skynet-2010\Documents\BackupRegistry(20100612).reg
[2010.06.12 01:50:51 | 000,034,308 | ---- | C] () -- C:\Windows\SysWow64\BASSMOD.dll
[2010.06.12 01:04:24 | 000,001,743 | ---- | C] () -- C:\Users\Public\Desktop\Windows 7 Manager.lnk
[2010.06.11 11:00:34 | 007,572,224 | ---- | C] () -- C:\Windows\SysNative\CT8MGM.SF2
[2010.06.11 11:00:26 | 007,572,224 | ---- | C] () -- C:\Windows\SysWow64\CT8MGM.SF2
[2010.06.11 05:31:45 | 000,008,897 | ---- | C] () -- C:\Windows\SysWow64\CTAPO64.cat
[2010.06.11 05:31:45 | 000,003,348 | ---- | C] () -- C:\Windows\SysWow64\ludap17.ini
[2010.06.11 05:31:45 | 000,000,078 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2010.06.10 21:30:04 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2010.06.10 21:30:04 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2010.06.10 21:30:04 | 000,065,536 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{df3fae5c-74c5-11df-913e-806e6f6e6963}.TM.blf
[2010.06.10 19:27:56 | 000,000,017 | ---- | C] () -- C:\Users\Skynet-2010\AppData\Local\resmon.resmoncfg
[2010.06.10 09:19:45 | 000,000,349 | ---- | C] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2010.06.08 07:39:48 | 000,021,598 | ---- | C] () -- C:\Windows\SysNative\oemlogo.bmp
[2010.06.08 05:58:04 | 000,000,023 | ---- | C] () -- C:\Windows\fls.002
[2010.06.08 05:53:14 | 000,000,674 | ---- | C] () -- C:\Users\Skynet-2010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tapety 2.01.lnk
[2010.06.08 03:00:38 | 000,000,039 | ---- | C] () -- C:\Windows\SysWow64\winitn.dll
[2010.06.08 03:00:36 | 000,053,760 | ---- | C] () -- C:\Windows\System\ppacklib.dll
[2010.06.08 03:00:32 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2010.06.07 15:00:01 | 000,000,400 | ---- | C] () -- C:\Windows\tasks\SmartDefrag.job
[2010.06.07 14:31:20 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TMContainer00000000000000000002.regtrans-ms
[2010.06.07 14:31:17 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TMContainer00000000000000000001.regtrans-ms
[2010.06.07 14:31:15 | 000,065,536 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat{4fadac41-722e-11df-baaa-0011679e9e9f}.TM.blf
[2010.06.07 13:04:34 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2010.06.07 13:04:34 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2010.06.07 13:04:32 | 000,065,536 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{ea571ed3-7223-11df-b014-806e6f6e6963}.TM.blf
[2010.06.07 13:02:16 | 000,000,000 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT_tureg_new.LOG2
[2010.06.07 13:02:16 | 000,000,000 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT_tureg_new.LOG1
[2010.06.07 12:49:45 | 000,000,028 | ---- | C] () -- C:\Windows\SysWow64\mcheck.mhf
[2010.06.07 11:41:18 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2010.06.07 11:34:38 | 000,000,080 | RHS- | C] () -- C:\Windows\CT4MET.BIN
[2010.06.07 09:16:33 | 000,032,832 | ---- | C] () -- C:\Windows\SysNative\drivers\BTNetFilter.sys
[2010.06.07 09:16:17 | 000,000,032 | ---- | C] () -- C:\Windows\0
[2010.06.07 09:16:17 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\0
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2010.06.07 07:53:48 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2010.06.07 07:48:53 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2010.06.07 07:48:53 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref
[2010.06.07 07:44:49 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2010.06.07 07:30:53 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2010.06.07 04:19:17 | 000,000,044 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.06.07 02:36:35 | 000,001,173 | R--- | C] () -- C:\Users\Skynet-2010\Desktop\Pocitacova Zakladna.lnk
[2010.06.07 02:36:35 | 000,001,128 | R--- | C] () -- C:\Users\Skynet-2010\Desktop\Pocitacove Hry.lnk
[2010.06.07 02:17:48 | 000,001,596 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Napalovacka Ashampo.lnk
[2010.06.07 01:11:25 | 000,000,742 | ---- | C] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk
[2010.06.07 00:56:14 | 000,871,408 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010.06.07 00:20:57 | 000,001,011 | R--- | C] () -- C:\Users\Public\Desktop\DVD Prehravac.lnk
[2010.06.06 21:39:22 | 000,206,848 | ---- | C] () -- C:\Windows\SysNative\unrar.dll
[2010.06.06 21:39:21 | 000,100,352 | ---- | C] () -- C:\Windows\SysNative\ff_vfw.dll
[2010.06.06 20:00:59 | 004,174,814 | ---- | C] () -- C:\Windows\SysWow64\CT4MGM.SF2
[2010.06.06 20:00:59 | 004,174,814 | ---- | C] () -- C:\Windows\SysNative\CT4MGM.SF2
[2010.06.06 20:00:59 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2
[2010.06.06 20:00:59 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2
[2010.06.06 20:00:56 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2010.06.06 19:58:46 | 000,190,976 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2010.06.06 19:58:46 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010.06.06 19:58:46 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2010.06.06 19:58:46 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010.06.06 19:58:46 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2010.06.06 17:33:00 | 000,009,832 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2010.06.06 04:23:45 | 000,001,495 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Windows Media Player.lnk
[2010.06.06 00:46:05 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010.06.05 21:35:38 | 000,000,384 | ---- | C] () -- C:\Windows\ODBC.INI
[2010.06.05 08:26:14 | 000,000,756 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Dokumenty.lnk
[2010.06.05 07:08:16 | 000,001,219 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Centralny Pocitac.lnk
[2010.06.05 06:55:42 | 000,001,213 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Pocitacova Siet.lnk
[2010.06.05 06:45:59 | 000,001,409 | ---- | C] () -- C:\Users\Skynet-2010\Desktop\Internet Explorer.lnk
[2010.06.04 07:00:50 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010.06.04 07:00:50 | 000,524,288 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010.06.04 07:00:50 | 000,065,536 | -HS- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010.06.04 07:00:50 | 000,000,020 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.ini
[2010.06.04 07:00:48 | 001,572,864 | -H-- | C] () -- C:\Users\Skynet-2010\ntuser.dat
[2010.06.04 07:00:48 | 001,310,720 | -H-- | C] () -- C:\Users\Skynet-2010\NTUSER.DAT_tureg_old
[2010.06.04 07:00:48 | 000,262,144 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat.LOG1
[2010.06.04 07:00:48 | 000,000,000 | -HS- | C] () -- C:\Users\Skynet-2010\ntuser.dat.LOG2
[2010.06.04 06:40:57 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.06.04 06:38:26 | 3220,037,632 | -HS- | C] () -- C:\hiberfil.sys
[2010.03.16 02:52:54 | 000,276,196 | ---- | C] () -- C:\Windows\SysNative\NvApps.xml
[2010.03.16 02:52:54 | 000,066,714 | ---- | C] () -- C:\Windows\SysNative\NvwsApps.xml
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2007.12.04 13:20:30 | 000,001,489 | ---- | C] () -- C:\Windows\P17EP51.ini
[2007.06.07 13:25:42 | 000,001,578 | ---- | C] () -- C:\Windows\P17EPLS.ini
[2007.04.09 09:42:00 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\OemSpiE.dll
[2007.03.20 17:23:56 | 000,001,669 | ---- | C] () -- C:\Windows\P17EP.ini
[2006.10.09 00:29:22 | 000,032,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\BTNetFilter.sys
[2005.10.05 16:12:31 | 000,000,105 | ---- | C] () -- C:\Windows\SysWow64\OSENXPSUITE2005.INI
[2000.01.07 02:00:00 | 000,022,224 | ---- | C] () -- C:\Windows\sysgtime.dll
[2000.01.07 02:00:00 | 000,022,224 | ---- | C] () -- C:\Windows\SysWow64\proclsvr.drv
[1999.01.22 19:46:58 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\MSRTEDIT.DLL

========== LOP Check ==========

[2010.06.06 04:28:48 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\aicon
[2010.06.08 03:18:49 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Any DVD Converter Professional
[2010.06.07 02:22:53 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Ashampoo
[2010.06.07 13:31:05 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\DAEMON Tools Lite
[2010.06.07 07:53:48 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\GHISLER
[2010.06.06 22:03:34 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\IObit
[2010.06.08 05:19:17 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Marine Aquarium 3
[2010.06.08 05:56:07 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\My Pictures 3D
[2010.06.07 11:35:46 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Thinstall
[2010.06.06 01:32:07 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\Thunderbird
[2010.06.06 21:42:12 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\TuneUp Software
[2010.06.08 04:56:03 | 000,000,000 | ---D | M] -- C:\Users\Skynet-2010\AppData\Roaming\VitySoft
[2009.07.14 07:08:49 | 000,009,260 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.06.07 15:52:01 | 000,000,400 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010.06.12 03:27:29 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.06.12 03:27:38 | 4293,386,240 | -HS- | M] () -- C:\pagefile.sys

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\drivers\*.sys /90 >
[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys
< End of report >

Ahoj!
Prosím Tě , řešíš stejný problém na dvou fórech , to nelze!!!
http://www.viry.cz/forum/viewtopic.php? ... d4cfdee99c

Radím Ti pokračivat tam a tady to uzavřít , jistě chápeš , že nemůžu sledovat co si udělala tam a tady s tím počítat a pokračovat.

Prosím zde to uzavři , zelenou fajfkou , hodně štěstí tam!!

Ahoj,az ted ti odpovidam,promin nezlob se to jsem nevedela,ze to se nesmi neudelala jsem to umyslne.Myslela jsem,ci vice lidi tim pro me lepe,muzeme to ted klidne uzavrit

Problem je vyresen,musela jsem vsechno preinstalovat a udelat pred instalaci formatovani HDD.

Windows-Module Instaler,uz pracuje spravne po pripojeni na sit
Antivirak se mi,uz sam od sebe nevypina
Podpora Obnoveni systemu opat aktivna
Aktualizace se mi znovu zobrazuji a Start W-7 je rychli tak jak jsem to ocekavala

Ted jsem dokoncila reinstalaci a instalovani porgramu a pc her v kazdem pripade ti dekuji za ochotu.Ja jim tam napisu,ze problem jsem vyresila nebyla,uz jina moznost na zachranu,cim dale to slo pomalejsi a dokonce se mi zacinal sam od sebe vypinat antivirus.

Nemáš vůbec zač , všechno si zvládla sama .Na dvou fórech se to řešit opravdu nedá , nevím co Ti radili a co si udělala na jiném fóru -to prostě nejde.

Příště je třeba postupovat dle rad jen na jednom fóru , i když to víc trvá. Nejde při každém problému taky formátovat a instalovat systém a programy.

Měj se a tady můžeš dát zelenou fajfku a označit téma za vyřešené.