PC-HELP.CZ

Konfigurace: Intel Celron 2,4 GHz 2x512 MB RAM DDR333 ATi Radeon x1650


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:58:47, on 5.7.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\taskeng.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\Taskmgr.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Windows\System32\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 5675 bytes

Ahoj,
odinstaluj Daemon tools toolbar

Stahni CCleaner http://www.filehippo.com/download_cclea ... cbae6b492/
-nainstaluj (neinstaluj Yahoo toolbar)

-zvol záložku Čistič
-nechej v levém sloupečku zatrhnuté vše jak je a zmáčkni tlačítko analyzovat
-pak potvrď tlačítko Spustit Ccleaner
-tím se vyčistí počítač od dočasných soubborů, doporučuji pravidelně používat.

-vyber záložku registry
-klikni na tlačítko hledej problémy
-pak klikni na opravit vybrané problémy, potvrď, že chceš udělat zálohu a nech všechno opravit

**********************

Stahni Rsit http://images.malwareremoval.com/random/RSIT.exe
-spusť, klikni na tlačítko Continue
-po skenu na tebe vyběhne log.txt,obsah vlož zde


*********************

Stahni Mbam http://download.cnet.com/3001-8022_4-10 ... l-10804572
-nainstaluj, aktualizuj
-udělej uplný sken a vlož sem log

Logfile of random's system information tool 1.07 (written by random/random)
Run by Momak at 2010-07-06 14:09:28
Microsoft® Windows Vista™ Ultimate
System drive C: has 3 GB (8%) free of 40 GB
Total RAM: 1023 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:09:59, on 6.7.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\USB TV\EM28XX\BDARemote.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\QIP 2010\qip.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Momak\Downloads\RSIT.exe
C:\Program Files\trend micro\Momak.exe
C:\Users\Momak\AppData\Local\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Windows\System32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VIARaidUtl] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: BDARemote.lnk = ?
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: VRAID Log Service - Unknown owner - C:\Program Files\VIA\RAID\vialogsv.exe

--
End of file - 5836 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-120455064-1232677664-4241833918-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-120455064-1232677664-4241833918-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-06-25 278192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll [2010-06-07 814648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-06-25 278192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-02 1004136]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-12 37888]
"QuickTime Task"=C:\Windows\System32\qttask.exe [2010-06-23 98304]
"VIARaidUtl"=C:\Program Files\VIA\RAID\raid_tool.exe [2010-03-05 2375392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-06-04 39408]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]
"Google Update"=C:\Users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-24 136176]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-06-08 133368]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
BDARemote.lnk - C:\Program Files\USB TV\EM28XX\BDARemote.exe

C:\Users\Momak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6537e8f3-748a-11df-819c-000b6a27cd9b}]
shell\AutoRun\command - F:\wubi.exe --cdmenu


======List of files/folders created in the last 1 months======

2010-07-05 23:26:25 ----D---- C:\Users\Momak\AppData\Roaming\Malwarebytes
2010-07-05 23:25:54 ----D---- C:\ProgramData\Malwarebytes
2010-07-05 23:25:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-05 23:06:31 ----D---- C:\rsit
2010-07-05 22:44:06 ----D---- C:\Program Files\CCleaner
2010-07-05 21:14:18 ----D---- C:\Program Files\DIFX
2010-07-05 21:04:13 ----D---- C:\Program Files\USB TV
2010-07-05 21:02:31 ----D---- C:\Users\Momak\AppData\Roaming\InstallShield
2010-07-05 20:17:31 ----N---- C:\Windows\system32\difxapi.dll
2010-07-05 20:17:30 ----D---- C:\Program Files\VIA
2010-07-05 19:57:46 ----D---- C:\Program Files\Trend Micro
2010-07-05 19:09:42 ----A---- C:\Windows\IsUninst.exe
2010-07-05 18:21:21 ----A---- C:\Windows\level.ini
2010-07-03 23:14:15 ----D---- C:\Windows\Crack
2010-07-03 00:31:18 ----D---- C:\Users\Momak\AppData\Roaming\ICQ
2010-07-03 00:30:22 ----D---- C:\Program Files\ICQ7.1
2010-07-01 07:55:17 ----D---- C:\Users\Momak\AppData\Roaming\Real
2010-06-24 13:15:06 ----D---- C:\Program Files\Bullfrog
2010-06-24 13:14:45 ----A---- C:\Windows\uninst.exe
2010-06-23 21:39:05 ----A---- C:\Windows\system32\qttask.exe
2010-06-23 21:17:07 ----A---- C:\Windows\system32\rmoc3260.dll
2010-06-23 21:17:07 ----A---- C:\Windows\system32\pndx5032.dll
2010-06-23 21:17:07 ----A---- C:\Windows\system32\pndx5016.dll
2010-06-23 21:17:07 ----A---- C:\Windows\system32\pncrt.dll
2010-06-23 21:17:00 ----D---- C:\Windows\system32\QuickTime
2010-06-23 21:16:59 ----A---- C:\Windows\system32\MSVCR71.dll
2010-06-23 21:16:58 ----A---- C:\Windows\mmtvmj.ini
2010-06-23 21:16:57 ----A---- C:\Windows\m3jpeg.ini
2010-06-23 21:16:57 ----A---- C:\Windows\m3jp2k.ini
2010-06-23 21:16:53 ----A---- C:\Windows\system32\mplvpx.dll
2010-06-23 21:16:53 ----A---- C:\Windows\system32\mplvm6.dll
2010-06-23 21:16:53 ----A---- C:\Windows\system32\mplva6.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\mplvw7.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\mplaw7.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\mplapx.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\mplam6.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\mplaa6.dll
2010-06-23 21:16:52 ----A---- C:\Windows\system32\cpuinf32.dll
2010-06-23 21:16:48 ----A---- C:\Windows\system32\unrar.dll
2010-06-23 21:16:45 ----A---- C:\Windows\system32\xvidcore.dll
2010-06-23 21:16:39 ----D---- C:\Program Files\ACE Mega CoDecS Pack
2010-06-23 20:58:20 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-06-23 20:58:20 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-06-23 20:58:17 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-06-23 20:58:16 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-06-23 20:58:14 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-06-23 20:58:12 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-06-23 20:58:10 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-06-23 20:58:08 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-06-23 20:58:04 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-06-23 20:58:04 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-06-23 20:58:02 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-06-23 20:58:00 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-06-23 20:57:56 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-06-23 20:57:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-06-23 20:57:54 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-06-23 20:57:52 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-06-23 20:57:48 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-06-23 20:57:45 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-06-23 20:57:44 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-06-23 20:57:41 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-06-23 20:57:37 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-06-23 20:57:36 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-06-23 20:57:33 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-06-23 20:57:29 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-06-23 20:57:27 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-06-23 20:57:26 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-06-23 20:57:24 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-06-23 20:57:24 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-06-23 20:57:21 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-06-23 20:57:17 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-06-23 20:57:17 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-06-23 20:57:15 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-06-23 20:57:13 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-06-23 20:57:09 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-06-23 20:57:09 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-06-23 20:57:07 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-06-23 20:57:04 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-06-23 20:57:04 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-06-23 20:57:01 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-06-23 20:57:01 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-06-23 20:56:58 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-06-23 20:56:57 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-06-23 20:56:54 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-06-23 20:56:53 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-06-23 20:56:49 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-06-23 20:56:45 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-06-23 20:56:43 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-06-23 20:56:42 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-06-23 20:56:39 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-06-23 20:56:39 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-06-23 20:56:37 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-06-23 20:56:34 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-06-23 20:56:29 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-06-23 20:56:29 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-06-23 20:56:26 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-06-23 20:56:22 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-06-23 20:56:20 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-06-23 20:56:20 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-06-23 20:56:17 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-06-23 20:56:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-06-23 20:56:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-06-23 20:56:10 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-06-23 20:56:10 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-06-23 20:56:06 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-06-23 20:56:04 ----A---- C:\Windows\system32\xinput1_3.dll
2010-06-23 20:56:01 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-06-23 20:55:58 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-06-23 20:55:58 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-06-23 20:55:53 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-06-23 20:55:49 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-06-23 20:55:46 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-06-23 20:55:45 ----A---- C:\Windows\system32\d3dx10.dll
2010-06-23 20:55:41 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-06-23 20:55:37 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-06-23 20:55:37 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-06-23 20:55:35 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-06-23 20:55:32 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-06-23 20:55:31 ----A---- C:\Windows\system32\xinput1_2.dll
2010-06-23 20:55:29 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-06-23 20:55:27 ----A---- C:\Windows\system32\xinput1_1.dll
2010-06-23 20:55:25 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-06-23 20:55:08 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-06-23 20:55:01 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-06-23 20:55:00 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-06-23 20:54:57 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-06-23 20:54:54 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-06-23 20:54:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-06-23 20:54:48 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-06-23 20:54:46 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-06-23 20:54:43 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-06-23 20:40:28 ----HD---- C:\Windows\msdownld.tmp
2010-06-23 20:40:19 ----D---- C:\Windows\system32\directx
2010-06-23 20:15:47 ----D---- C:\Program Files\EA SPORTS
2010-06-23 18:17:40 ----D---- C:\Program Files\Winamp Detect
2010-06-23 18:16:53 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-06-23 18:16:48 ----D---- C:\Users\Momak\AppData\Roaming\Winamp
2010-06-23 18:16:48 ----D---- C:\Program Files\Winamp
2010-06-12 13:46:53 ----D---- C:\Users\Momak\AppData\Roaming\OpenOffice.org
2010-06-12 13:30:43 ----D---- C:\Program Files\OpenOffice.org 3
2010-06-11 17:01:10 ----D---- C:\Users\Momak\AppData\Roaming\Leadertech
2010-06-11 16:43:27 ----D---- C:\Program Files\Atari
2010-06-10 14:34:26 ----D---- C:\Program Files\Infogrames Interactive
2010-06-10 14:34:24 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-10 14:32:15 ----D---- C:\Program Files\Common Files\InstallShield
2010-06-09 19:25:37 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-06-09 19:10:22 ----D---- C:\Program Files\DAEMON Tools Lite
2010-06-09 19:10:00 ----D---- C:\Users\Momak\AppData\Roaming\DAEMON Tools Lite
2010-06-09 19:09:41 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-08 18:24:26 ----A---- C:\Windows\UniFish3.exe
2010-06-08 12:54:21 ----D---- C:\Windows\system32\WindowsPowerShell
2010-06-08 02:30:27 ----A---- C:\Windows\system32\t2embed.dll
2010-06-08 02:30:26 ----A---- C:\Windows\system32\lpk.dll
2010-06-08 02:30:26 ----A---- C:\Windows\system32\atmlib.dll
2010-06-08 02:30:26 ----A---- C:\Windows\system32\atmfd.dll
2010-06-08 02:30:25 ----A---- C:\Windows\system32\fontsub.dll
2010-06-08 02:30:25 ----A---- C:\Windows\system32\dciman32.dll
2010-06-08 02:24:35 ----A---- C:\Windows\system32\winipsec.dll
2010-06-08 02:24:35 ----A---- C:\Windows\system32\polstore.dll
2010-06-08 02:24:35 ----A---- C:\Windows\system32\IPSECSVC.DLL
2010-06-08 02:24:35 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2010-06-08 01:44:39 ----A---- C:\Windows\system32\ACCTRES.dll
2010-06-08 01:44:38 ----A---- C:\Windows\system32\msoeacct.dll
2010-06-08 01:44:37 ----A---- C:\Windows\system32\msoert2.dll
2010-06-08 01:31:47 ----A---- C:\Windows\system32\netevent.dll
2010-06-08 01:31:46 ----A---- C:\Windows\system32\MRINFO.EXE
2010-06-08 01:31:45 ----A---- C:\Windows\system32\TCPSVCS.EXE
2010-06-08 01:31:45 ----A---- C:\Windows\system32\netiohlp.dll
2010-06-08 01:31:45 ----A---- C:\Windows\system32\HOSTNAME.EXE
2010-06-08 01:31:44 ----A---- C:\Windows\system32\NETSTAT.EXE
2010-06-08 01:31:44 ----A---- C:\Windows\system32\finger.exe
2010-06-08 01:31:43 ----A---- C:\Windows\system32\ROUTE.EXE
2010-06-08 01:31:43 ----A---- C:\Windows\system32\ARP.EXE
2010-06-08 01:31:30 ----A---- C:\Windows\system32\tcpipcfg.dll
2010-06-08 01:31:30 ----A---- C:\Windows\system32\netiougc.exe
2010-06-08 01:18:40 ----A---- C:\Windows\system32\WebClnt.dll
2010-06-08 01:12:16 ----A---- C:\Windows\system32\L2SecHC.dll
2010-06-08 01:12:10 ----A---- C:\Windows\system32\wlanapi.dll
2010-06-08 01:12:09 ----A---- C:\Windows\system32\wlanmsm.dll
2010-06-08 01:12:09 ----A---- C:\Windows\system32\wlanhlp.dll
2010-06-08 01:12:08 ----A---- C:\Windows\system32\wlansvc.dll
2010-06-08 01:12:08 ----A---- C:\Windows\system32\wlansec.dll
2010-06-08 01:04:53 ----A---- C:\Windows\system32\msxml3.dll
2010-06-08 01:04:52 ----A---- C:\Windows\system32\msxml3r.dll
2010-06-08 01:04:49 ----A---- C:\Windows\system32\msxml6r.dll
2010-06-08 01:04:49 ----A---- C:\Windows\system32\msxml6.dll
2010-06-08 00:57:38 ----A---- C:\Windows\system32\msv1_0.dll
2010-06-08 00:47:13 ----A---- C:\Windows\system32\csrsrv.dll
2010-06-08 00:47:12 ----A---- C:\Windows\system32\winsrv.dll
2010-06-08 00:41:14 ----A---- C:\Windows\system32\mfps.dll
2010-06-08 00:41:14 ----A---- C:\Windows\system32\mf.dll
2010-06-08 00:41:13 ----A---- C:\Windows\system32\rrinstaller.exe
2010-06-08 00:41:13 ----A---- C:\Windows\system32\mfpmp.exe
2010-06-08 00:41:13 ----A---- C:\Windows\system32\mferror.dll
2010-06-08 00:41:11 ----A---- C:\Windows\system32\WMVCORE.DLL
2010-06-08 00:35:50 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-06-08 00:35:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-06-07 23:53:41 ----A---- C:\Windows\system32\winhttp.dll
2010-06-07 23:49:46 ----A---- C:\Windows\system32\vbscript.dll
2010-06-07 23:45:38 ----A---- C:\Windows\system32\atl.dll
2010-06-07 23:41:29 ----A---- C:\Windows\system32\gdi32.dll
2010-06-07 23:32:30 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2010-06-07 23:28:52 ----A---- C:\Windows\system32\msdtcprx.dll
2010-06-07 23:28:51 ----A---- C:\Windows\system32\xolehlp.dll
2010-06-07 23:24:59 ----A---- C:\Windows\system32\wkssvc.dll
2010-06-07 23:20:58 ----A---- C:\Windows\system32\tsgqec.dll
2010-06-07 23:20:58 ----A---- C:\Windows\system32\aaclient.dll
2010-06-07 23:20:57 ----A---- C:\Windows\system32\mstscax.dll
2010-06-07 23:16:40 ----A---- C:\Windows\system32\wmpeffects.dll
2010-06-07 23:08:25 ----A---- C:\Windows\system32\msscp.dll
2010-06-07 23:04:36 ----A---- C:\Windows\system32\FirewallAPI.dll
2010-06-07 23:04:35 ----A---- C:\Windows\system32\MPSSVC.dll
2010-06-07 23:04:34 ----A---- C:\Windows\system32\icfupgd.dll
2010-06-07 23:04:33 ----A---- C:\Windows\system32\wfapigp.dll
2010-06-07 23:04:32 ----A---- C:\Windows\system32\cmifw.dll
2010-06-07 23:04:31 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-06-07 23:00:47 ----A---- C:\Windows\system32\netapi32.dll
2010-06-07 22:48:15 ----A---- C:\Windows\system32\mcmde.dll
2010-06-07 22:48:13 ----A---- C:\Windows\system32\EncDec.dll
2010-06-07 22:48:12 ----A---- C:\Windows\system32\psisdecd.dll
2010-06-07 22:39:52 ----A---- C:\Windows\system32\shell32.dll
2010-06-07 22:35:35 ----A---- C:\Windows\system32\tzres.dll
2010-06-07 22:31:28 ----A---- C:\Windows\system32\localspl.dll
2010-06-07 22:28:07 ----A---- C:\Windows\system32\DWWIN.EXE
2010-06-07 22:22:05 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-07 22:22:05 ----A---- C:\Windows\system32\advpack.dll
2010-06-07 22:22:04 ----A---- C:\Windows\system32\ieakui.dll
2010-06-07 22:22:04 ----A---- C:\Windows\system32\ieaksie.dll
2010-06-07 22:22:04 ----A---- C:\Windows\system32\admparse.dll
2010-06-07 22:22:02 ----A---- C:\Windows\system32\ieapfltr.dll
2010-06-07 22:22:01 ----A---- C:\Windows\system32\iepeers.dll
2010-06-07 22:21:59 ----A---- C:\Windows\system32\wininet.dll
2010-06-07 22:21:59 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-07 22:21:57 ----A---- C:\Windows\system32\dxtrans.dll
2010-06-07 22:21:56 ----A---- C:\Windows\system32\dxtmsft.dll
2010-06-07 22:21:53 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-07 22:21:51 ----A---- C:\Windows\system32\ieui.dll
2010-06-07 22:21:50 ----A---- C:\Windows\system32\ieframe.dll
2010-06-07 22:21:44 ----A---- C:\Windows\system32\mshtmled.dll
2010-06-07 22:21:43 ----A---- C:\Windows\system32\mshtmler.dll
2010-06-07 22:21:43 ----A---- C:\Windows\system32\ieencode.dll
2010-06-07 22:21:41 ----A---- C:\Windows\system32\mshtml.dll
2010-06-07 22:21:34 ----A---- C:\Windows\system32\mstime.dll
2010-06-07 22:21:33 ----A---- C:\Windows\system32\icardie.dll
2010-06-07 22:21:26 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-07 22:21:23 ----A---- C:\Windows\system32\occache.dll
2010-06-07 22:21:22 ----A---- C:\Windows\system32\urlmon.dll
2010-06-07 22:21:21 ----A---- C:\Windows\system32\pngfilt.dll
2010-06-07 22:21:20 ----A---- C:\Windows\system32\iertutil.dll
2010-06-07 22:21:19 ----A---- C:\Windows\system32\iesetup.dll
2010-06-07 22:21:19 ----A---- C:\Windows\system32\iernonce.dll
2010-06-07 22:21:19 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-07 22:16:00 ----A---- C:\Windows\explorer.exe
2010-06-07 22:14:22 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-06-07 22:06:24 ----A---- C:\Windows\system32\wintrust.dll
2010-06-07 22:03:27 ----A---- C:\Windows\system32\wdigest.dll
2010-06-07 22:03:27 ----A---- C:\Windows\system32\kerberos.dll
2010-06-07 22:03:26 ----A---- C:\Windows\system32\secur32.dll
2010-06-07 22:03:26 ----A---- C:\Windows\system32\lsass.exe
2010-06-07 22:03:25 ----A---- C:\Windows\system32\lsasrv.dll
2010-06-07 22:03:23 ----A---- C:\Windows\system32\schannel.dll
2010-06-07 22:00:25 ----A---- C:\Windows\system32\netcfg.exe
2010-06-07 21:57:32 ----A---- C:\Windows\system32\NlsLexicons0046.dll
2010-06-07 21:57:32 ----A---- C:\Windows\system32\NlsLexicons0045.dll
2010-06-07 21:57:31 ----A---- C:\Windows\system32\NlsLexicons0049.dll
2010-06-07 21:57:31 ----A---- C:\Windows\system32\NlsLexicons0047.dll
2010-06-07 21:57:30 ----A---- C:\Windows\system32\NlsLexicons0020.dll
2010-06-07 21:57:29 ----A---- C:\Windows\system32\NlsLexicons0039.dll
2010-06-07 21:57:29 ----A---- C:\Windows\system32\NlsLexicons0021.dll
2010-06-07 21:57:28 ----A---- C:\Windows\system32\NlsLexicons0022.dll
2010-06-07 21:57:26 ----A---- C:\Windows\system32\NlsLexicons0024.dll
2010-06-07 21:57:25 ----A---- C:\Windows\system32\NlsLexicons0026.dll
2010-06-07 21:57:23 ----A---- C:\Windows\system32\NlsLexicons0027.dll
2010-06-07 21:57:22 ----A---- C:\Windows\system32\NlsLexicons0011.dll
2010-06-07 21:57:22 ----A---- C:\Windows\system32\NlsLexicons0010.dll
2010-06-07 21:57:21 ----A---- C:\Windows\system32\NlsLexicons0013.dll
2010-06-07 21:57:20 ----A---- C:\Windows\system32\NlsLexicons0018.dll
2010-06-07 21:57:18 ----A---- C:\Windows\system32\NlsLexicons0019.dll
2010-06-07 21:57:16 ----A---- C:\Windows\system32\NlsLexicons0001.dll
2010-06-07 21:57:15 ----A---- C:\Windows\system32\NlsLexicons0002.dll
2010-06-07 21:57:14 ----A---- C:\Windows\system32\NlsLexicons0003.dll
2010-06-07 21:57:12 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2010-06-07 21:57:11 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2010-06-07 21:57:10 ----A---- C:\Windows\system32\NlsLexicons004b.dll
2010-06-07 21:57:10 ----A---- C:\Windows\system32\NlsLexicons004a.dll
2010-06-07 21:57:09 ----A---- C:\Windows\system32\NlsLexicons004c.dll
2010-06-07 21:57:08 ----A---- C:\Windows\system32\NlsLexicons004e.dll
2010-06-07 21:57:07 ----A---- C:\Windows\system32\NlsLexicons003e.dll
2010-06-07 21:57:07 ----A---- C:\Windows\system32\NlsLexicons002a.dll
2010-06-07 21:57:06 ----A---- C:\Windows\system32\NlsLexicons001a.dll
2010-06-07 21:57:04 ----A---- C:\Windows\system32\NlsLexicons001b.dll
2010-06-07 21:57:03 ----A---- C:\Windows\system32\NlsLexicons001d.dll
2010-06-07 21:57:01 ----A---- C:\Windows\system32\NlsLexicons000a.dll
2010-06-07 21:57:00 ----A---- C:\Windows\system32\NlsLexicons000c.dll
2010-06-07 21:56:59 ----A---- C:\Windows\system32\NlsLexicons000d.dll
2010-06-07 21:56:58 ----A---- C:\Windows\system32\NlsLexicons000f.dll
2010-06-07 21:56:57 ----A---- C:\Windows\system32\NlsLexicons0414.dll
2010-06-07 21:56:56 ----A---- C:\Windows\system32\NlsLexicons0416.dll
2010-06-07 21:56:55 ----A---- C:\Windows\system32\NlsLexicons0816.dll
2010-06-07 21:56:54 ----A---- C:\Windows\system32\NlsLexicons081a.dll
2010-06-07 21:56:53 ----A---- C:\Windows\system32\NlsModels0011.dll
2010-06-07 21:56:52 ----A---- C:\Windows\system32\NlsData0045.dll
2010-06-07 21:56:51 ----A---- C:\Windows\system32\NlsData0046.dll
2010-06-07 21:56:50 ----A---- C:\Windows\system32\NlsData0047.dll
2010-06-07 21:56:49 ----A---- C:\Windows\system32\NlsData0049.dll
2010-06-07 21:56:49 ----A---- C:\Windows\system32\NlsData0039.dll
2010-06-07 21:56:48 ----A---- C:\Windows\system32\NlsData0020.dll
2010-06-07 21:56:47 ----A---- C:\Windows\system32\NlsData0022.dll
2010-06-07 21:56:47 ----A---- C:\Windows\system32\NlsData0021.dll
2010-06-07 21:56:46 ----A---- C:\Windows\system32\NlsData0024.dll
2010-06-07 21:56:45 ----A---- C:\Windows\system32\NlsData0027.dll
2010-06-07 21:56:45 ----A---- C:\Windows\system32\NlsData0026.dll
2010-06-07 21:56:44 ----A---- C:\Windows\system32\NlsData0010.dll
2010-06-07 21:56:43 ----A---- C:\Windows\system32\NlsData0011.dll
2010-06-07 21:56:42 ----A---- C:\Windows\system32\NlsData0013.dll
2010-06-07 21:56:41 ----A---- C:\Windows\system32\NlsData0018.dll
2010-06-07 21:56:41 ----A---- C:\Windows\system32\NlsData0000.dll
2010-06-07 21:56:40 ----A---- C:\Windows\system32\NlsData0019.dll
2010-06-07 21:56:39 ----A---- C:\Windows\system32\NlsData0002.dll
2010-06-07 21:56:39 ----A---- C:\Windows\system32\NlsData0001.dll
2010-06-07 21:56:38 ----A---- C:\Windows\system32\NlsData0003.dll
2010-06-07 21:56:37 ----A---- C:\Windows\system32\NlsData0007.dll
2010-06-07 21:56:36 ----A---- C:\Windows\system32\NlsData0009.dll
2010-06-07 21:56:35 ----A---- C:\Windows\system32\NlsData004a.dll
2010-06-07 21:56:34 ----A---- C:\Windows\system32\NlsData004b.dll
2010-06-07 21:56:33 ----A---- C:\Windows\system32\NlsData004e.dll
2010-06-07 21:56:33 ----A---- C:\Windows\system32\NlsData004c.dll
2010-06-07 21:56:32 ----A---- C:\Windows\system32\NlsData003e.dll
2010-06-07 21:56:31 ----A---- C:\Windows\system32\NlsData002a.dll
2010-06-07 21:56:31 ----A---- C:\Windows\system32\NlsData001a.dll
2010-06-07 21:56:30 ----A---- C:\Windows\system32\NlsData001b.dll
2010-06-07 21:56:29 ----A---- C:\Windows\system32\NlsData001d.dll
2010-06-07 21:56:27 ----A---- C:\Windows\system32\NlsData000c.dll
2010-06-07 21:56:27 ----A---- C:\Windows\system32\NlsData000a.dll
2010-06-07 21:56:26 ----A---- C:\Windows\system32\NlsData000d.dll
2010-06-07 21:56:25 ----A---- C:\Windows\system32\NlsData000f.dll
2010-06-07 21:56:24 ----A---- C:\Windows\system32\NlsData0414.dll
2010-06-07 21:56:23 ----A---- C:\Windows\system32\NlsData0416.dll
2010-06-07 21:56:23 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2010-06-07 21:56:21 ----A---- C:\Windows\system32\NlsData081a.dll
2010-06-07 21:56:21 ----A---- C:\Windows\system32\NlsData0816.dll
2010-06-07 21:56:20 ----A---- C:\Windows\system32\NlsLexicons0c1a.dll
2010-06-07 21:56:19 ----A---- C:\Windows\system32\NlsData0c1a.dll
2010-06-07 21:47:28 ----A---- C:\Windows\system32\rpcss.dll
2010-06-07 21:47:25 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-06-07 21:47:24 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-06-07 21:47:20 ----A---- C:\Windows\system32\iasads.dll
2010-06-07 21:47:19 ----A---- C:\Windows\system32\sdohlp.dll
2010-06-07 21:47:19 ----A---- C:\Windows\system32\iasrecst.dll
2010-06-07 21:47:19 ----A---- C:\Windows\system32\iasdatastore.dll
2010-06-07 21:41:16 ----A---- C:\Windows\system32\jscript.dll
2010-06-07 21:38:49 ----N---- C:\Windows\system32\MpSigStub.exe
2010-06-07 19:33:16 ----A---- C:\Windows\system32\oleaut32.dll
2010-06-07 18:36:27 ----A---- C:\Windows\system32\dfshim.dll
2010-06-07 18:36:25 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-07 18:36:18 ----A---- C:\Windows\system32\mscoree.dll
2010-06-07 18:36:17 ----A---- C:\Windows\system32\mscories.dll
2010-06-07 18:36:17 ----A---- C:\Windows\system32\mscorier.dll
2010-06-07 18:09:40 ----A---- C:\Windows\system32\WMNetMgr.dll
2010-06-07 18:09:40 ----A---- C:\Windows\system32\logagent.exe
2010-06-07 18:08:24 ----A---- C:\Windows\system32\INETRES.dll
2010-06-07 18:08:24 ----A---- C:\Windows\system32\inetcomm.dll
2010-06-07 18:07:54 ----A---- C:\Windows\system32\msasn1.dll
2010-06-07 18:07:27 ----A---- C:\Windows\system32\wmi.dll
2010-06-07 18:07:27 ----A---- C:\Windows\system32\imagehlp.dll
2010-06-07 18:07:05 ----A---- C:\Windows\system32\rpcrt4.dll
2010-06-07 18:06:13 ----A---- C:\Windows\system32\httpapi.dll
2010-06-07 18:06:12 ----A---- C:\Windows\system32\nshhttp.dll
2010-06-07 18:03:36 ----A---- C:\Windows\system32\rastls.dll
2010-06-07 18:03:36 ----A---- C:\Windows\system32\raschap.dll
2010-06-07 18:03:11 ----A---- C:\Windows\system32\WSDApi.dll
2010-06-07 18:02:51 ----A---- C:\Windows\system32\poqexec.exe
2010-06-07 17:59:25 ----A---- C:\Windows\system32\user32.dll
2010-06-07 17:58:12 ----A---- C:\Windows\system32\msyuv.dll
2010-06-07 17:58:12 ----A---- C:\Windows\system32\iyuv_32.dll
2010-06-07 17:58:11 ----A---- C:\Windows\system32\tsbyuv.dll
2010-06-07 17:58:10 ----A---- C:\Windows\system32\quartz.dll
2010-06-07 17:58:08 ----A---- C:\Windows\system32\msvfw32.dll
2010-06-07 17:58:08 ----A---- C:\Windows\system32\mciavi32.dll
2010-06-07 17:58:08 ----A---- C:\Windows\system32\avifil32.dll
2010-06-07 17:58:08 ----A---- C:\Windows\system32\avicap32.dll
2010-06-07 17:58:07 ----A---- C:\Windows\system32\msvidc32.dll
2010-06-07 17:58:07 ----A---- C:\Windows\system32\msrle32.dll
2010-06-07 17:56:49 ----A---- C:\Windows\system32\qmgr.dll
2010-06-07 17:56:26 ----A---- C:\Windows\system32\WMSPDMOD.DLL

======List of files/folders modified in the last 1 months======

2010-07-06 14:09:54 ----D---- C:\Windows\Temp
2010-07-06 14:09:46 ----D---- C:\Windows\Prefetch
2010-07-06 14:05:13 ----D---- C:\Windows
2010-07-06 14:05:12 ----D---- C:\Windows\inf
2010-07-06 02:10:21 ----SHD---- C:\System Volume Information
2010-07-05 23:25:56 ----D---- C:\Windows\system32\drivers
2010-07-05 23:25:54 ----RD---- C:\Program Files
2010-07-05 23:25:54 ----HD---- C:\ProgramData
2010-07-05 23:04:18 ----D---- C:\Windows\Debug
2010-07-05 21:14:12 ----D---- C:\Windows\system32\catroot
2010-07-05 21:08:50 ----D---- C:\Windows\winsxs
2010-07-05 21:04:20 ----D---- C:\Windows\SoftwareDistribution
2010-07-05 21:00:38 ----SHD---- C:\Windows\Installer
2010-07-05 20:52:40 ----D---- C:\Windows\System32
2010-07-05 20:52:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-05 20:49:59 ----SD---- C:\Users\Momak\AppData\Roaming\Microsoft
2010-07-05 20:49:59 ----SD---- C:\ProgramData\Microsoft
2010-07-05 20:19:12 ----D---- C:\Windows\system
2010-07-02 21:05:22 ----D---- C:\Windows\system32\catroot2
2010-06-24 14:32:19 ----D---- C:\Windows\Tasks
2010-06-24 14:32:19 ----D---- C:\Windows\system32\Tasks
2010-06-23 21:39:33 ----A---- C:\Windows\system.ini
2010-06-23 21:38:52 ----D---- C:\Program Files\QuickTime
2010-06-23 20:55:24 ----RSD---- C:\Windows\assembly
2010-06-23 20:54:18 ----D---- C:\Windows\Microsoft.NET
2010-06-23 18:16:53 ----D---- C:\Program Files\Common Files
2010-06-12 13:31:47 ----RSD---- C:\Windows\Fonts
2010-06-11 11:30:30 ----D---- C:\Windows\system32\WDI
2010-06-08 13:19:04 ----D---- C:\Windows\rescache
2010-06-08 13:18:57 ----D---- C:\Program Files\Microsoft Games
2010-06-08 13:06:40 ----D---- C:\ProgramData\Adobe
2010-06-08 13:05:10 ----D---- C:\Windows\system32\cs-CZ
2010-06-08 13:04:44 ----SHD---- C:\Boot
2010-06-08 13:04:08 ----ASH---- C:\Program Files\desktop.ini
2010-06-08 12:54:37 ----D---- C:\Windows\system32\wbem
2010-06-08 12:54:37 ----D---- C:\Windows\system32\migration
2010-06-08 12:54:37 ----D---- C:\Program Files\Windows Mail
2010-06-08 12:54:37 ----D---- C:\Program Files\Common Files\System
2010-06-08 12:54:33 ----D---- C:\Program Files\Movie Maker
2010-06-08 12:54:32 ----D---- C:\Windows\ehome
2010-06-08 12:54:31 ----D---- C:\Windows\servicing
2010-06-08 12:54:31 ----D---- C:\Program Files\Internet Explorer
2010-06-08 12:54:30 ----D---- C:\Windows\AppPatch
2010-06-07 22:14:18 ----D---- C:\Windows\Logs
2010-06-07 20:58:57 ----D---- C:\Windows\system32\zh-TW
2010-06-07 20:58:56 ----D---- C:\Windows\system32\zh-CN
2010-06-07 20:58:56 ----D---- C:\Windows\system32\uk-UA
2010-06-07 20:58:55 ----D---- C:\Windows\system32\tr-TR
2010-06-07 20:58:54 ----D---- C:\Windows\system32\th-TH
2010-06-07 20:58:54 ----D---- C:\Windows\system32\sv-SE
2010-06-07 20:58:53 ----D---- C:\Windows\system32\sr-Latn-CS
2010-06-07 20:58:53 ----D---- C:\Windows\system32\sl-SI
2010-06-07 20:58:52 ----D---- C:\Windows\system32\sk-SK
2010-06-07 20:58:51 ----D---- C:\Windows\system32\ru-RU
2010-06-07 20:58:50 ----D---- C:\Windows\system32\ro-RO
2010-06-07 20:58:50 ----D---- C:\Windows\system32\pt-PT
2010-06-07 20:58:49 ----D---- C:\Windows\system32\pt-BR
2010-06-07 20:58:48 ----D---- C:\Windows\system32\pl-PL
2010-06-07 20:58:48 ----D---- C:\Windows\system32\nl-NL
2010-06-07 20:58:48 ----D---- C:\Windows\system32\nb-NO
2010-06-07 20:58:47 ----D---- C:\Windows\system32\lv-LV
2010-06-07 20:58:47 ----D---- C:\Windows\system32\lt-LT
2010-06-07 20:58:47 ----D---- C:\Windows\system32\ko-KR
2010-06-07 20:58:47 ----D---- C:\Windows\system32\ja-JP
2010-06-07 20:58:46 ----D---- C:\Windows\system32\it-IT
2010-06-07 20:58:45 ----D---- C:\Windows\system32\hu-HU
2010-06-07 20:58:45 ----D---- C:\Windows\system32\hr-HR
2010-06-07 20:58:44 ----D---- C:\Windows\system32\he-IL
2010-06-07 20:58:44 ----D---- C:\Windows\system32\fr-FR
2010-06-07 20:58:43 ----D---- C:\Windows\system32\fi-FI
2010-06-07 20:58:43 ----D---- C:\Windows\system32\et-EE
2010-06-07 20:58:42 ----D---- C:\Windows\system32\es-ES
2010-06-07 20:58:41 ----D---- C:\Windows\system32\en-US
2010-06-07 20:58:40 ----D---- C:\Windows\system32\el-GR
2010-06-07 20:58:39 ----D---- C:\Windows\system32\de-DE
2010-06-07 20:58:38 ----D---- C:\Windows\system32\da-DK
2010-06-07 20:58:37 ----D---- C:\Windows\system32\bg-BG
2010-06-07 20:58:36 ----D---- C:\Windows\system32\ar-SA
2010-06-07 20:58:05 ----RSD---- C:\Windows\Media
2010-06-07 01:02:37 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2006-11-02 319488]
R3 3xHybrid;SAA713x TV Card Service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-07-06 906368]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
R3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
R3 VIAudio;Zvukový ovladač VIA AC'97; C:\Windows\system32\drivers\ac97via.sys [2006-11-02 68096]
S3 a7g6sszu;a7g6sszu; C:\Windows\system32\drivers\a7g6sszu.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2010-04-29 38224]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 733184]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-02-12 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2006-11-02 22016]
R2 VRAID Log Service;VRAID Log Service; C:\Program Files\VIA\RAID\vialogsv.exe [2008-09-24 52888]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-07 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2006-11-02 22016]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2006-11-02 521216]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-06-04 182768]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2006-11-02 22016]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2006-11-02 562176]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4281

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

6.7.2010 16:17:21
mbam-log-2010-07-06 (16-17-21).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 213976
Uplynulý čas: 2 hodina(y), 3 minuta(y), 43 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Program Files\Infogrames Interactive\RollerCoaster Tycoon 2\yapkea.exe (Malware.Packer.Krunchy) -> No action taken.
C:\Windows\Crack\Crack.exe (Worm.VB) -> No action taken.

V mbamu všechno smaž.


Stáhni na plochu ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Před použitím vypni všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary
-Zavři všechna aktivní okna a spusť ho pod učtem s právy administrátora
- Po spuštění se zobrazí podmínky použití, potvrď je stiskem tlačítka Ano

- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna

- Po dokončení skenování, se vytvoří log C:\ComboFix.txt, zkopíruj celý jeho obsah sem.

Tak jsem teď zkusil do toho Pc dát jiný HDD, na kterém sice nejsou žádné drivery atp ale CPU je celkem v klidu...že by za to mohl HDD ?

Udělej ještě ten combofix a pak se uvidí.
Tím to být nemusí, na tomto disku můžeš mít viry, na druhém ne.

ComboFix 10-07-05.03 - Momak 06.07.2010 18:28:34.1.1 - x86
Microsoft® Windows Vista™ Ultimate 6.0.6000.0.1250.420.1029.18.1023.354 [GMT 2:00]
Spuštěný z: c:\users\Momak\Downloads\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Momak\Documents\cc_20100705_230542.reg

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-06 do 2010-07-06 )))))))))))))))))))))))))))))))
.

2010-07-06 16:56 . 2010-07-06 16:56 -------- d-----w- c:\users\Momak\AppData\Local\temp
2010-07-06 16:20 . 2010-07-06 16:22 -------- d-----w- C:\32788R22FWJFW
2010-07-06 15:47 . 2010-07-06 15:49 -------- d-----w- c:\program files\SpeedFan
2010-07-06 15:30 . 2010-07-06 15:30 -------- d-----w- c:\programdata\ATI
2010-07-06 15:16 . 2010-07-06 15:16 10134 ----a-r- c:\users\Momak\AppData\Roaming\Microsoft\Installer\{9DBCF44B-77AC-81D8-0F8E-1E60D6330AC2}\ARPPRODUCTICON.exe
2010-07-06 15:15 . 2010-07-06 15:27 -------- d-----w- c:\program files\ATI Technologies
2010-07-06 14:41 . 2010-07-06 14:41 378368 ----a-w- c:\windows\system32\winhttp.dll
2010-07-06 14:39 . 2010-07-06 14:39 268800 ----a-w- c:\windows\system32\es.dll
2010-07-06 14:37 . 2010-07-06 14:37 1585664 ----a-w- c:\windows\system32\setupapi.dll
2010-07-06 14:34 . 2010-07-06 14:34 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-07-06 14:34 . 2010-07-06 14:34 179712 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-07-06 14:34 . 2010-07-06 14:34 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS
2010-07-06 14:34 . 2010-07-06 14:34 815104 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-07-06 14:34 . 2010-07-06 14:34 22016 ----a-w- c:\windows\system32\netiougc.exe
2010-07-06 14:34 . 2010-07-06 14:34 167424 ----a-w- c:\windows\system32\tcpipcfg.dll
2010-07-06 14:33 . 2010-07-06 14:33 9728 ----a-w- c:\windows\system32\LAPRXY.DLL
2010-07-06 14:33 . 2010-07-06 14:33 223232 ----a-w- c:\windows\system32\WMASF.DLL
2010-07-06 14:33 . 2010-07-06 14:33 2048 ----a-w- c:\windows\system32\asferror.dll
2010-07-06 14:32 . 2010-07-06 14:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-07-06 14:32 . 2010-07-06 14:32 25600 ----a-w- c:\windows\system32\amxread.dll
2010-07-06 14:32 . 2010-07-06 14:32 14848 ----a-w- c:\windows\system32\apilogen.dll
2010-07-06 14:29 . 2010-07-06 14:29 37376 ----a-w- c:\windows\system32\printcom.dll
2010-07-06 14:29 . 2010-07-06 14:29 441856 ----a-w- c:\windows\system32\win32spl.dll
2010-07-06 14:28 . 2010-07-06 14:28 2031104 ----a-w- c:\windows\system32\win32k.sys
2010-07-06 14:27 . 2010-07-06 14:27 14848 ----a-w- c:\windows\system32\wshrm.dll
2010-07-06 14:27 . 2010-07-06 14:27 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys
2010-07-06 14:27 . 2010-07-06 14:27 8147968 ----a-w- c:\windows\system32\wmploc.DLL
2010-07-06 14:27 . 2010-07-06 14:27 7680 ----a-w- c:\windows\system32\spwmp.dll
2010-07-06 14:27 . 2010-07-06 14:27 4096 ----a-w- c:\windows\system32\dxmasf.dll
2010-07-06 14:26 . 2010-07-06 14:26 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2010-07-06 14:25 . 2010-07-06 14:25 83968 ----a-w- c:\windows\system32\dnsrslvr.dll
2010-07-06 14:25 . 2010-07-06 14:25 24576 ----a-w- c:\windows\system32\dnscacheugc.exe
2010-07-06 13:15 . 2010-07-06 13:15 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2010-07-05 21:26 . 2010-07-05 21:26 -------- d-----w- c:\users\Momak\AppData\Roaming\Malwarebytes
2010-07-05 21:25 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-05 21:25 . 2010-07-05 21:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-05 21:25 . 2010-07-05 21:25 -------- d-----w- c:\programdata\Malwarebytes
2010-07-05 21:25 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-05 21:06 . 2010-07-05 21:06 -------- d-----w- C:\rsit
2010-07-05 20:44 . 2010-07-05 20:44 -------- d-----w- c:\program files\CCleaner
2010-07-05 19:14 . 2010-07-05 19:14 -------- d-----w- c:\program files\DIFX
2010-07-05 19:04 . 2010-07-05 19:04 -------- d-----w- c:\program files\USB TV
2010-07-05 19:02 . 2010-07-05 19:02 -------- d-----w- c:\users\Momak\AppData\Roaming\InstallShield
2010-07-05 18:19 . 2008-05-11 23:08 32768 ----a-w- c:\windows\system\VRAIDlog.dll
2010-07-05 18:17 . 2005-04-12 10:54 331184 ------w- c:\windows\system32\difxapi.dll
2010-07-05 18:17 . 2010-07-05 18:19 -------- d-----w- c:\program files\VIA
2010-07-05 18:15 . 2010-03-05 07:34 138464 ----a-w- c:\windows\system32\drivers\viamraid.sys
2010-07-05 17:57 . 2010-07-05 17:57 388096 ----a-r- c:\users\Momak\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-07-05 17:57 . 2010-07-06 12:09 -------- d-----w- c:\program files\Trend Micro
2010-07-05 17:10 . 2003-04-15 10:00 50304 ----a-w- c:\windows\system32\drivers\VIADSK.SYS
2010-07-05 17:09 . 2003-06-18 14:48 306688 ----a-w- c:\windows\IsUninst.exe
2010-07-05 16:33 . 2010-07-05 16:33 -------- d-----w- c:\users\Momak\AppData\Local\The Witcher
2010-07-03 21:15 . 2010-07-03 21:15 240128 ----a-w- c:\windows\system32\drivers\royal.sys
2010-07-03 21:14 . 2010-07-06 14:20 -------- d-----w- c:\windows\Crack
2010-07-02 22:31 . 2010-07-06 15:38 -------- d-----w- c:\users\Momak\AppData\Roaming\ICQ
2010-07-02 22:31 . 2010-07-02 22:31 -------- d-----w- c:\users\Momak\AppData\Local\AOL
2010-07-02 22:30 . 2010-07-02 22:34 -------- d-----w- c:\program files\ICQ7.1
2010-06-24 11:15 . 2010-06-24 11:15 -------- d-----w- c:\program files\Bullfrog
2010-06-24 11:14 . 1996-11-05 14:13 299008 ----a-w- c:\windows\uninst.exe
2010-06-24 11:13 . 2010-05-22 18:00 -------- d-----w- c:\users\Momak\Theme Hospital
2010-06-23 19:39 . 2010-06-23 19:39 98304 ----a-w- c:\windows\system32\qttask.exe
2010-06-23 19:17 . 2010-06-23 19:17 -------- d-----w- c:\windows\system32\QuickTime
2010-06-23 18:58 . 2010-06-02 02:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-06-23 18:58 . 2010-06-02 02:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-06-23 18:58 . 2010-06-02 02:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2010-06-23 18:58 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-06-23 18:58 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-06-23 18:58 . 2010-05-26 09:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-06-23 18:58 . 2010-05-26 09:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-06-23 18:58 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2010-06-23 18:58 . 2010-02-04 08:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-06-23 18:58 . 2010-02-04 08:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-06-23 18:58 . 2010-02-04 08:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-06-23 18:58 . 2010-02-04 08:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-06-23 18:56 . 2008-05-30 12:18 238088 ----a-w- c:\windows\system32\xactengine3_1.dll
2010-06-23 18:55 . 2007-03-15 14:57 443752 ----a-w- c:\windows\system32\d3dx10_33.dll
2010-06-23 18:54 . 2005-05-26 13:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2010-06-23 18:40 . 2010-07-05 16:51 -------- d--h--w- c:\windows\msdownld.tmp
2010-06-23 18:15 . 2010-06-23 18:15 -------- d-----w- c:\program files\EA SPORTS
2010-06-23 16:17 . 2010-06-23 16:17 -------- d-----w- c:\program files\Winamp Detect
2010-06-23 16:16 . 2010-06-23 16:16 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-06-23 16:16 . 2010-06-23 17:09 -------- d-----w- c:\users\Momak\AppData\Roaming\Winamp
2010-06-23 16:16 . 2010-06-23 16:18 -------- d-----w- c:\program files\Winamp
2010-06-12 11:46 . 2010-06-20 20:00 1 ----a-w- c:\users\Momak\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-06-12 11:46 . 2010-06-12 11:46 -------- d-----w- c:\users\Momak\AppData\Roaming\OpenOffice.org
2010-06-12 11:30 . 2010-06-12 11:30 -------- d-----w- c:\program files\OpenOffice.org 3
2010-06-11 15:01 . 2010-06-11 15:01 -------- d-----w- c:\users\Momak\AppData\Roaming\Leadertech
2010-06-11 14:43 . 2010-06-11 14:43 -------- d-----w- c:\program files\Atari
2010-06-10 12:44 . 2010-06-10 12:44 0 ----a-w- c:\windows\PowerReg.dat
2010-06-10 12:34 . 2010-06-10 12:34 -------- d-----w- c:\program files\Infogrames Interactive
2010-06-10 12:34 . 2010-07-05 19:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-06-10 12:32 . 2010-07-05 18:16 -------- d-----w- c:\program files\Common Files\InstallShield
2010-06-10 02:33 . 2010-06-23 19:32 -------- d-----w- c:\users\Momak\AppData\Local\Microsoft Games
2010-06-09 17:25 . 2010-07-05 20:42 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-06-09 17:18 . 2010-06-09 17:18 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-06-09 17:10 . 2010-06-09 17:27 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-06-09 17:10 . 2010-06-11 14:41 -------- d-----w- c:\users\Momak\AppData\Roaming\DAEMON Tools Lite
2010-06-09 17:09 . 2010-06-09 17:10 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-06-08 16:24 . 1999-02-26 21:46 45568 ----a-w- c:\windows\UniFish3.exe
2010-06-08 00:30 . 2010-06-08 00:30 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-06-08 00:30 . 2010-06-08 00:30 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-06-08 00:30 . 2010-06-08 00:30 289792 ----a-w- c:\windows\system32\atmfd.dll
2010-06-08 00:30 . 2010-06-08 00:30 24064 ----a-w- c:\windows\system32\lpk.dll
2010-06-08 00:30 . 2010-06-08 00:30 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-06-08 00:30 . 2010-06-08 00:30 10240 ----a-w- c:\windows\system32\dciman32.dll
2010-06-08 00:24 . 2010-06-08 00:24 61440 ----a-w- c:\windows\system32\winipsec.dll
2010-06-08 00:24 . 2010-06-08 00:24 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2010-06-08 00:24 . 2010-06-08 00:24 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2010-06-08 00:24 . 2010-06-08 00:24 272896 ----a-w- c:\windows\system32\polstore.dll
2010-06-08 00:18 . 2010-06-08 00:18 84992 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-06-08 00:18 . 2010-06-08 00:18 306688 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-07 23:44 . 2010-06-07 23:44 39424 ----a-w- c:\windows\system32\ACCTRES.dll
2010-06-07 23:44 . 2010-06-07 23:44 205824 ----a-w- c:\windows\system32\msoeacct.dll
2010-06-07 23:44 . 2010-06-07 23:44 87040 ----a-w- c:\windows\system32\msoert2.dll
2010-06-07 23:31 . 2010-06-07 23:31 15360 ----a-w- c:\windows\system32\netevent.dll
2010-06-07 23:31 . 2010-06-07 23:31 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2010-06-07 23:31 . 2010-06-07 23:31 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2010-06-07 23:31 . 2010-06-07 23:31 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2010-06-07 23:31 . 2010-06-07 23:31 103936 ----a-w- c:\windows\system32\netiohlp.dll
2010-06-07 23:31 . 2010-06-07 23:31 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2010-06-07 23:31 . 2010-06-07 23:31 10240 ----a-w- c:\windows\system32\finger.exe
2010-06-07 23:31 . 2010-06-07 23:31 19968 ----a-w- c:\windows\system32\ARP.EXE
2010-06-07 23:31 . 2010-06-07 23:31 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2010-06-07 23:31 . 2010-06-07 23:31 213592 ----a-w- c:\windows\system32\drivers\netio.sys
2010-06-07 23:18 . 2010-06-07 23:18 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-06 14:49 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-07-06 14:44 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Sidebar
2010-07-06 14:32 . 2010-07-06 14:32 40960 ----a-w- c:\windows\AppPatch\apihex86.dll
2010-07-05 18:52 . 2007-01-08 21:15 81198 ----a-w- c:\windows\system32\perfc005.dat
2010-07-05 18:52 . 2007-01-08 21:15 473360 ----a-w- c:\windows\system32\perfh005.dat
2010-06-23 19:38 . 2010-06-04 10:00 -------- d-----w- c:\program files\QuickTime
2010-06-23 19:17 . 2010-06-23 19:16 -------- d-----w- c:\program files\ACE Mega CoDecS Pack
2010-06-13 11:31 . 2010-06-04 09:21 53992 ----a-w- c:\users\Momak\AppData\Local\GDIPFONTCACHEV1.DAT
2010-06-12 12:18 . 2010-06-04 10:40 81868 ---ha-w- c:\windows\system32\mlfcache.dat
2010-06-08 11:18 . 2006-11-02 12:35 -------- d-----w- c:\program files\Microsoft Games
2010-06-08 10:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-06-07 20:22 . 2010-06-07 20:22 52736 ----a-w- c:\windows\AppPatch\iebrshim.dll
2010-06-07 20:21 . 2010-06-07 20:21 832512 ----a-w- c:\windows\system32\wininet.dll
2010-06-07 20:21 . 2010-06-07 20:21 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-07 20:21 . 2010-06-07 20:21 48128 ----a-w- c:\windows\system32\mshtmler.dll
2010-06-07 20:21 . 2010-06-07 20:21 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2010-06-07 20:21 . 2010-06-07 20:21 56320 ----a-w- c:\windows\system32\iesetup.dll
2010-06-07 20:03 . 2010-06-07 20:03 272384 ----a-w- c:\windows\system32\schannel.dll
2010-06-07 19:56 . 2010-06-07 19:56 4616192 ----a-w- c:\windows\system32\NlsLexicons0414.dll
2010-06-06 23:02 . 2010-06-04 09:30 -------- d-----w- c:\program files\Google
2010-06-06 14:33 . 2010-06-06 14:33 -------- d-----w- c:\users\Momak\AppData\Roaming\ATI
2010-06-06 14:27 . 2010-06-06 14:27 0 ----a-w- c:\windows\ativpsrm.bin
2010-06-06 14:22 . 2010-06-06 14:22 -------- d-----w- c:\program files\ATI
2010-06-04 12:41 . 2010-06-04 12:39 -------- d-----w- c:\program files\QIP 2010
2010-06-04 10:53 . 2010-06-04 10:52 -------- d-----w- c:\program files\The KMPlayer
2010-06-04 10:28 . 2010-06-04 10:28 97792 ----a-w- c:\windows\system32\cabview.dll
2010-06-04 10:15 . 2010-06-04 10:15 -------- d-----w- c:\users\Momak\AppData\Roaming\Apple Computer
2010-06-04 10:13 . 2010-06-04 10:12 -------- d-----w- c:\program files\Common Files\Adobe
2010-06-04 10:08 . 2010-06-04 10:07 -------- d-----w- c:\program files\Safari
2010-06-04 10:00 . 2010-06-04 10:00 -------- d-----w- c:\programdata\Apple Computer
2010-06-04 09:58 . 2010-06-04 09:58 -------- d-----w- c:\program files\Bonjour
2010-06-04 09:55 . 2010-06-04 09:55 -------- d-----w- c:\program files\Common Files\Apple
2010-06-04 09:54 . 2010-06-04 09:54 -------- d-----w- c:\program files\Apple Software Update
2010-06-04 09:54 . 2010-06-04 09:54 -------- d-----w- c:\programdata\Apple
2010-06-04 09:43 . 2010-06-04 09:43 501872 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb7E00.tmp.exe
2010-06-04 09:33 . 2010-06-04 09:33 53472 ----a-w- c:\windows\system32\wuauclt.exe
2010-06-04 09:33 . 2010-06-04 09:33 44768 ----a-w- c:\windows\system32\wups2.dll
2010-06-04 09:33 . 2010-06-04 09:33 2421760 ----a-w- c:\windows\system32\wucltux.dll
2010-06-04 09:33 . 2010-06-04 09:33 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2010-06-04 09:32 . 2010-06-04 09:32 87552 ----a-w- c:\windows\system32\wudriver.dll
2010-06-04 09:32 . 2010-06-04 09:32 575704 ----a-w- c:\windows\system32\wuapi.dll
2010-06-04 09:32 . 2010-06-04 09:32 35552 ----a-w- c:\windows\system32\wups.dll
2010-06-04 09:31 . 2010-06-04 09:31 33792 ----a-w- c:\windows\system32\wuapp.exe
2010-06-04 09:31 . 2010-06-04 09:31 171608 ----a-w- c:\windows\system32\wuwebv.dll
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Plocha
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Oblíbené položky
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Šablony
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Nabídka Start
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Dokumenty
2010-06-04 09:13 . 2010-06-04 09:13 -------- d-sh--we c:\programdata\Data aplikací
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-06-04 39408]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
"Google Update"="c:\users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-06-24 136176]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-06-08 133368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-02 1004136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-12 37888]
"QuickTime Task"="c:\windows\System32\qttask.exe" [2010-06-23 98304]
"VIARaidUtl"="c:\program files\VIA\RAID\raid_tool.exe" [2010-03-05 2375392]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440]

c:\users\Momak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-2-16 384512]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BDARemote.lnk - c:\program files\USB TV\EM28XX\BDARemote.exe [2010-7-6 81997]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R0 OemBiosDevice;Royalty OEM Bios Extension;c:\windows\System32\drivers\royal.sys [2010-07-03 240128]
R2 ehstart;Spouštěč služby aplikace Windows Media Center;c:\windows\system32\svchost.exe [2006-11-02 22016]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-06 136176]
R2 VRAID Log Service;VRAID Log Service;c:\program files\VIA\RAID\vialogsv.exe [2008-09-24 52888]
R3 Appinfo;Informace o aplikaci;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver;c:\windows\system32\drivers\brfiltlo.sys [2006-11-02 13568]
R3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver;c:\windows\system32\drivers\brfiltup.sys [2006-11-02 5248]
R3 BrUsbSer;Brother MFC USB Serial WDM Driver;c:\windows\system32\drivers\brusbser.sys [2006-11-02 11904]
R3 CertPropSvc;Šíření certifikátů;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 DFSR;Replikace distribuovaného systému souborů (DFSR);c:\windows\system32\DFSR.exe [2006-11-02 2089984]
R3 E1G60;Intel(R) PRO/1000 NDIS 6 Adapter Driver;c:\windows\system32\DRIVERS\E1G60I32.sys [2006-11-02 117760]
R3 ehRecvr;Služba přijímače aplikace Windows Media Center;c:\windows\ehome\ehRecvr.exe [2006-11-02 291840]
R3 ehSched;Služba plánování aplikace Windows Media Center;c:\windows\ehome\ehsched.exe [2006-11-02 131072]
R3 Fax;Fax;c:\windows\system32\fxssvc.exe [2006-11-02 521216]
R3 fdPHost;Hostitel poskytovatele rozpoznávání funkce;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [2006-11-02 27648]
R3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;c:\windows\system32\drivers\gagp30kx.sys [2006-11-02 58984]
R3 IPBusEnum;Rozpoznávací modul sběrnice PnP-X IP;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 KeyIso;Izolace klíče CNG;c:\windows\system32\lsass.exe [2010-06-07 7680]
R3 lltdsvc;Mapovač zjišťování topologie linkové vrstvy;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 MSiSCSI;Služba iniciátoru iSCSI společnosti Microsoft;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 MsRPC;MsRPC; [x]
R3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [2006-11-02 154112]
R3 p2pimsvc;Správce identit sítě rovnocenných počítačů;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 p2psvc;Služba Seskupení v síti rovnocenných počítačů;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 pla;Výstrahy a protokolování výkonu;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 PNRPAutoReg;Služba publikování názvu počítače pomocí protokolu PNRP;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 PNRPsvc;Protokol PNRP;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 QWAVE;Služba qWave (Quality Windows Audio Video Experience);c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 QWAVEdrv;Ovladač QWAVE;c:\windows\system32\drivers\qwavedrv.sys [2006-11-02 31232]
R3 R300;R300;c:\windows\system32\DRIVERS\atikmdag.sys [2010-02-11 4450816]
R3 SCPolicySvc;Zásady odebrání čipové karty;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 SDRSVC;Zálohování systému Windows;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 SessionEnv;Konfigurace Terminálové služby;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 sffp_mmc;SFF Storage Protocol Driver for MMC;c:\windows\system32\drivers\sffp_mmc.sys [2006-11-02 12800]
R3 sffp_sd;SFF Storage Protocol Driver for SDBus;c:\windows\system32\drivers\sffp_sd.sys [2006-11-02 12800]
R3 SLUINotify;Služba SL UI Notification Service;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 SNMPTRAP;Zachytávání pro službu SNMP;c:\windows\System32\snmptrap.exe [2006-11-02 12800]
R3 TBS;Služba TPM Base Services;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 Tcpip6;Microsoft IPv6 Protocol Driver;c:\windows\system32\DRIVERS\tcpip.sys [2010-07-06 815104]
R3 THREADORDER;Server pro řazení podprocesů;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 TrustedInstaller;Instalace modulů systému Windows;c:\windows\servicing\TrustedInstaller.exe [2010-07-06 27136]
R3 tssecsrv;Terminal Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [2006-11-02 23552]
R3 UI0Detect;Zjišťování interaktivních služeb;c:\windows\system32\UI0Detect.exe [2006-11-02 35840]
R3 uliagpkx;Uli AGP Bus Filter;c:\windows\system32\drivers\uliagpkx.sys [2006-11-02 58472]
R3 UmRdpService;Přesměrovač portů uživatelského režimu Terminálové služby;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 wbengine;Služba jádra pro zálohování dat na úrovni bloků;c:\windows\system32\wbengine.exe [2006-11-02 562176]
R3 wcncsvc;Technologie Windows Connect Now – Registrátor konfigurací;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 WcsPlugInService;Windows Color System;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 WdiServiceHost;Hostitel diagnostického systému;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 Wecsvc;Sběr událostí systému Windows;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 wercplsupport;Podpora ovládacího panelu Hlášení a řešení problémů;c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe [2006-11-02 22016]
R3 Wlansvc;Automatická konfigurace sítě WLAN;c:\windows\system32\svchost.exe [2006-11-02 22016]
R3 WPCSvc;Rodičovská kontrola;c:\windows\system32\svchost.exe [2006-11-02 22016]
R4 adp94xx;adp94xx;c:\windows\system32\drivers\adp94xx.sys [2006-11-02 420968]
R4 adpahci;adpahci;c:\windows\system32\drivers\adpahci.sys [2006-11-02 297576]
R4 arcsas;arcsas;c:\windows\system32\drivers\arcsas.sys [2006-11-02 67688]
R4 blbdrive;blbdrive;c:\windows\system32\drivers\blbdrive.sys [x]
R4 Brserid;Brother MFC Serial Port Interface Driver (WDM);c:\windows\system32\drivers\brserid.sys [2006-11-02 71808]
R4 BrSerWdm;Brother WDM Serial driver;c:\windows\system32\drivers\brserwdm.sys [2006-11-02 62336]
R4 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\system32\drivers\brusbmdm.sys [2006-11-02 12160]
R4 circlass;Consumer IR Devices;c:\windows\system32\drivers\circlass.sys [2006-11-02 35328]
R4 Crusoe;Transmeta Crusoe Processor Driver;c:\windows\system32\drivers\crusoe.sys [2006-11-02 38912]
R4 elxstor;elxstor;c:\windows\system32\drivers\elxstor.sys [2006-11-02 316520]
R4 HidBth;Microsoft Bluetooth HID Miniport;c:\windows\system32\drivers\hidbth.sys [2006-11-02 29184]
R4 HidIr;Microsoft Infrared HID Driver;c:\windows\system32\drivers\hidir.sys [2006-11-02 21504]
R4 HpCISSs;HpCISSs;c:\windows\system32\drivers\hpcisss.sys [2006-11-02 37480]
R4 iaStorV;Intel RAID Controller Vista;c:\windows\system32\drivers\iastorv.sys [2006-11-02 232040]
R4 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\ipmidrv.sys [2006-11-02 65536]
R4 iteatapi;ITEATAPI_Service_Install;c:\windows\system32\drivers\iteatapi.sys [2006-11-02 35944]
R4 iteraid;ITERAID_Service_Install;c:\windows\system32\drivers\iteraid.sys [2006-11-02 35944]
R4 LSI_FC;LSI_FC;c:\windows\system32\drivers\lsi_fc.sys [2006-11-02 65640]
R4 LSI_SAS;LSI_SAS;c:\windows\system32\drivers\lsi_sas.sys [2006-11-02 65640]
R4 LSI_SCSI;LSI_SCSI;c:\windows\system32\drivers\lsi_scsi.sys [2006-11-02 65640]
R4 Mcx2Svc;Služba zařízení Windows Media Center Extender;c:\windows\system32\svchost.exe [2006-11-02 22016]
R4 megasas;megasas;c:\windows\system32\drivers\megasas.sys [2006-11-02 28776]
R4 mpio;Microsoft Multi-Path Bus Driver;c:\windows\system32\drivers\mpio.sys [2006-11-02 78952]
R4 msahci;msahci;c:\windows\system32\drivers\msahci.sys [2006-11-02 23144]
R4 msdsm;Microsoft Multi-Path Device Specific Module;c:\windows\system32\drivers\msdsm.sys [2006-11-02 80488]
R4 nfrd960;nfrd960;c:\windows\system32\drivers\nfrd960.sys [2006-11-02 45160]
R4 ntrigdigi;N-trig HID Tablet Driver;c:\windows\system32\drivers\ntrigdigi.sys [2006-11-02 20608]
R4 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [2006-11-02 40040]
R4 ql2300;QLogic Fibre Channel Miniport Driver;c:\windows\system32\drivers\ql2300.sys [2006-11-02 900712]
R4 ql40xx;QLogic iSCSI Miniport Driver;c:\windows\system32\drivers\ql40xx.sys [2006-11-02 106088]
R4 sbp2port;SBP-2 Transport/Protocol Bus Driver;c:\windows\system32\drivers\sbp2port.sys [2006-11-02 76392]
R4 sermouse;Serial Mouse Driver;c:\windows\system32\drivers\sermouse.sys [2010-07-06 19968]
R4 sffdisk;SFF Storage Class Driver;c:\windows\system32\drivers\sffdisk.sys [2006-11-02 13312]
R4 SiSRaid2;SiSRaid2;c:\windows\system32\drivers\sisraid2.sys [2006-11-02 38504]
R4 SiSRaid4;SiSRaid4;c:\windows\system32\drivers\sisraid4.sys [2006-11-02 71784]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-06-09 691696]
R4 uliahci;uliahci;c:\windows\system32\drivers\uliahci.sys [2006-11-02 235112]
R4 UlSata;UlSata;c:\windows\system32\drivers\ulsata.sys [2006-11-02 98408]
R4 ulsata2;ulsata2;c:\windows\system32\drivers\ulsata2.sys [2006-11-02 115816]
R4 usbcir;eHome Infrared Receiver (USBCIR);c:\windows\system32\drivers\usbcir.sys [2006-11-02 68608]
R4 ViaC7;VIA C7 Processor Driver;c:\windows\system32\drivers\viac7.sys [2006-11-02 39424]
R4 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\drivers\wacompen.sys [2006-11-02 20608]
R4 Wd;Microsoft Watchdog Timer Driver;c:\windows\system32\drivers\wd.sys [2006-11-02 19560]
R4 WmiAcpi;Microsoft Windows Management Interface for ACPI;c:\windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
S0 CLFS;Common Log (CLFS);c:\windows\System32\CLFS.sys [2010-07-06 224824]
S0 Ecache;ReadyBoost Caching Driver;c:\windows\System32\drivers\ecache.sys [2006-11-02 132200]
S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [2006-11-02 56424]
S0 fvevol;BitLocker Drive Encryption Filter Driver;c:\windows\System32\DRIVERS\fvevol.sys [2006-11-02 121960]
S0 msisadrv;Ovladač třídy ISA/EISA;c:\windows\system32\drivers\msisadrv.sys [2006-11-02 13928]
S0 spldr;Security Processor Loader Driver; [x]
S0 uagp35;Filtr Microsoft AGPv3.5;c:\windows\system32\DRIVERS\uagp35.sys [2006-11-02 56936]
S0 viamraid;viamraid;c:\windows\system32\DRIVERS\viamraid.sys [2010-03-05 138464]
S0 volmgr;Ovladač správce svazků;c:\windows\system32\drivers\volmgr.sys [2006-11-02 50280]
S0 volmgrx;Dynamic Volume Manager;c:\windows\System32\drivers\volmgrx.sys [2006-11-02 290408]
S0 vsmraid;vsmraid;c:\windows\system32\drivers\vsmraid.sys [2006-11-02 112232]
S0 Wdf01000;Kernel Mode Driver Frameworks service;c:\windows\system32\drivers\Wdf01000.sys [2010-07-06 495160]
S1 CSC;Offline Files Driver;c:\windows\system32\drivers\csc.sys [2006-11-02 319488]
S1 DfsC;Dfs Client Driver;c:\windows\system32\Drivers\dfsc.sys [2006-11-02 74752]
S1 nsiproxy;NSI proxy service;c:\windows\system32\drivers\nsiproxy.sys [2006-11-02 16384]
S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [2006-11-02 6144]
S1 Smb;Protokol TCP/IP a TCP/IPv6 orientovaný na zprávy (relace SMB);c:\windows\system32\DRIVERS\smb.sys [2006-11-02 66048]
S1 tdx;Ovladač pro podporu zastaralého rozhraní TDI NetIO;c:\windows\system32\DRIVERS\tdx.sys [2006-11-02 68096]
S1 Wanarpv6;Remote Access IPv6 ARP Driver;c:\windows\system32\DRIVERS\wanarp.sys [2006-11-02 61952]
S2 AudioEndpointBuilder;Koncové vytváření služby Windows Audio;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 BFE;Služba BFE;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 CscService;Soubory offline;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 DPS;Služba DPS (Diagnostic Policy Service);c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 EMDMgmt;ReadyBoost;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 FDResPub;Publikování prostředků rozpoznávání funkcí;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 gpsvc;Klient zásad skupiny;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 IKEEXT;Služba IKE and AuthIP IPsec Keying Modules;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 iphlpsvc;Pomocník IP;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 KtmRm;Služba KTMRM pro koordinátor DTC;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [2006-11-02 47104]
S2 luafv;UAC File Virtualization;c:\windows\system32\drivers\luafv.sys [2006-11-02 83456]
S2 MMCSS;Služba Plánovač multimédií;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 MpsSvc;Brána firewall systému Windows;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 netprofm;Služba seznamu sítí;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 NlaSvc;Sledování umístění v síti (NLA);c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 nsi;Služba rozhraní síťového úložiště;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 PcaSvc;Program Compatibility Assistant Service;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [2006-11-02 878080]
S2 ProfSvc;Služba Profil uživatele;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 rspndr;Link-Layer Topology Discovery Responder;c:\windows\system32\DRIVERS\rspndr.sys [2006-11-02 60416]
S2 slsvc;Licencování softwaru;c:\windows\system32\SLsvc.exe [2006-11-02 2592256]
S2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 TabletInputService;Služba Vstupní panel počítače Tablet PC;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [2006-11-02 27648]
S2 UxSms;Správce relací správce oken plochy;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 WerSvc;Služba Zasílání zpráv o chybách systému Windows;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2006-11-02 22016]
S2 WPDBusEnum;Služba Výčet přenosných zařízení;c:\windows\system32\svchost.exe [2006-11-02 22016]
S2 WSearch;Vyhledávání systému Windows;c:\windows\system32\SearchIndexer.exe [2006-11-02 287744]
S3 3xHybrid;SAA713x TV Card Service;c:\windows\system32\DRIVERS\3xHybrid.sys [2007-07-06 906368]
S3 atikmdag;atikmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-02-11 4450816]
S3 bowser;bowser;c:\windows\system32\DRIVERS\bowser.sys [2006-11-02 69632]
S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [2006-11-02 617472]
S3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service;c:\windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 iScsiPrt;Ovladač iScsiPort;c:\windows\system32\DRIVERS\msiscsi.sys [2006-11-02 168552]
S3 monitor;Služba ovladače funkce třídy monitorů Microsoft;c:\windows\system32\DRIVERS\monitor.sys [2006-11-02 41984]
S3 mpsdrv;Ovladač ověření brány firewall systému Windows;c:\windows\system32\drivers\mpsdrv.sys [2010-06-07 63488]
S3 mrxsmb10;SMB 1.x MiniRedirector;c:\windows\system32\DRIVERS\mrxsmb10.sys [2010-06-07 211968]
S3 mrxsmb20;SMB 2.0 MiniRedirector;c:\windows\system32\DRIVERS\mrxsmb20.sys [2010-06-07 58368]
S3 srv2;srv2;c:\windows\system32\DRIVERS\srv2.sys [2010-06-07 130048]
S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [2010-06-08 84992]
S3 tunmp;Microsoft Tun Miniport Adapter Driver;c:\windows\system32\DRIVERS\tunmp.sys [2010-07-06 15360]
S3 tunnel;Microsoft IPv6 Tunnel Miniport Adapter Driver;c:\windows\system32\DRIVERS\tunnel.sys [2010-07-06 25088]
S3 umbus;Ovladač sběrnice UMBus Enumerator;c:\windows\system32\DRIVERS\umbus.sys [2006-11-02 34816]
S3 WdiSystemHost;Hostitel diagnostického systému;c:\windows\System32\svchost.exe [2006-11-02 22016]


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
2008-04-11 15:23 38400 ----a-w- c:\windows\System32\SoundSchemes.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-06 23:02]

2010-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-06 23:02]

2010-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-120455064-1232677664-4241833918-1000Core.job
- c:\users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-24 12:32]

2010-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-120455064-1232677664-4241833918-1000UA.job
- c:\users\Momak\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-24 12:32]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
.

**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
Celkový čas: 2010-07-06 19:03:46
ComboFix-quarantined-files.txt 2010-07-06 17:03

Před spuštěním: 4 384 722 944
Po spuštění: 4 389 277 696

- - End Of File - - 60D087572F6C514C7567EF8E7F66F142

Stahni Gmer http://www.gmer.net/gmer.zip
-rozbal ho a spusť
-po prvním rychlém skenu klikni na tlačítko Save, uloží se log, který mi sem zkopíruješ.
-v pravém sloupci označ všechny položky fajfkou ve čtverečku a klikni na tlačítko scan
-až se sken dokončí, opět tlačítkem Save ulož log, který sem vložíš.

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-07-07 02:05:30
Windows 6.0.6000
Running: gmer.exe; Driver: C:\Users\Momak\AppData\Local\Temp\ugroypow.sys


---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 83BCE1F8

---- EOF - GMER 1.0.15 ----


GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-07-07 11:50:28
Windows 6.0.6000
Running: gmer.exe; Driver: C:\Users\Momak\AppData\Local\Temp\ugroypow.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x46 0x39 0x06 0xE0 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x11 0xD8 0xC7 0xA8 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xF0 0x25 0xE4 0xAA ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x46 0x39 0x06 0xE0 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x11 0xD8 0xC7 0xA8 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xF0 0x25 0xE4 0xAA ...

---- EOF - GMER 1.0.15 ----

Co ted počítač?

myslím že se o nějaké to procento uklidnil, ale nic závratného :(