Prosím o kontrolu

[lucassman]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Lucas at 2013-01-06 10:24:37
Microsoft Windows 7 Home Premium
System drive C: has 26 GB (44%) free of 60 GB
Total RAM: 8191 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:24:39, on 6.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Winstep\Nexus.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Lucas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe" /r
O4 - HKCU\..\Run: [Nexus] C:\Program Files (x86)\Winstep\Nexus.exe autostart
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{E47DBB47-05F5-4522-9F64-3C9894DB9CF4}: NameServer = 8.8.8.8,8.8.4.4
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 6576 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Winstep\WsxService"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
WLIDSvcM.exe 1768
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
KHALMNPR.EXE /API
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files (x86)\Winstep\Nexus.exe" autostart
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Windows\System32\rundll32.exe" P17RunE.dll,RunDLLEntry
"C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe" /r
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Microsoft Security Client\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges -Reinvoke
"C:\Program Files\Microsoft Security Client\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdate
\??\C:\Windows\system32\conhost.exe "7003116831981802781-4491143479546363871329217771-601314535-1617229041-1556820460
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Windows\system32\wuauclt.exe" /RunHandlerComServer
"C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.141.3129.0.exe" ANTIMALWARE /q
MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.141.3129.0.exe" ANTIMALWARE /q
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Lucas\Documents\Programy\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-28 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-06-16 329480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-06-16 59144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2012-11-29 7406392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Nexus"=C:\Program Files (x86)\Winstep\Nexus.exe [2012-03-28 16957056]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ActivControl]
C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe [2009-10-22 1233704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Lucas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HDDlife.lnk]
C:\Program Files (x86)\BinarySense\HDDlife 3\HDDlifePro.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"P17RunE"=RunDll32 P17RunE.dll,RunDLLEntry []
"VolPanel"=C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe [2010-12-08 241757]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2013-01-06 10:21:14 ----D---- C:\rsit
2012-12-31 13:24:15 ----D---- C:\Program Files (x86)\GRETECH
2012-12-28 11:03:33 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-12-28 11:03:23 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-12-24 20:01:09 ----D---- C:\Program Files\Logitech Gaming Software
2012-12-23 14:05:10 ----D---- C:\Users\Lucas\AppData\Roaming\FlashgetSetup
2012-12-23 14:05:10 ----D---- C:\Users\Lucas\AppData\Roaming\BITS
2012-12-23 14:05:01 ----D---- C:\Program Files (x86)\FlashGet Network
2012-12-23 13:58:17 ----D---- C:\Program Files (x86)\JDownloader
2012-12-21 08:31:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-21 08:31:45 ----A---- C:\Windows\system32\atmlib.dll
2012-12-21 08:31:45 ----A---- C:\Windows\system32\atmfd.dll
2012-12-21 08:31:44 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-20 09:29:24 ----D---- C:\Program Files\Creative
2012-12-20 09:28:53 ----A---- C:\Windows\SYSWOW64\CmdRtr.DLL
2012-12-20 09:28:53 ----A---- C:\Windows\SYSWOW64\APOMngr.DLL
2012-12-20 09:28:53 ----A---- C:\Windows\system32\CmdRtr64.DLL
2012-12-20 09:28:53 ----A---- C:\Windows\system32\APOMgr64.DLL
2012-12-20 09:26:37 ----D---- C:\Windows\SYSWOW64\Data
2012-12-20 09:26:37 ----D---- C:\Windows\system32\Data
2012-12-20 09:25:51 ----A---- C:\Windows\system32\drivers\P17.sys
2012-12-20 09:25:50 ----A---- C:\Windows\SYSWOW64\P17RunE.dll
2012-12-20 09:25:50 ----A---- C:\Windows\SYSWOW64\P17APO32.dll
2012-12-20 09:25:50 ----A---- C:\Windows\SYSWOW64\OemSpiE.dll
2012-12-20 09:25:50 ----A---- C:\Windows\system32\P17res.dll
2012-12-20 09:25:50 ----A---- C:\Windows\system32\ctdvins1.dll
2012-12-20 09:25:50 ----A---- C:\Windows\system32\ctcoins1.dll
2012-12-20 09:25:49 ----A---- C:\Windows\ResDefE.exe
2012-12-20 09:25:47 ----A---- C:\Windows\SYSWOW64\APOIM64.exe
2012-12-20 09:25:45 ----A---- C:\Windows\SYSWOW64\AddCat.exe
2012-12-20 09:25:44 ----A---- C:\Windows\system32\ludap17.ini
2012-12-20 09:25:44 ----A---- C:\Windows\system32\ctzapxx.ini
2012-12-20 08:52:45 ----HD---- C:\Program Files (x86)\Creative Installation Information
2012-12-20 08:52:34 ----N---- C:\Windows\SYSWOW64\Sens_oal.dll
2012-12-20 08:51:15 ----D---- C:\Program Files (x86)\Creative
2012-12-18 08:37:40 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-12-18 08:37:39 ----A---- C:\Windows\system32\nvcuda.dll
2012-12-18 08:37:38 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-12-18 08:37:38 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2012-12-18 08:37:38 ----A---- C:\Windows\system32\nvoglv64.dll
2012-12-18 08:37:37 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-12-18 08:37:34 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-12-18 08:37:34 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-12-18 08:37:34 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-12-18 08:37:34 ----A---- C:\Windows\system32\nvopencl.dll
2012-12-18 08:37:33 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-12-18 08:37:33 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-12-18 08:37:33 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-12-18 08:37:33 ----A---- C:\Windows\system32\nvinitx.dll
2012-12-18 08:37:33 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-12-18 08:37:33 ----A---- C:\Windows\system32\nvcuvid.dll
2012-12-18 08:37:33 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-12-18 08:37:32 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-12-18 08:37:32 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-12-18 08:37:32 ----A---- C:\Windows\system32\nvcompiler.dll
2012-12-18 08:35:18 ----D---- C:\ProgramData\NVIDIA
2012-12-18 08:32:49 ----A---- C:\Windows\system32\nvvsvc.exe
2012-12-18 08:32:49 ----A---- C:\Windows\system32\nvsvc64.dll
2012-12-18 08:32:49 ----A---- C:\Windows\system32\nvshext.dll
2012-12-18 08:32:48 ----A---- C:\Windows\system32\nvsvcr.dll
2012-12-18 08:32:48 ----A---- C:\Windows\system32\nvmctray.dll
2012-12-18 08:32:48 ----A---- C:\Windows\system32\nvcpl.dll
2012-12-18 08:32:03 ----D---- C:\ProgramData\NVIDIA Corporation
2012-12-18 08:27:46 ----D---- C:\NVIDIA
2012-12-17 07:57:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-17 07:57:54 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-17 07:57:53 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-17 07:57:53 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-17 07:57:53 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-17 07:57:53 ----A---- C:\Windows\system32\ieui.dll
2012-12-17 07:57:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-17 07:57:52 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-17 07:57:52 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-17 07:57:52 ----A---- C:\Windows\system32\urlmon.dll
2012-12-17 07:57:52 ----A---- C:\Windows\system32\url.dll
2012-12-17 07:57:51 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-17 07:57:51 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-17 07:57:51 ----A---- C:\Windows\system32\jscript9.dll
2012-12-17 07:57:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-17 07:57:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-17 07:57:50 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-17 07:57:50 ----A---- C:\Windows\system32\wininet.dll
2012-12-17 07:57:50 ----A---- C:\Windows\system32\vbscript.dll
2012-12-17 07:57:50 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-17 07:57:50 ----A---- C:\Windows\system32\jscript.dll
2012-12-17 07:57:49 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-17 07:57:49 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-17 07:57:49 ----A---- C:\Windows\system32\iertutil.dll
2012-12-17 07:57:47 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-17 07:57:46 ----A---- C:\Windows\system32\mshtml.dll
2012-12-17 07:57:46 ----A---- C:\Windows\system32\ieframe.dll
2012-12-17 07:57:45 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-15 19:52:45 ----SHD---- C:\$RECYCLE.BIN
2012-12-15 19:50:56 ----D---- C:\Windows\temp
2012-12-15 19:44:06 ----A---- C:\Windows\zip.exe
2012-12-15 19:44:06 ----A---- C:\Windows\SWSC.exe
2012-12-15 19:44:06 ----A---- C:\Windows\SWREG.exe
2012-12-15 19:44:06 ----A---- C:\Windows\sed.exe
2012-12-15 19:44:06 ----A---- C:\Windows\PEV.exe
2012-12-15 19:44:06 ----A---- C:\Windows\NIRCMD.exe
2012-12-15 19:44:06 ----A---- C:\Windows\MBR.exe
2012-12-15 19:44:06 ----A---- C:\Windows\grep.exe
2012-12-15 19:43:01 ----HD---- C:\Qoobox
2012-12-15 19:42:49 ----D---- C:\Windows\erdnt
2012-12-14 20:16:11 ----D---- C:\Program Files (x86)\AGEIA Technologies
2012-12-14 19:52:40 ----D---- C:\Program Files (x86)\Phyxion.net
2012-12-14 19:41:36 ----D---- C:\Program Files\WhoCrashed
2012-12-12 09:07:07 ----D---- C:\Windows\Migration
2012-12-12 09:06:10 ----A---- C:\Windows\SYSWOW64\ncobjapi.dll
2012-12-12 09:06:10 ----A---- C:\Windows\system32\ncobjapi.dll
2012-12-12 09:05:56 ----A---- C:\Windows\SYSWOW64\Register-CimProvider.exe
2012-12-12 09:05:56 ----A---- C:\Windows\system32\Register-CimProvider.exe
2012-12-12 09:05:54 ----A---- C:\Windows\SYSWOW64\winrsmgr.dll
2012-12-12 09:05:54 ----A---- C:\Windows\SYSWOW64\winrm.vbs
2012-12-12 09:05:54 ----A---- C:\Windows\system32\winrsmgr.dll
2012-12-12 09:05:54 ----A---- C:\Windows\system32\winrshost.exe
2012-12-12 09:05:48 ----A---- C:\Windows\SYSWOW64\winrshost.exe
2012-12-12 09:05:48 ----A---- C:\Windows\SYSWOW64\winrs.exe
2012-12-12 09:05:48 ----A---- C:\Windows\system32\winrs.exe
2012-12-12 09:05:47 ----A---- C:\Windows\SYSWOW64\wevtfwd.dll
2012-12-12 09:05:47 ----A---- C:\Windows\SYSWOW64\wecutil.exe
2012-12-12 09:05:47 ----A---- C:\Windows\SYSWOW64\wecapi.dll
2012-12-12 09:05:47 ----A---- C:\Windows\system32\wsmplpxy.dll
2012-12-12 09:05:47 ----A---- C:\Windows\system32\winrssrv.dll
2012-12-12 09:05:47 ----A---- C:\Windows\system32\wevtfwd.dll
2012-12-12 09:05:47 ----A---- C:\Windows\system32\wecutil.exe
2012-12-12 09:05:47 ----A---- C:\Windows\system32\wecsvc.dll
2012-12-12 09:05:47 ----A---- C:\Windows\system32\wecapi.dll
2012-12-12 09:05:46 ----A---- C:\Windows\system32\winrscmd.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\WsmRes.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\wsmplpxy.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\WsmAgent.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\winrssrv.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\PSModuleDiscoveryProvider.dll
2012-12-12 09:05:43 ----A---- C:\Windows\SYSWOW64\prvdmofcomp.dll
2012-12-12 09:05:43 ----A---- C:\Windows\system32\WsmRes.dll
2012-12-12 09:05:43 ----A---- C:\Windows\system32\WsmAgent.dll
2012-12-12 09:05:43 ----A---- C:\Windows\system32\PSModuleDiscoveryProvider.dll
2012-12-12 09:05:43 ----A---- C:\Windows\system32\prvdmofcomp.dll
2012-12-12 09:05:42 ----A---- C:\Windows\SYSWOW64\wsmprovhost.exe
2012-12-12 09:05:42 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2012-12-12 09:05:42 ----A---- C:\Windows\SYSWOW64\winrscmd.dll
2012-12-12 09:05:42 ----A---- C:\Windows\SYSWOW64\pwrshplugin.dll
2012-12-12 09:05:42 ----A---- C:\Windows\SYSWOW64\mi.dll
2012-12-12 09:05:42 ----A---- C:\Windows\system32\wsmprovhost.exe
2012-12-12 09:05:42 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2012-12-12 09:05:42 ----A---- C:\Windows\system32\mi.dll
2012-12-12 09:05:41 ----A---- C:\Windows\system32\pwrshplugin.dll
2012-12-12 09:05:38 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2012-12-12 09:05:38 ----A---- C:\Windows\SYSWOW64\wmitomi.dll
2012-12-12 09:05:38 ----A---- C:\Windows\SYSWOW64\wmidcom.dll
2012-12-12 09:05:38 ----A---- C:\Windows\SYSWOW64\miutils.dll
2012-12-12 09:05:38 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2012-12-12 09:05:38 ----A---- C:\Windows\system32\wmitomi.dll
2012-12-12 09:05:38 ----A---- C:\Windows\system32\wmidcom.dll
2012-12-12 09:05:38 ----A---- C:\Windows\system32\winrm.vbs
2012-12-12 09:05:38 ----A---- C:\Windows\system32\miutils.dll
2012-12-12 09:05:37 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2012-12-12 09:05:37 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-12-12 09:05:37 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-12-12 09:05:37 ----A---- C:\Windows\system32\framedynos.dll
2012-12-12 09:05:37 ----A---- C:\Windows\system32\framedyn.dll
2012-12-12 09:05:36 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-12-12 09:05:36 ----A---- C:\Windows\SYSWOW64\WsmGCDeps.dll
2012-12-12 09:05:36 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2012-12-12 09:05:36 ----A---- C:\Windows\SYSWOW64\wbemcomn2.dll
2012-12-12 09:05:36 ----A---- C:\Windows\system32\WsmWmiPl.dll
2012-12-12 09:05:36 ----A---- C:\Windows\system32\WsmAuto.dll
2012-12-12 09:05:36 ----A---- C:\Windows\system32\wbemcomn2.dll
2012-12-12 09:05:35 ----A---- C:\Windows\system32\WsmSvc.dll
2012-12-12 09:05:35 ----A---- C:\Windows\system32\WsmGCDeps.dll
2012-12-12 08:52:25 ----D---- C:\Program Files (x86)\Seagate
2012-12-12 08:47:55 ----D---- C:\Program Files (x86)\HD Tune
2012-12-12 08:46:01 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-12 08:46:01 ----A---- C:\Windows\system32\tzres.dll
2012-12-12 08:45:56 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 08:45:49 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-12 08:45:49 ----A---- C:\Windows\system32\winsrv.dll
2012-12-12 08:45:49 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-12 08:45:49 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 08:45:49 ----A---- C:\Windows\system32\conhost.exe
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 08:45:48 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 08:45:48 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-12 08:45:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-12 08:45:48 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-12 08:45:48 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-12 08:45:48 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-12 08:45:48 ----A---- C:\Windows\system32\wow64win.dll
2012-12-12 08:45:48 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-12 08:45:48 ----A---- C:\Windows\system32\wow64.dll
2012-12-12 08:45:48 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 08:45:47 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 08:45:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 08:45:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 08:45:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 08:45:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 08:45:46 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-12 08:45:37 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 08:45:36 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-12 08:40:49 ----D---- C:\Users\Lucas\AppData\Roaming\BinarySense
2012-12-07 14:42:07 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll

======List of files/folders modified in the last 1 months======

2013-01-06 10:24:39 ----D---- C:\Program Files\trend micro
2013-01-06 10:24:27 ----D---- C:\Windows\Prefetch
2013-01-06 10:24:14 ----SHD---- C:\System Volume Information
2013-01-06 10:16:47 ----D---- C:\Windows\System32
2013-01-06 10:16:47 ----D---- C:\Windows\inf
2013-01-06 10:16:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-06 10:15:44 ----D---- C:\Windows\system32\config
2013-01-06 10:10:51 ----D---- C:\Windows\Tasks
2013-01-06 10:10:51 ----D---- C:\Windows\system32\wfp
2013-01-06 10:10:51 ----D---- C:\Windows\system32\wbem
2013-01-06 10:10:51 ----D---- C:\Windows\system32\Tasks
2013-01-06 10:10:51 ----D---- C:\Windows\system32\DriverStore
2013-01-06 10:10:51 ----D---- C:\Windows\system32\catroot2
2013-01-06 10:10:51 ----D---- C:\Windows
2013-01-06 10:10:50 ----SHD---- C:\Windows\Installer
2013-01-06 10:10:50 ----D---- C:\Windows\AppCompat
2013-01-06 10:10:50 ----D---- C:\Users\Lucas\AppData\Roaming\vlc
2013-01-06 10:10:48 ----D---- C:\Program Files (x86)
2013-01-06 10:10:46 ----D---- C:\Windows\registration
2013-01-05 13:57:30 ----HD---- C:\Config.Msi
2013-01-02 13:30:41 ----D---- C:\Windows\SysWOW64
2013-01-02 13:30:40 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-01-02 09:57:05 ----RSD---- C:\Windows\assembly
2012-12-31 10:38:57 ----D---- C:\Users\Lucas\AppData\Roaming\uTorrent
2012-12-28 11:03:57 ----D---- C:\Windows\system32\drivers
2012-12-28 11:03:56 ----D---- C:\Windows\system32\catroot
2012-12-28 10:51:36 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-12-27 19:03:27 ----RD---- C:\Program Files
2012-12-25 13:49:09 ----D---- C:\Windows\Microsoft.NET
2012-12-25 13:08:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-25 13:08:37 ----D---- C:\Windows\system32\cs-CZ
2012-12-25 13:07:06 ----D---- C:\Windows\SYSWOW64\en-US
2012-12-25 13:07:06 ----D---- C:\Windows\system32\en-US
2012-12-25 10:43:01 ----D---- C:\ProgramData\Origin
2012-12-25 10:42:52 ----D---- C:\Users\Lucas\AppData\Roaming\Origin
2012-12-24 19:57:15 ----D---- C:\Users\Lucas\AppData\Roaming\Logishrd
2012-12-21 08:33:53 ----D---- C:\Windows\winsxs
2012-12-20 09:58:17 ----D---- C:\ProgramData\Creative
2012-12-20 09:29:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-20 08:52:41 ----D---- C:\Program Files (x86)\Common Files
2012-12-19 07:50:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-18 08:39:57 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-18 08:39:45 ----D---- C:\Temp
2012-12-18 08:35:18 ----HD---- C:\ProgramData
2012-12-18 08:32:44 ----D---- C:\Windows\Help
2012-12-18 08:32:44 ----D---- C:\Program Files\NVIDIA Corporation
2012-12-17 09:41:39 ----D---- C:\Windows\rescache
2012-12-17 08:52:29 ----D---- C:\Windows\SYSWOW64\migration
2012-12-17 08:52:29 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-17 08:52:28 ----D---- C:\Windows\system32\migration
2012-12-17 08:52:28 ----D---- C:\Program Files\Internet Explorer
2012-12-16 16:00:16 ----D---- C:\Windows\PolicyDefinitions
2012-12-15 19:48:50 ----A---- C:\Windows\system.ini
2012-12-15 19:48:47 ----D---- C:\Windows\system32\drivers\etc
2012-12-15 19:46:48 ----D---- C:\Windows\SYSWOW64\drivers
2012-12-15 19:46:48 ----D---- C:\Windows\AppPatch
2012-12-15 18:34:22 ----D---- C:\Windows\system32\LogFiles
2012-12-14 22:14:01 ----D---- C:\Windows\SYSWOW64\directx
2012-12-14 20:20:19 ----D---- C:\Windows\Minidump
2012-12-14 20:16:34 ----D---- C:\Program Files (x86)\NVIDIA 3D Vision driver
2012-12-14 20:09:47 ----D---- C:\Windows\system32\NDF
2012-12-14 08:00:11 ----D---- C:\Windows\pss
2012-12-12 13:12:09 ----D---- C:\Windows\debug
2012-12-12 09:07:07 ----D---- C:\Windows\SYSWOW64\wbem
2012-12-12 09:04:13 ----A---- C:\Windows\system32\MRT.exe
2012-12-12 09:04:09 ----D---- C:\ProgramData\Microsoft Help
2012-12-12 08:41:40 ----AD---- C:\ProgramData\TEMP

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-12-19 564824]
R1 BS_I2cIo;BS_I2cIo; \??\C:\Windows\system32\drivers\BS_I2cIo.sys [2008-06-16 15408]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-28 283200]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-11-26 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-11-26 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 ActivHidSerMini;Promethean Serial Board Driver; C:\Windows\system32\DRIVERS\activhidsermini.sys [2009-05-05 65152]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2011-09-02 76056]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [2012-10-02 66360]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2011-09-02 15128]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 P17;SB Audigy; C:\Windows\system32\drivers\P17.sys [2009-10-16 1309696]
R3 prmvmouse;Promethean HID Mouse Service; C:\Windows\system32\DRIVERS\activmouse.sys [2009-10-05 8152]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-26 425064]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BSMI;BSMI; \??\C:\Program Files (x86)\Tseries BIOS Update\BSMIx64.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-11-01 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-11-01 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rspLLL;rspLLL; C:\Windows\system32\DRIVERS\rspLLL64.sys [2012-05-14 21560]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-11-01 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-11-01 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2011-10-19 423424]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-11-30 76888]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-11-30 382824]
R2 Winstep Xtreme Service;Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService []
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-12-20 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-12-20 79360]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-24 541760]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-13 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Márty84]

Zdravim

Co jste tam vyvadel 15.12. s ComboFixem?


Udelejte !!!uplnou!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[lucassman]

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.03.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Lucas :: LUCAS-PC [administrátor]

6.1.2013 11:53:36
mbam-log-2013-01-06 (11-53-36).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 368621
Uplynulý čas: 38 minut, 59 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[Márty84]

Co jste tam vyvadel 15.12. s ComboFixem?

Vidim tam par zbytecnosti, ktere muzem povypinat, pokud chcete. Je jinak s pc nejaky problem? Nebo jde ciste o preventivku?

[lucassman]

Děkuji, jde čistě o kontrolu, počítač je bratra takže co vyváděl s ComboFixem nemám tušení.

[Márty84]

Podivejte se, jestli nenajdete log z CF. Mel by byt zde C:\ComboFix.txt


Ja sepisu skript na to mazani, bude to nejakou dobu trvat

[lucassman]

Bohužel, log jsem nikde nenašel.

[Márty84]

Tak mu reknete, ze jestli bude priste experimentovat na vlastni pest, obzvlast s CF, bude mit problem. Je to poruseni pravidel fora. CF muze poslat system do vecnych lovist. Navic smaze veskere stopy pripadne nakazy a kdyz problemy zustanou, neni se ceho chytit



Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] /64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"P17RunE"=-

Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)

[lucassman]

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Lucas
->Temp folder emptied: 28984585 bytes
->Temporary Internet Files folder emptied: 1273060 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 209353085 bytes
->Flash cache emptied: 2384 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 97938 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 755 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50635 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 229,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Lucas
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\P17RunE deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 01062013_130750

Files moved on Reboot...
C:\Users\Lucas\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

[Márty84]

Vsechny tyto programy - vcetne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)
Pokud je jeste v pc, prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, zda je pc v poradku a pokud ano, bude to vse

[lucassman]

Takže vše provedeno, včetně defragmentace, PC se zdá v pořádku, ComboFix už v počítači není, zbyla po něm jen skrytá složka Qoobox.

[Márty84]

Tu muzete smazat. No a pokud vse slape, mame hotovo

[lucassman]

Dobrá tak ji smažu.

Děkuji za pomoc.

[Márty84]

Nemate zac, mejte se