Neznamý vir

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
morphe
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 20 Dub 2012 17:32

Neznamý vir

#1 Příspěvek od morphe »

Dobry den , mam problem klikl jsem na stranku, kterou mi poslal kamos a stahl se mi soubor a najednou se to posila vsem mym přatelum. Antivirak ''ESET SMART SESURITY 4'' v kompletnim scenu meho ultabooku nic nenasel.¨

tady je sken z RSITU co mam dělat dal ? :)

Logfile of random's system information tool 1.09 (written by random/random)
Run by mOrPhE at 2013-01-24 14:48:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 34 GB (35%) free of 98 GB
Total RAM: 3934 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:48:36, on 24.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Users\mOrPhE\68956435567898775\winsvc.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\mOrPhE\AppData\Local\Temp\2335980855.exe
C:\Users\mOrPhE\AppData\Roaming\AcVxzDUdaGKeNRrGknzO.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
C:\Users\mOrPhE\AppData\Local\Temp\4254864173.exe
C:\Users\mOrPhE\AppData\Roaming\AcVxzDUdaGKeNRrGknzO.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\mOrPhE.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\mOrPhE\LOCALS~1\Temp\msooqmq.bat
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.157.56.28 http://www.google-analytics.com.
O1 - Hosts: 192.157.56.28 ad-emea.doubleclick.net.
O1 - Hosts: 192.157.56.28 http://www.statcounter.com.
O1 - Hosts: 192.157.56.28 connect.facebook.net.
O1 - Hosts: 192.157.56.28 platform.twitter.com.
O1 - Hosts: 93.115.241.27 http://www.google-analytics.com.
O1 - Hosts: 93.115.241.27 ad-emea.doubleclick.net.
O1 - Hosts: 93.115.241.27 http://www.statcounter.com.
O1 - Hosts: 93.115.241.27 connect.facebook.net.
O1 - Hosts: 93.115.241.27 platform.twitter.com.
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [Microsoft Windows Service] C:\Users\mOrPhE\68956435567898775\winsvc.exe
O4 - HKCU\..\Run: [WinRAR] C:\Users\mOrPhE\AppData\Roaming\9C1904\9C1904.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Sleep memory optimizer (FFSOpzSvc) - Acer Incorporated - C:\Program Files\Sleep Memory Optimizer\FFSService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\Windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.5 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Acer Theft Shield Service (USecuAppSvc) - Unknown owner - c:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: xsherlock - Wellbia.com Co., Ltd. - C:\Windows\system32\xsherlock.xem
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe

--
End of file - 13441 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 33471712
\??\C:\Windows\system32\conhost.exe "2384294002982347569296403506842007-1583964359-76684270915931093391700005001
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Sleep Memory Optimizer\FFSService.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
C:\Windows\SysWOW64\irstrtsv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"c:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe"
"C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Windows\System32\hkcmd.exe"
"C:\Users\mOrPhE\68956435567898775\winsvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxSearchSuggestTrialStarted2012Q4/4/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="1092.0.1700607723\500355584" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxSearchSuggestTrialStarted2012Q4/4/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --channel="1092.1.78462184\1289608427" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1092.3.218594476\945637108" --supports-dual-gpus=false --skip-gpu-full-info-collection --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2653 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Users\mOrPhE\AppData\Local\Temp\2335980855.exe"
"C:\Users\mOrPhE\AppData\Roaming\AcVxzDUdaGKeNRrGknzO.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1092.4.1157806018\988499168" --lang=cs --ignored=" --type=renderer " /prefetch:13
svchost.exe
taskeng.exe {6C48377C-9BF6-4DF3-83B1-26ADDD78AFBE}
"C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"c:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe"
"C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe"
\??\C:\Windows\system32\conhost.exe "783792514704071495203214088211442213801608222214199335330518217216721214104527
\??\C:\Windows\system32\conhost.exe "-195867517389441686-141519916241862551-1721009138214052525-10864669381030456023
taskeng.exe {B4C9AC8C-C3ED-4B69-8955-7B6C7956E48C}
"C:\Users\mOrPhE\AppData\Local\Temp\4254864173.exe"
"C:\Users\mOrPhE\AppData\Roaming\AcVxzDUdaGKeNRrGknzO.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/4/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="1092.11.1541708684\605284335" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/4/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="1092.14.1779279632\1840538893" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/4/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="1092.18.2088295084\1836479544" /prefetch:3
"C:\Users\mOrPhE\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
C:\Windows\tasks\PC SpeedUp Service Deactivator.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-09 52352]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-12 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-02-20 170264]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-20 440600]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-03-16 12459112]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-03-09 1158248]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-03-09 1021056]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-03-09 800896]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-20 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2013-01-04 256448]
"Microsoft Windows Service"=C:\Users\mOrPhE\68956435567898775\winsvc.exe [2013-01-23 63488]
"WinRAR"=C:\Users\mOrPhE\AppData\Roaming\9C1904\9C1904.exe [2010-11-21 167936]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-27 291608]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2012-03-24 1105488]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-14 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-24 14:48:15 ----D---- C:\rsit
2013-01-24 14:48:15 ----D---- C:\Program Files\trend micro
2013-01-24 14:40:36 ----A---- C:\Users\mOrPhE\AppData\Roaming\jan24.exe
2013-01-23 22:39:50 ----A---- C:\Users\mOrPhE\AppData\Roaming\AcVxzDUdaGKeNRrGknzO.exe
2013-01-23 21:49:39 ----SHD---- C:\Config.Msi
2013-01-23 21:34:43 ----D---- C:\Users\mOrPhE\AppData\Roaming\SpecialSavings
2013-01-23 21:34:43 ----D---- C:\Users\mOrPhE\AppData\Roaming\PerformerSoft
2013-01-23 21:34:42 ----A---- C:\Windows\system32\roboot64.exe
2013-01-23 21:34:41 ----D---- C:\Program Files (x86)\File Scout
2013-01-23 21:34:40 ----D---- C:\Users\mOrPhE\AppData\Roaming\StatusWinks
2013-01-23 21:34:40 ----D---- C:\Users\mOrPhE\AppData\Roaming\Mozilla
2013-01-23 21:01:20 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2013-01-23 20:23:25 ----A---- C:\Users\mOrPhE\AppData\Roaming\jan23.exe
2013-01-23 20:23:16 ----A---- C:\Users\mOrPhE\AppData\Roaming\nMNtffsdf5ev.exe
2013-01-23 16:43:08 ----A---- C:\Users\mOrPhE\AppData\Roaming\click.exe
2013-01-23 15:56:15 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-01-23 15:56:15 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-01-23 15:56:15 ----A---- C:\Windows\SYSWOW64\java.exe
2013-01-23 15:46:52 ----D---- C:\Program Files (x86)\ESET
2013-01-23 15:41:29 ----RD---- C:\Program Files (x86)\Skype
2013-01-23 15:40:42 ----D---- C:\Users\mOrPhE\AppData\Roaming\ESET
2013-01-23 15:40:10 ----D---- C:\ProgramData\ESET
2013-01-23 15:40:10 ----D---- C:\Program Files\ESET
2013-01-23 10:28:04 ----D---- C:\Users\mOrPhE\AppData\Roaming\FoozKids
2013-01-23 01:00:13 ----D---- C:\Program Files\CCleaner
2013-01-23 00:57:02 ----A---- C:\Windows\wininit.ini
2013-01-22 23:59:08 ----A---- C:\Windows\SYSWOW64\Msvcr71.dll
2013-01-22 23:59:08 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2013-01-22 23:59:08 ----A---- C:\Windows\SYSWOW64\gdiplus.dll
2013-01-22 17:16:45 ----RHD---- C:\Users\mOrPhE\AppData\Roaming\SecuROM
2013-01-22 17:15:36 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2013-01-22 17:14:35 ----D---- C:\Windows\SYSWOW64\xlive
2013-01-22 17:14:35 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-01-22 15:11:09 ----A---- C:\Users\mOrPhE\AppData\Roaming\uchwcrmxwvqotpocurb.exe
2013-01-22 15:10:38 ----A---- C:\Users\mOrPhE\AppData\Roaming\nMNtfaARw2l97e30p5ev.exe
2013-01-22 15:10:13 ----AH---- C:\Users\mOrPhE\AppData\Roaming\f4f4f4f4f.txt
2013-01-22 13:50:53 ----D---- C:\Program Files (x86)\uTorrent
2013-01-22 13:49:48 ----D---- C:\Users\mOrPhE\AppData\Roaming\uTorrent
2013-01-22 07:13:25 ----SHD---- C:\ProgramData\SecuROM
2013-01-21 23:00:32 ----AH---- C:\Users\mOrPhE\AppData\Roaming\winsvcns.sys
2013-01-21 18:59:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-01-21 18:59:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-01-21 18:59:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-01-21 18:59:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-01-21 18:59:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-01-21 18:59:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-01-21 18:59:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-01-21 18:59:31 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-01-21 18:59:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-01-21 18:59:29 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-01-21 18:59:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-01-21 18:59:29 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-01-21 18:59:29 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-01-21 18:59:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-01-21 18:59:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-01-21 18:59:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-01-21 18:59:29 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-01-21 18:59:28 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-01-21 18:59:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-01-21 18:59:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-01-21 18:59:28 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-01-21 18:59:28 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-01-21 18:59:28 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-01-21 18:59:28 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-01-21 18:59:27 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-01-21 18:59:27 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-01-21 18:59:27 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-01-21 18:59:27 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-01-21 18:59:26 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-01-21 18:59:26 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-01-21 18:59:26 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-01-21 18:59:26 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-01-21 18:59:26 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-01-21 18:59:26 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-01-21 18:59:25 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-01-21 18:59:25 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-01-21 18:59:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-01-21 18:59:25 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-01-21 18:59:25 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-01-21 18:59:25 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-01-21 18:59:25 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-01-21 18:59:24 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-01-21 18:59:24 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-01-21 18:59:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-01-21 18:59:24 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-01-21 18:59:24 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-01-21 18:59:24 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-01-21 18:59:23 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-01-21 18:59:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-01-21 18:59:23 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-01-21 18:59:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-01-21 18:59:23 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-01-21 18:59:23 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-01-21 18:59:23 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-01-21 18:59:23 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-01-21 18:59:22 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-01-21 18:59:22 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-01-21 18:59:22 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-01-21 18:59:22 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-01-21 18:59:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-01-21 18:59:22 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-01-21 18:59:22 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-01-21 18:59:22 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-01-21 18:59:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-01-21 18:59:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-01-21 18:59:21 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-01-21 18:59:21 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-01-21 18:59:20 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-01-21 18:59:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-01-21 18:59:20 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-01-21 18:59:20 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-01-21 18:59:19 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-01-21 18:59:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-01-21 18:59:19 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-01-21 18:59:19 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-01-21 18:59:19 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-01-21 18:59:19 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-01-21 18:59:19 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-01-21 18:59:19 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-01-21 18:59:18 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-01-21 18:59:18 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-01-21 18:59:18 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-01-21 18:59:18 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-01-21 18:59:18 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-01-21 18:59:18 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-01-21 18:59:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-01-21 18:59:17 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-01-21 18:59:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-01-21 18:59:17 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-01-21 18:59:17 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-01-21 18:59:17 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-01-21 18:59:16 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-01-21 18:59:16 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-01-21 18:59:16 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-01-21 18:59:16 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-01-21 18:59:15 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-01-21 18:59:15 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-01-21 18:59:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-01-21 18:59:15 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-01-21 18:59:15 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-01-21 18:59:15 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-01-21 18:59:14 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-01-21 18:59:14 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-01-21 18:59:14 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-01-21 18:59:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-01-21 18:59:14 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-01-21 18:59:14 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-01-21 18:59:14 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-01-21 18:59:14 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-01-21 18:59:13 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-01-21 18:59:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-01-21 18:59:13 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-01-21 18:59:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-01-21 18:59:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-01-21 18:59:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-01-21 18:59:13 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-01-21 18:59:13 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-01-21 18:59:12 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-01-21 18:59:12 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-01-21 18:59:12 ----A---- C:\Windows\system32\xinput1_3.dll
2013-01-21 18:59:12 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-01-21 18:59:12 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-01-21 18:59:11 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-01-21 18:59:11 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-01-21 18:59:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-01-21 18:59:11 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-01-21 18:59:11 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-01-21 18:59:11 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-01-21 18:59:10 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-01-21 18:59:10 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-01-21 18:59:10 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-01-21 18:59:10 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-01-21 18:59:10 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-01-21 18:59:10 ----A---- C:\Windows\system32\d3dx10.dll
2013-01-21 18:59:09 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-01-21 18:59:09 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-01-21 18:59:09 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-01-21 18:59:09 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-01-21 18:59:09 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-01-21 18:59:09 ----A---- C:\Windows\system32\xinput1_2.dll
2013-01-21 18:59:09 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-01-21 18:59:09 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-01-21 18:59:09 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-01-21 18:59:09 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-01-21 18:59:08 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-01-21 18:59:08 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-01-21 18:59:08 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-01-21 18:59:08 ----A---- C:\Windows\system32\xinput1_1.dll
2013-01-21 18:59:08 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-01-21 18:59:08 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-01-21 18:59:07 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-01-21 18:59:07 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-01-21 18:59:06 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-01-21 18:59:06 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-01-21 18:59:06 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-01-21 18:59:06 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-01-21 18:59:06 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-01-21 18:59:06 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-01-21 18:59:05 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-01-21 18:59:05 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-01-21 18:59:05 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-01-21 18:59:05 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-01-21 18:59:05 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-01-21 18:59:05 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-01-21 18:59:04 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-01-21 18:59:04 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-01-21 18:59:04 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-01-21 18:59:04 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-01-21 18:56:40 ----ASH---- C:\Windows\SYSWOW64\xvidvfw.dll
2013-01-21 18:56:40 ----ASH---- C:\Windows\SYSWOW64\xvidcore.dll
2013-01-21 12:58:17 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-01-21 12:58:17 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-01-21 12:58:17 ----A---- C:\Windows\system32\Wpc.dll
2013-01-21 12:58:17 ----A---- C:\Windows\system32\gameux.dll
2013-01-21 12:57:47 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-01-21 12:57:47 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-01-21 12:57:47 ----A---- C:\Windows\system32\winsrv.dll
2013-01-21 12:57:47 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-21 12:57:47 ----A---- C:\Windows\system32\kernel32.dll
2013-01-21 12:57:47 ----A---- C:\Windows\system32\conhost.exe
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-21 12:57:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-21 12:57:46 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-01-21 12:57:46 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-01-21 12:57:46 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-01-21 12:57:46 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-21 12:57:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-21 12:57:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-21 12:57:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-21 12:57:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-21 12:57:44 ----A---- C:\Windows\SYSWOW64\user.exe
2013-01-21 12:57:44 ----A---- C:\Windows\system32\wow64win.dll
2013-01-21 12:57:44 ----A---- C:\Windows\system32\wow64.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-21 12:57:43 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-21 12:57:43 ----A---- C:\Windows\system32\wow64cpu.dll
2013-01-21 12:57:43 ----A---- C:\Windows\system32\ntvdm64.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-21 12:57:42 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-21 12:57:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-21 12:57:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-21 12:57:41 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-21 12:57:41 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-21 12:57:41 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-21 12:57:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-21 01:01:27 ----A---- C:\Users\mOrPhE\AppData\Roaming\Battery Meter_Settings.ini
2013-01-21 00:59:01 ----A---- C:\Users\mOrPhE\AppData\Roaming\GPU MeterV2_Settings.ini
2013-01-21 00:56:12 ----A---- C:\Users\mOrPhE\AppData\Roaming\Network Meter_Settings.ini
2013-01-21 00:53:56 ----A---- C:\Users\mOrPhE\AppData\Roaming\All CPU MeterV3_Settings.ini
2013-01-21 00:48:26 ----A---- C:\Users\mOrPhE\AppData\Roaming\Drives Meter_Settings.ini
2013-01-20 23:29:01 ----D---- C:\ProgramData\Binarysense
2013-01-20 23:01:50 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-01-10 23:52:53 ----D---- C:\Program Files (x86)\gPotato.eu
2013-01-09 21:25:22 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-01-09 21:25:22 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 21:25:09 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-01-09 21:25:09 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-01-09 21:25:09 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 21:25:09 ----A---- C:\Windows\system32\msxml3.dll
2013-01-09 21:25:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-01-09 21:25:08 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 21:25:07 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-01-09 21:25:07 ----A---- C:\Windows\system32\usp10.dll
2013-01-09 21:24:50 ----A---- C:\Windows\system32\taskhost.exe
2013-01-09 21:24:49 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 14:56:32 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-01-09 14:53:40 ----HD---- C:\Windows\msdownld.tmp
2013-01-09 14:53:39 ----D---- C:\Windows\SYSWOW64\directx
2013-01-07 20:43:30 ----D---- C:\Program Files (x86)\DsNET Corp
2013-01-07 20:43:05 ----D---- C:\ProgramData\Ask
2013-01-07 17:40:18 ----D---- C:\Users\mOrPhE\AppData\Roaming\WildTangent
2013-01-07 16:26:28 ----D---- C:\Program Files (x86)\Microsoft Works
2013-01-07 16:26:17 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2013-01-07 16:26:01 ----D---- C:\Windows\PCHEALTH
2013-01-07 16:24:59 ----D---- C:\Program Files\Microsoft Office
2013-01-07 16:24:56 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-01-07 16:24:40 ----D---- C:\Program Files (x86)\Microsoft Office
2013-01-07 16:24:19 ----RHD---- C:\MSOCache
2013-01-07 16:18:53 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-01-07 16:18:45 ----D---- C:\Users\mOrPhE\AppData\Roaming\DAEMON Tools Lite
2013-01-07 16:18:43 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-01-07 16:17:34 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-12-30 22:29:37 ----RD---- C:\MORPHE
2012-12-29 23:20:12 ----D---- C:\Users\mOrPhE\AppData\Roaming\CyberLink
2012-12-27 20:51:17 ----D---- C:\Users\mOrPhE\AppData\Roaming\GRETECH
2012-12-27 20:51:13 ----D---- C:\Program Files (x86)\GRETECH

======List of files/folders modified in the last 1 month======

2013-01-24 14:48:16 ----D---- C:\Windows\Temp
2013-01-24 14:48:15 ----RD---- C:\Program Files
2013-01-24 00:04:18 ----D---- C:\Windows\System32
2013-01-24 00:04:18 ----D---- C:\Windows\inf
2013-01-24 00:04:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-24 00:02:05 ----A---- C:\Windows\SYSWOW64\log.txt
2013-01-24 00:00:06 ----D---- C:\Windows\system32\config
2013-01-23 22:39:32 ----D---- C:\Windows
2013-01-23 22:39:28 ----D---- C:\Program Files (x86)\Acer
2013-01-23 21:57:43 ----HD---- C:\ProgramData
2013-01-23 21:49:41 ----SHD---- C:\Windows\Installer
2013-01-23 21:49:41 ----D---- C:\Program Files (x86)
2013-01-23 21:48:58 ----D---- C:\Program Files (x86)\Common Files
2013-01-23 21:46:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-23 21:43:35 ----D---- C:\ProgramData\WildTangent
2013-01-23 21:38:28 ----D---- C:\Windows\system32\Tasks
2013-01-23 21:36:44 ----D---- C:\Windows\system32\drivers\etc
2013-01-23 21:34:47 ----D---- C:\Windows\Tasks
2013-01-23 20:57:16 ----SD---- C:\ProgramData\Microsoft
2013-01-23 20:57:16 ----D---- C:\Program Files (x86)\Microsoft
2013-01-23 20:40:48 ----D---- C:\Users\mOrPhE\AppData\Roaming\Skype
2013-01-23 20:31:56 ----D---- C:\Windows\winsxs
2013-01-23 17:17:30 ----D---- C:\Windows\system32\catroot
2013-01-23 15:56:15 ----D---- C:\Windows\SysWOW64
2013-01-23 15:56:06 ----D---- C:\Program Files (x86)\Java
2013-01-23 15:41:34 ----D---- C:\ProgramData\Skype
2013-01-23 15:40:30 ----D---- C:\Windows\system32\DriverStore
2013-01-23 15:40:30 ----D---- C:\Windows\system32\drivers
2013-01-23 15:37:13 ----D---- C:\ProgramData\McAfee
2013-01-23 15:37:13 ----D---- C:\Program Files\Common Files
2013-01-23 15:37:13 ----D---- C:\Program Files (x86)\McAfee
2013-01-23 11:30:43 ----SD---- C:\Users\mOrPhE\AppData\Roaming\Microsoft
2013-01-23 10:28:04 ----D---- C:\Users\mOrPhE\AppData\Roaming\Adobe
2013-01-23 09:26:19 ----D---- C:\Windows\system32\NDF
2013-01-23 00:57:48 ----D---- C:\Windows\Logs
2013-01-22 17:14:54 ----RSD---- C:\Windows\assembly
2013-01-22 05:33:04 ----D---- C:\Windows\system32\catroot2
2013-01-22 03:53:19 ----D---- C:\Windows\rescache
2013-01-22 03:15:15 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-01-22 03:15:15 ----D---- C:\Windows\system32\cs-CZ
2013-01-22 03:15:14 ----D---- C:\Windows\AppPatch
2013-01-21 18:59:02 ----D---- C:\Windows\Microsoft.NET
2013-01-21 05:34:57 ----D---- C:\Windows\SoftwareDistribution
2013-01-21 05:31:58 ----D---- C:\Windows\SYSWOW64\winrm
2013-01-21 05:31:58 ----D---- C:\Windows\SYSWOW64\slmgr
2013-01-21 05:31:58 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-01-21 05:31:58 ----D---- C:\Windows\SYSWOW64\migwiz
2013-01-21 05:31:58 ----D---- C:\Windows\SYSWOW64\en
2013-01-21 05:31:58 ----D---- C:\Windows\servicing
2013-01-21 05:31:58 ----D---- C:\Windows\ehome
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Sidebar
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Photo Viewer
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Media Player
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Mail
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Journal
2013-01-21 05:31:58 ----D---- C:\Program Files\Windows Defender
2013-01-21 05:31:58 ----D---- C:\Program Files\Common Files\System
2013-01-21 05:31:58 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-01-21 05:31:58 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-01-21 05:31:58 ----D---- C:\Program Files (x86)\Windows Media Player
2013-01-21 05:31:58 ----D---- C:\Program Files (x86)\Windows Mail
2013-01-21 05:31:58 ----D---- C:\Program Files (x86)\Windows Defender
2013-01-21 05:31:57 ----D---- C:\Windows\SYSWOW64\en-US
2013-01-21 05:31:57 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2013-01-21 05:31:57 ----D---- C:\Windows\SYSWOW64\drivers
2013-01-21 05:31:56 ----D---- C:\Windows\SYSWOW64\WCN
2013-01-21 05:31:56 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-01-21 05:31:56 ----D---- C:\Windows\SYSWOW64\DriverStore
2013-01-21 05:31:56 ----D---- C:\Windows\SYSWOW64\Dism
2013-01-21 05:31:56 ----D---- C:\Windows\system32\winrm
2013-01-21 05:31:56 ----D---- C:\Windows\system32\sysprep
2013-01-21 05:31:56 ----D---- C:\Windows\system32\slmgr
2013-01-21 05:31:56 ----D---- C:\Windows\system32\sk-SK
2013-01-21 05:31:56 ----D---- C:\Windows\system32\oobe
2013-01-21 05:31:56 ----D---- C:\Windows\system32\migwiz
2013-01-21 05:31:56 ----D---- C:\Windows\system32\en
2013-01-21 05:31:56 ----D---- C:\Windows\system32\Boot
2013-01-21 05:31:56 ----D---- C:\Windows\en-US
2013-01-21 05:31:54 ----D---- C:\Windows\system32\en-US
2013-01-21 05:31:53 ----D---- C:\Windows\system32\WCN
2013-01-21 05:31:53 ----D---- C:\Windows\system32\drivers\en-US
2013-01-21 05:31:53 ----D---- C:\Windows\system32\Dism
2013-01-21 05:31:52 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2013-01-21 05:31:50 ----D---- C:\Program Files\DVD Maker
2013-01-21 05:31:47 ----D---- C:\Windows\Speech
2013-01-20 23:22:11 ----SHD---- C:\System Volume Information
2013-01-19 10:15:30 ----D---- C:\Windows\system32\LogFiles
2013-01-10 23:08:39 ----RD---- C:\Users
2013-01-09 21:54:19 ----D---- C:\Windows\debug
2013-01-09 21:32:34 ----D---- C:\ProgramData\Microsoft Help
2013-01-09 21:27:53 ----A---- C:\Windows\system32\MRT.exe
2013-01-09 15:00:59 ----D---- C:\Windows\OEMTemp
2013-01-09 03:18:03 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-01-08 15:53:56 ----A---- C:\Windows\win.ini
2013-01-08 01:06:50 ----RSD---- C:\Windows\Fonts
2013-01-07 16:26:24 ----D---- C:\Program Files (x86)\MSBuild
2013-01-07 16:26:14 ----D---- C:\Windows\ShellNew
2013-01-07 16:26:01 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-01-07 16:25:38 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-12-30 15:13:43 ----D---- C:\Windows\system32\wdi
2012-12-29 23:20:16 ----D---- C:\ProgramData\CyberLink

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-11-30 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-02-27 16152]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-07 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2012-01-21 16128]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-02-15 3538432]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2012-03-09 30848]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2012-02-24 239400]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-14 14692224]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-03-21 4013928]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 irstrtdv;Intel(R) Rapid Start Technology Driver; C:\Windows\system32\DRIVERS\irstrtdv.sys [2012-02-22 26504]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-02-27 356120]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-02-27 788760]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-11 60184]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2012-03-09 36480]
S3 AX88772B;ASIX AX88772B USB2.0 to Fast Ethernet Adapter; C:\Windows\system32\DRIVERS\ax88772b.sys [2011-01-01 98816]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2012-03-09 340096]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2012-03-09 111232]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2012-03-09 168064]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2012-03-09 68736]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2012-03-09 281472]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2012-03-09 551552]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2012-03-20 314472]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-03-09 107648]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-03-24 355920]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2012-02-08 871296]
R2 FFSOpzSvc;Sleep memory optimizer; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [2011-09-18 141192]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2012-02-29 28264]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-16 127320]
R2 irstrtsv;Intel(R) Rapid Start Technology Service; C:\Windows\SysWOW64\irstrtsv.exe [2012-02-24 192856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-16 162648]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-02-07 255376]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-16 276824]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2012-01-05 256536]
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2013-01-04 323008]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-16 362840]
R2 USecuAppSvc;Acer Theft Shield Service; c:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [2012-03-07 236648]
R2 ZAtheros Wlan Agent;ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [2012-02-20 72864]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-16 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-20 276248]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-16 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-01-21 149504]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-17 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S3 xsherlock;xsherlock; C:\Windows\syswow64\xsherlock.xem [2013-01-11 666720]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------
Přílohy
Tohle to rozesila.
Tohle to rozesila.
vir.jpg (10.57 KiB) Zobrazeno 1025 x

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Neznamý vir

#2 Příspěvek od JaRon »

nazdarek
nabuduce to chce viac opatrnosti :)
Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

File::
C:\Users\mOrPhE\68956435567898775\winsvc.exe
C:\Users\mOrPhE\AppData\Local\Temp\2335980855.exe
C:\Users\mOrPhE\AppData\Local\Temp\4254864173.exe



uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

Obrázek

po aplikacii by mal vzniknut dalsi log, ten vloz sem :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

morphe
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 20 Dub 2012 17:32

Re: Neznamý vir

#3 Příspěvek od morphe »

Díky , tohle je log z ComboFixu je v pořádku ? .)

ComboFix 13-01-24.01 - mOrPhE 24.01.2013 15:11:10.2.4 - x64
Spuštěný z: c:\users\mOrPhE\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\mOrPhE\Desktop\CFScript.txt
.
FILE ::
"c:\users\mOrPhE\68956435567898775\winsvc.exe"
"c:\users\mOrPhE\AppData\Local\Temp\2335980855.exe"
"c:\users\mOrPhE\AppData\Local\Temp\4254864173.ex"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-24 do 2013-01-24 )))))))))))))))))))))))))))))))
.
.
2013-01-24 14:15 . 2013-01-24 14:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-24 13:52 . 2013-01-24 13:52 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CB8E360A-5CF0-458B-9CFB-6AF53B5FEEBC}\offreg.dll
2013-01-24 13:48 . 2013-01-24 13:48 -------- d-----w- C:\rsit
2013-01-24 13:48 . 2013-01-24 13:48 -------- d-----w- c:\program files\trend micro
2013-01-24 13:41 . 2013-01-15 01:45 9161176 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CB8E360A-5CF0-458B-9CFB-6AF53B5FEEBC}\mpengine.dll
2013-01-23 20:34 . 2013-01-23 20:38 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\PerformerSoft
2013-01-23 20:34 . 2013-01-23 20:34 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\SpecialSavings
2013-01-23 20:34 . 2012-12-19 14:53 19632 ----a-w- c:\windows\system32\roboot64.exe
2013-01-23 20:34 . 2013-01-23 20:34 -------- d-----w- c:\program files (x86)\File Scout
2013-01-23 20:34 . 2013-01-23 20:34 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\StatusWinks
2013-01-23 20:01 . 2013-01-23 23:01 -------- d-----w- c:\program files (x86)\Zrychleni Pocitace
2013-01-23 15:43 . 2013-01-23 15:43 57344 ----a-w- c:\users\mOrPhE\AppData\Roaming\click.exe
2013-01-23 14:46 . 2013-01-23 15:16 -------- d-----w- c:\program files (x86)\ESET
2013-01-23 14:41 . 2013-01-23 14:41 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-01-23 14:41 . 2013-01-23 14:41 -------- d-----r- c:\program files (x86)\Skype
2013-01-23 14:40 . 2013-01-23 14:40 -------- d-----w- c:\users\mOrPhE\AppData\Local\ESET
2013-01-23 14:40 . 2013-01-23 14:40 -------- d-----w- c:\program files\ESET
2013-01-23 13:18 . 2013-01-23 13:18 -------- d-----w- c:\users\mOrPhE\AppData\Local\2K Games
2013-01-23 09:28 . 2013-01-23 09:28 -------- d-----w- c:\users\mOrPhE\AppData\Local\Evernote
2013-01-23 09:28 . 2013-01-23 09:28 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\FoozKids
2013-01-23 08:46 . 2013-01-23 08:49 -------- d-----w- c:\users\mOrPhE\AppData\Local\Microsoft Games
2013-01-23 08:24 . 2013-01-23 08:24 -------- d-----w- c:\users\mOrPhE\AppData\Local\Diagnostics
2013-01-23 00:00 . 2013-01-23 00:02 -------- d-----w- c:\program files\CCleaner
2013-01-22 22:59 . 2013-01-22 22:59 348160 ----a-w- c:\windows\SysWow64\Msvcr71.dll
2013-01-22 22:59 . 2013-01-22 22:59 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2013-01-22 22:59 . 2013-01-22 22:59 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2013-01-22 16:16 . 2013-01-22 16:16 -------- d--h--r- c:\users\mOrPhE\AppData\Roaming\SecuROM
2013-01-22 16:16 . 2013-01-22 20:59 -------- d-----w- c:\users\mOrPhE\AppData\Local\Rockstar Games
2013-01-22 16:15 . 2013-01-22 16:15 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2013-01-22 16:14 . 2013-01-23 08:29 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
2013-01-22 16:14 . 2013-01-22 16:14 -------- d-----w- c:\windows\SysWow64\xlive
2013-01-22 12:50 . 2013-01-22 12:50 -------- d-----w- c:\program files (x86)\uTorrent
2013-01-22 12:49 . 2013-01-23 16:15 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\uTorrent
2013-01-22 06:13 . 2013-01-22 06:13 -------- d-sh--w- c:\programdata\SecuROM
2013-01-21 22:00 . 2013-01-23 23:00 0 ---ha-w- c:\users\mOrPhE\AppData\Roaming\winsvcns.sys
2013-01-21 17:56 . 2010-08-03 10:11 819200 --sha-w- c:\windows\SysWow64\xvidcore.dll
2013-01-21 17:56 . 2010-08-03 10:11 180224 --sha-w- c:\windows\SysWow64\xvidvfw.dll
2013-01-21 11:57 . 2012-11-30 05:45 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-20 22:29 . 2013-01-20 22:29 -------- d-----w- c:\programdata\Binarysense
2013-01-20 22:01 . 2013-01-12 02:30 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-01-17 19:12 . 2013-01-23 16:15 -------- d-----w- c:\users\mOrPhE\AppData\Local\CrashDumps
2013-01-17 19:08 . 2013-01-17 19:08 -------- d-----w- c:\users\Public\CyberLink
2013-01-10 23:40 . 2013-01-10 23:40 666720 ----a-w- c:\windows\SysWow64\xsherlock.xem
2013-01-10 22:52 . 2013-01-17 18:55 -------- d-----w- c:\program files (x86)\gPotato.eu
2013-01-09 20:25 . 2012-11-09 05:45 750592 ----a-w- c:\windows\system32\win32spl.dll
2013-01-09 20:25 . 2012-11-09 04:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-01-09 20:25 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-01-09 20:25 . 2012-11-01 05:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2013-01-09 20:25 . 2012-11-01 04:47 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2013-01-09 20:25 . 2012-11-01 04:47 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2013-01-09 20:25 . 2012-11-20 05:48 307200 ----a-w- c:\windows\system32\ncrypt.dll
2013-01-09 20:25 . 2012-11-20 04:51 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll
2013-01-09 20:25 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-01-09 20:25 . 2012-11-22 04:45 626688 ----a-w- c:\windows\SysWow64\usp10.dll
2013-01-09 20:24 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe
2013-01-09 20:24 . 2012-11-23 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys
2013-01-09 13:56 . 2013-01-09 13:56 81768 ----a-w- c:\windows\SysWow64\xinput1_3.dll
2013-01-09 13:53 . 2013-01-21 17:58 -------- d--h--w- c:\windows\msdownld.tmp
2013-01-08 00:06 . 2013-01-08 00:06 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2013-01-07 19:43 . 2013-01-07 19:43 -------- d-----w- c:\users\mOrPhE\AppData\Local\APN
2013-01-07 19:43 . 2013-01-07 19:45 -------- d-----w- c:\program files (x86)\DsNET Corp
2013-01-07 19:43 . 2013-01-07 19:43 -------- d-----w- c:\programdata\Ask
2013-01-07 16:40 . 2013-01-23 20:43 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\WildTangent
2013-01-07 15:26 . 2013-01-08 00:06 -------- d-----w- c:\program files (x86)\Microsoft Works
2013-01-07 15:26 . 2013-01-07 15:26 -------- d-----w- c:\windows\PCHEALTH
2013-01-07 15:24 . 2013-01-07 15:24 -------- d-----w- c:\program files\Microsoft Office
2013-01-07 15:24 . 2013-01-07 15:24 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2013-01-07 15:24 . 2013-01-07 15:24 -------- d-----r- C:\MSOCache
2013-01-07 15:18 . 2013-01-07 15:18 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-01-07 15:18 . 2013-01-23 16:15 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\DAEMON Tools Lite
2013-01-07 15:18 . 2013-01-07 15:18 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-01-07 15:17 . 2013-01-07 15:22 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-12-30 21:29 . 2013-01-23 08:33 -------- d-----r- C:\MORPHE
2012-12-29 22:20 . 2013-01-17 19:08 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\CyberLink
2012-12-28 16:30 . 2012-12-29 22:20 -------- d-----w- c:\users\mOrPhE\AppData\Local\Cyberlink
2012-12-27 19:51 . 2012-12-27 19:51 -------- d-----w- c:\users\mOrPhE\AppData\Roaming\GRETECH
2012-12-27 19:51 . 2012-12-27 19:51 -------- d-----w- c:\program files (x86)\GRETECH
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-09 20:27 . 2012-12-20 15:54 67599240 ----a-w- c:\windows\system32\MRT.exe
2013-01-09 02:18 . 2012-03-27 18:45 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-09 02:18 . 2012-03-27 18:45 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-16 17:11 . 2012-12-21 10:00 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 16:21 . 2012-12-16 16:22 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-12-16 16:21 . 2012-12-16 16:22 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-12-16 14:45 . 2012-12-21 10:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 10:00 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 10:00 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-16 12:40 . 2011-03-29 01:36 19696 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-11-30 04:45 . 2013-01-21 11:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-14 07:06 . 2012-12-17 14:00 17811968 ----a-w- c:\windows\system32\mshtml.dll
2012-11-14 06:32 . 2012-12-17 14:00 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-11-14 06:11 . 2012-12-17 14:00 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 06:04 . 2012-12-17 14:00 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-11-14 06:04 . 2012-12-17 14:00 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 06:02 . 2012-12-17 14:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 06:02 . 2012-12-17 14:00 237056 ----a-w- c:\windows\system32\url.dll
2012-11-14 05:59 . 2012-12-17 14:00 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-11-14 05:58 . 2012-12-17 14:00 816640 ----a-w- c:\windows\system32\jscript.dll
2012-11-14 05:57 . 2012-12-17 14:00 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 05:57 . 2012-12-17 14:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 05:55 . 2012-12-17 14:00 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-11-14 05:55 . 2012-12-17 14:00 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-11-14 05:53 . 2012-12-17 14:00 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-11-14 05:52 . 2012-12-17 14:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-14 05:46 . 2012-12-17 14:00 248320 ----a-w- c:\windows\system32\ieui.dll
2012-11-14 02:09 . 2012-12-17 14:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-11-14 01:58 . 2012-12-17 14:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57 . 2012-12-17 14:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-11-14 01:49 . 2012-12-17 14:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48 . 2012-12-17 14:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-11-14 01:44 . 2012-12-17 14:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-11-09 05:45 . 2012-12-16 12:54 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-09 04:42 . 2012-12-16 12:54 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-11-02 05:59 . 2012-12-16 12:53 478208 ----a-w- c:\windows\system32\dpnet.dll
2012-11-02 05:11 . 2012-12-16 12:53 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
2010-08-03 10:11 819200 --sha-w- c:\windows\SysWOW64\xvidcore.dll
2010-08-03 10:11 180224 --sha-w- c:\windows\SysWOW64\xvidvfw.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"="c:\program files (x86)\Zrychleni Pocitace\PCSUNotifier.exe" [2013-01-04 256448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-27 291608]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2012-03-24 1105488]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-03-09 36480]
R3 AX88772B;ASIX AX88772B USB2.0 to Fast Ethernet Adapter;c:\windows\system32\DRIVERS\ax88772b.sys [2010-12-31 98816]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-03-09 340096]
R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-03-09 111232]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-03-09 168064]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-03-09 68736]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-03-09 281472]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-03-09 551552]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2012-03-20 314472]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5;c:\program files\Intel\TurboBoost\TurboBoost.exe [2012-01-20 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-12-17 1255736]
R3 xsherlock;xsherlock;c:\windows\system32\xsherlock.xem [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-02-27 16152]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-07 283200]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2012-03-09 107648]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2012-03-24 355920]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2012-02-08 871296]
S2 FFSOpzSvc;Sleep memory optimizer;c:\program files\Sleep Memory Optimizer\FFSService.exe [2011-09-18 141192]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2012-02-29 28264]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-16 127320]
S2 irstrtsv;Intel(R) Rapid Start Technology Service;c:\windows\SysWOW64\irstrtsv.exe [2012-02-24 192856]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-16 162648]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-02-07 255376]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2012-01-05 256536]
S2 PCSUService;PC Speed Up Service;c:\program files (x86)\Zrychleni Pocitace\PCSUService.exe [2013-01-04 323008]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2012-01-20 16128]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-16 362840]
S2 USecuAppSvc;Acer Theft Shield Service;c:\program files\Acer\Acer Theft Shield\USecuAppSvc.exe [2012-03-07 236648]
S2 ZAtheros Wlan Agent;ZAtheros Wlan Agent;c:\program files (x86)\Atheros\Ath_WlanAgent.exe [2012-02-20 72864]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-03-09 30848]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2012-02-24 239400]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
S3 irstrtdv;Intel(R) Rapid Start Technology Driver;c:\windows\system32\DRIVERS\irstrtdv.sys [2012-02-22 26504]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-02-27 356120]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-02-27 788760]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-15 16:00 1606760 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.52\Installer\setup.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-16 11:55]
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-16 11:55]
.
2013-01-23 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
2013-01-24 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
2013-01-23 c:\windows\Tasks\PC SpeedUp Service Deactivator.job
- c:\program files (x86)\Zrychleni Pocitace\PCSUSD.exe [2013-01-23 07:44]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-20 170264]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-20 440600]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-03-16 12459112]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-03-09 1158248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-03-09 1021056]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2012-03-09 800896]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-01-12 2918656]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-20 398616]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=14672
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 188.120.196.2 77.93.217.102
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\xsherlock]
"ImagePath"="c:\windows\system32\xsherlock.xem"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2881942847-3240567465-3748110723-1000\Software\SecuROM\License information*]
"datasecu"=hex:e6,24,58,9b,ef,02,a9,33,8e,37,44,cb,b6,ee,df,d9,46,c1,d1,f4,8a,
ba,b2,77,80,0b,70,c3,11,5e,56,88,a5,27,f8,f3,2e,dc,11,59,5d,be,01,67,1b,9d,\
"rkeysecu"=hex:94,d0,ca,c2,58,8c,bc,b5,5c,21,59,0a,1a,f2,08,da
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-24 15:18:23
ComboFix-quarantined-files.txt 2013-01-24 14:18
ComboFix2.txt 2013-01-24 14:05
.
Před spuštěním: Volných bajtů: 35 563 798 528
Po spuštění: Volných bajtů: 35 509 002 240
.
- - End Of File - - E2DC3822429B03F9290E59CBCAEB4A68

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Neznamý vir

#4 Příspěvek od JaRon »

odinstaluj ptakovinu >> Zrychleni Pocitace
+
vycisti PC s ADWCleanerom ,,,, a mohlo by byt OK :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

morphe
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 20 Dub 2012 17:32

Re: Neznamý vir

#5 Příspěvek od morphe »

Takze porad a nadale mi to mým přátelům posíla ty odkazy na skype atd... Zryhleni pocitace jsem odsranil a pc jsem projel Ccleanrem Proffesional edition nebo je nutne to project tim ADW ? Ale stejne si myslim , ze to nci neresi ne ? Ccleaner je u mne an dennim poradku :/ Pochybuji ,, ze je to tim . Vir mam asi stale v pc :(

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Neznamý vir

#6 Příspěvek od JaRon »

pozri CFScript si skopiroval schybou - porovnavas CC s ADW a pritom su to diametralne odlisne programy - takym ludom tazko radit ,,, mozes este vycistit PC s MBAM
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

morphe
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 20 Dub 2012 17:32

Re: Neznamý vir

#7 Příspěvek od morphe »

Jak skopiroval s chybou ? :o Skopiroval jsem to co mi bylo napsano nebo ne ? :o

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Neznamý vir

#8 Příspěvek od JaRon »

nuz v poslednom riadku mas namiesto exe iba ex:
FILE ::
"c:\users\mOrPhE\68956435567898775\winsvc.exe"
"c:\users\mOrPhE\AppData\Local\Temp\2335980855.exe"
"c:\users\mOrPhE\AppData\Local\Temp\4254864173.ex"
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno