Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosim dostal sem vir SLOVENSKA POLICIE

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 čer 2013 22:19

Prosim dostal sem vir SLOVENSKA POLICIE

#1 Příspěvek od Member45 »

dobry neskory vecer prajem... bratovi sa podarilo zavirit takto komp.
tak by som sa chcel spytat na pomoc.
v safe mode som a hlasenie s RSIT je:

Logfile of random's system information tool 1.09 (written by random/random)
Run by JURICA at 2013-06-12 23:17:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 178 GB (36%) free of 492 GB
Total RAM: 4094 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:18:10, on 12. 6. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Safe mode with network support

Running processes:
C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\JURICA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
R3 - URLSearchHook: (no name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - .DEFAULT User Startup: LaunchCenter.lnk = C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (User 'Default user')
O4 - Startup: msconfig.lnk = C:\Windows\System32\rundll32.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~2\PCTRAN~1\webie.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://213.160.174.141
O16 - DPF: {16741686-0571-44DA-A90B-7C2E5DB00EF7} (HEM_PLUGIN Control) - http://213.160.174.141/HEMPlugin.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Fujitsu Diagnostic Testhandler (TestHandler) - Fujitsu Technology Solutions - C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater15.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13998 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\helppane.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup10 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/3/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --disable-webgl --disable-pepper-3d --disable-gl-multisampling --disable-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-video-decode --channel="1912.6.2026067073\1974423679" /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\JURICA\Desktop\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://isearch.avg.com/?cid={2F739CEF-9 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.911, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.3.2, engine@conduit.com:3.2.5.2, {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {9d1f059c-cada-4111-9696-41a62d64e3ba}:0.7.1, {7E77F5DF-8022-40e3-9122-F03DEBEFC43B}:1.0.25, toolbar@ask.com:3.13.1.18107, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.8"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
avg-secure-search.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
yahoo.xml
zoznam-sk.xml

C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\extensions\
plugin@yontoo.com
{62d40876-df18-411f-9d34-a9dd7a197bc5}
{7b13ec3e-999a-4b70-b9cb-2617b8323822}
{9d1f059c-cada-4111-9696-41a62d64e3ba}

C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\searchplugins\
askcom.xml
brothersoft-extreme3-customized-web-search.xml
daemon-search.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}]
AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll [2012-10-15 1393272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2012-10-15 1968248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-12-17 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll [2013-05-12 1991344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-12-17 192144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YTD Toolbar - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll [2013-05-15 1353536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-12-17 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\PROGRA~2\PCTRAN~1\webie.dll [2004-05-13 319488]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-11-29 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll [2013-05-12 1991344]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-12-17 192144]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YTD Toolbar - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll [2013-05-15 1353536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-10-06 8158240]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-09-12 357384]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-17 190472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-08-11 39408]
"BitTorrent"=C:\Program Files (x86)\BitTorrent\BitTorrent.exe [2012-06-14 6380440]
"ctfmon.exe"=C:\PROGRA~3\rundll32.exe [2013-06-12 44544]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-09-12 5048488]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2013-05-12 1226928]
"SweetIM"=C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2012-05-29 115032]
"Sweetpacks Communicator"=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2013-05-15 1298240]

C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
msconfig.lnk - C:\Windows\System32\rundll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-12 23:17:31 ----D---- C:\rsit
2013-06-12 23:17:31 ----D---- C:\Program Files\trend micro
2013-06-12 23:12:34 ----A---- C:\Windows\ntbtlog.txt
2013-06-12 14:45:52 ----A---- C:\ProgramData\as98213.txt
2013-06-12 14:45:52 ----A---- C:\ProgramData\3ocig.js
2013-06-12 14:45:52 ----A---- C:\ProgramData\3ocig.bat
2013-06-12 14:45:39 ----A---- C:\ProgramData\rundll32.exe
2013-06-12 14:45:39 ----A---- C:\ProgramData\gico3.dat
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-06-08 03:08:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-08 03:08:19 ----A---- C:\Windows\system32\elshyph.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\url.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-06-08 03:08:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-08 03:08:14 ----A---- C:\Windows\system32\wininet.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\urlmon.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\url.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\msrating.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\msls31.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iesetup.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iertutil.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iernonce.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ieapfltr.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ieapfltr.dat
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-08 03:08:14 ----A---- C:\Windows\system32\icardie.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\dxtrans.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\dxtmsft.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\wextract.exe
2013-06-08 03:08:13 ----A---- C:\Windows\system32\webcheck.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\mshtmled.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\licmgr10.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\inseng.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\iedkcs32.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\vbscript.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\pngfilt.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\occache.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\mshtml.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\mshta.exe
2013-06-08 03:08:12 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\jscript.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\iexpress.exe
2013-06-08 03:08:12 ----A---- C:\Windows\system32\ieUnatt.exe
2013-06-08 03:08:11 ----A---- C:\Windows\system32\msfeedssync.exe
2013-06-08 03:08:11 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\imgutil.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\iepeers.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-06-08 03:08:10 ----A---- C:\Windows\system32\mshtmler.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\jscript9.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\ieui.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\ieframe.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\XpsPrint.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\WMPhoto.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\d2d1.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\FntCache.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\dxgi.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\d3d10warp.dll
2013-06-08 03:06:40 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-06-08 03:06:40 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-06-08 03:06:40 ----A---- C:\Windows\system32\DWrite.dll
2013-06-08 03:06:39 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-08 03:06:38 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-06-08 03:06:37 ----A---- C:\Windows\system32\d3d11.dll
2013-06-08 03:06:37 ----A---- C:\Windows\system32\d3d10core.dll
2013-06-08 03:06:36 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-06-08 03:06:36 ----A---- C:\Windows\system32\d3d10.dll
2013-06-08 03:06:35 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\d3d10_1.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-06-08 03:06:34 ----A---- C:\Windows\system32\d3d10level9.dll
2013-06-08 03:06:33 ----A---- C:\Windows\system32\UIAnimation.dll
2013-06-06 13:56:19 ----D---- C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56:19 ----D---- C:\Program Files (x86)\Application Updater
2013-05-15 11:33:24 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 11:33:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 11:33:24 ----A---- C:\Windows\system32\cdd.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\authui.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-15 11:33:08 ----A---- C:\Windows\system32\consent.exe
2013-05-15 11:33:08 ----A---- C:\Windows\system32\appinfo.dll
2013-05-15 11:33:05 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 11:33:05 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 11:33:04 ----A---- C:\Windows\system32\win32k.sys

======List of files/folders modified in the last 1 month======

2013-06-12 23:17:31 ----RD---- C:\Program Files
2013-06-12 23:12:34 ----D---- C:\Windows
2013-06-12 22:56:41 ----D---- C:\Windows\system32\config
2013-06-12 22:56:31 ----D---- C:\Windows\Temp
2013-06-12 22:54:04 ----D---- C:\Users\JURICA\AppData\Roaming\BitTorrent
2013-06-12 22:53:32 ----HD---- C:\ProgramData
2013-06-12 22:19:44 ----D---- C:\Windows\Prefetch
2013-06-12 13:33:43 ----D---- C:\Windows\SysWOW64
2013-06-12 13:33:40 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-12 13:12:48 ----D---- C:\Counter-Strike 1.6
2013-06-12 12:06:18 ----D---- C:\Windows\System32
2013-06-12 12:06:18 ----D---- C:\Windows\inf
2013-06-12 12:06:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-12 11:01:06 ----D---- C:\Windows\system32\catroot
2013-06-12 11:01:04 ----D---- C:\Windows\winsxs
2013-06-12 10:58:45 ----D---- C:\Windows\system32\catroot2
2013-06-12 10:58:03 ----D---- C:\Windows\system32\drivers\AVG
2013-06-11 10:34:15 ----D---- C:\Program Files (x86)\L4F
2013-06-08 12:12:15 ----D---- C:\Windows\Tasks
2013-06-08 12:12:15 ----D---- C:\Windows\system32\Tasks
2013-06-08 09:25:30 ----D---- C:\Windows\rescache
2013-06-08 03:28:41 ----SHD---- C:\Config.Msi
2013-06-08 03:26:45 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-06-08 03:26:45 ----D---- C:\Program Files\Internet Explorer
2013-06-08 03:26:45 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-08 03:26:44 ----D---- C:\Windows\system32\sk-SK
2013-06-08 03:26:43 ----D---- C:\Windows\SYSWOW64\migration
2013-06-08 03:26:43 ----D---- C:\Windows\SYSWOW64\en-US
2013-06-08 03:26:41 ----D---- C:\Windows\system32\migration
2013-06-08 03:26:41 ----D---- C:\Windows\system32\en-US
2013-06-08 03:26:41 ----D---- C:\Windows\PolicyDefinitions
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\it-IT
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\es-ES
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\el-GR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\de-DE
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\da-DK
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-08 03:26:39 ----D---- C:\Windows\system32\zh-HK
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pt-PT
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pt-BR
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pl-PL
2013-06-08 03:26:39 ----D---- C:\Windows\system32\ko-KR
2013-06-08 03:26:39 ----D---- C:\Windows\system32\it-IT
2013-06-08 03:26:39 ----D---- C:\Windows\system32\hu-HU
2013-06-08 03:26:39 ----D---- C:\Windows\system32\el-GR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\zh-TW
2013-06-08 03:26:38 ----D---- C:\Windows\system32\zh-CN
2013-06-08 03:26:38 ----D---- C:\Windows\system32\tr-TR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\sv-SE
2013-06-08 03:26:38 ----D---- C:\Windows\system32\ru-RU
2013-06-08 03:26:38 ----D---- C:\Windows\system32\nl-NL
2013-06-08 03:26:38 ----D---- C:\Windows\system32\nb-NO
2013-06-08 03:26:38 ----D---- C:\Windows\system32\ja-JP
2013-06-08 03:26:38 ----D---- C:\Windows\system32\fr-FR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\fi-FI
2013-06-08 03:26:38 ----D---- C:\Windows\system32\es-ES
2013-06-08 03:26:38 ----D---- C:\Windows\system32\de-DE
2013-06-08 03:26:38 ----D---- C:\Windows\system32\da-DK
2013-06-08 03:26:38 ----D---- C:\Windows\system32\cs-CZ
2013-06-08 03:11:16 ----D---- C:\Windows\Logs
2013-06-08 03:02:06 ----D---- C:\System Volume Information
2013-06-07 09:27:17 ----SHD---- C:\Windows\Installer
2013-06-06 16:53:57 ----D---- C:\Program Files (x86)\AVG Secure Search
2013-06-06 13:56:19 ----RD---- C:\Program Files (x86)
2013-06-04 17:09:57 ----D---- C:\ProgramData\YTD Video Downloader
2013-05-27 15:16:36 ----D---- C:\Windows\SYSWOW64\directx
2013-05-27 15:16:33 ----HD---- C:\Windows\msdownld.tmp
2013-05-27 14:02:13 ----RD---- C:\Program Files (x86)\Skype
2013-05-27 14:01:33 ----D---- C:\Program Files (x86)\Nokia
2013-05-27 14:01:32 ----D---- C:\Windows\system32\DriverStore
2013-05-27 14:01:32 ----D---- C:\Windows\system32\drivers
2013-05-27 13:52:06 ----D---- C:\Program Files (x86)\Codemasters
2013-05-27 13:48:10 ----D---- C:\Program Files (x86)\Atari
2013-05-27 13:46:43 ----D---- C:\Program Files (x86)\Common Files
2013-05-27 13:46:41 ----D---- C:\Program Files\Common Files
2013-05-27 13:44:17 ----D---- C:\Users\JURICA\AppData\Roaming\GameRanger
2013-05-27 13:43:51 ----D---- C:\Program Files (x86)\Valve
2013-05-16 03:31:35 ----D---- C:\Windows\AppPatch
2013-05-16 03:23:57 ----RSD---- C:\Windows\assembly
2013-05-16 03:23:57 ----D---- C:\Windows\Microsoft.NET
2013-05-16 03:15:33 ----D---- C:\ProgramData\Microsoft Help
2013-05-16 03:12:31 ----A---- C:\Windows\system32\MRT.exe
2013-05-15 12:00:15 ----D---- C:\ProgramData\MFAData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-06-12 240672]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-08-16 254496]
R0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251); C:\Windows\system32\DRIVERS\tdrpm251.sys [2010-08-16 1455648]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-08-16 929312]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-04-11 384800]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-05-12 45856]
R3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6264.sys [2009-05-19 339360]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-09-11 26248]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-09-11 76552]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-16 834544]
S1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-11-08 307040]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S2 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys [2010-02-24 191616]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-11-11 314016]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-11-11 43680]
S3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2010-08-16 250400]
S3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-12-10 127328]
S3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\plugins\UI\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-10-06 2009376]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2009-08-21 84512]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2010-03-15 127600]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 19568]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 161904]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 141424]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 34416]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2010-03-15 137328]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2010-03-15 158320]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 5504]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2009-10-14 11856]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-09-11 41096]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-09-11 36872]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-09-11 15880]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-09-12 891432]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-08-16 2326920]
S2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2013-05-15 806776]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-11-02 5174392]
S2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-16 135664]
S2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NMSAccess;NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 159336]
S2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-01-25 75136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 TestHandler;Fujitsu Diagnostic Testhandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2009-02-19 341264]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2009-10-30 1353544]
S2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [2013-05-12 1015984]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-16 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-25 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-12 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 TuneUp.Defrag;@C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-08-16 607048]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-08-16 1255736]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Poprosim o log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=130781
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 čer 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#3 Příspěvek od Member45 »

nech sa paci log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2013 04
Ran by JURICA (administrator) on 13-06-2013 09:15:59
Running from J:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\cmd.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [8158240 2009-10-06] (Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [357384 2009-09-12] (Acronis)
HKLM\...\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui [190472 2009-09-17] (Logitech Inc.)
HKCU\...\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2010-08-11] (Google Inc.)
HKCU\...\Run: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" /MINIMIZED [6380440 2012-06-14] (BitTorrent, Inc.)
HKCU\...\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00 [165888 2013-06-12] ()
MountPoints2: {20a15d66-3cc4-11e1-b5a6-001999793892} - K:\Startme.exe
MountPoints2: {857f0e0b-a948-11df-8835-001999793892} - J:\Autorun.exe
MountPoints2: {f9c083e3-43ad-11e1-a4d5-001999793892} - K:\Startme.exe
HKLM-x32\...\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5048488 2009-09-12] (Acronis)
HKLM-x32\...\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" [1226928 2013-05-12] (AVG Secure Search)
HKLM-x32\...\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728 2012-02-26] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [1298240 2013-05-15] (Spigot, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\gico3.dat ()
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
URLSearchHook: (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File
URLSearchHook: (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
URLSearchHook: (No Name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1999793892}
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F73 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {1A905A79-3E96-45A3-B69D-A31BFB268841} URL = http://websearch.ask.com/redirect?clien ... 0A16B96E70
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {91A6F567-EE61-4D67-88D7-FF5F4374B890} URL = http://search.conduit.com/ResultsExt.as ... PV=IENSP06
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F73 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {C3CCD014-A93C-4272-BD95-69DCBE26E5DD} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {D476AB60-EC88-4C55-B617-4E4468905EBA} URL =
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1999793892}
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM-x32 - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll ()
Toolbar: HKLM-x32 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {62D40876-DF18-411F-9D34-A9DD7A197BC5} - No File
DPF: HKLM-x32 {16741686-0571-44DA-A90B-7C2E5DB00EF7} http://213.160.174.141/HEMPlugin.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll (AVG Secure Search)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://isearch.avg.com/?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Yontoo - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\plugin@yontoo.com
FF Extension: BrotherSoft Extreme3 - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{62d40876-df18-411f-9d34-a9dd7a197bc5}
FF Extension: Zynga Community Toolbar - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF Extension: FoxTrick - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}
FF Extension: ytd - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7E77F5DF-8022-40e3-9122-F03DEBEFC43B}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======
CHR HomePage: hxxp://www.ask.com/?l=dis&o=APN10374cr&gct=hp
CHR RestoreOnStartup: "hxxp://www.google.sk/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (AVG Internet Security) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AVG Safe Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0
CHR Extension: (AVG Security Toolbar) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.2.0.5_0
CHR Extension: (Gmail) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5174392 2012-11-02] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
S2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-01-25] ()
S2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
S3 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607048 2010-08-16] (TuneUp Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1353544 2009-10-30] (TuneUp Software)
S2 vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [1015984 2013-05-12] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-11-11] ()
S3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
S3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
S1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-12] (AVG Technologies)
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir3.sys [32768 2009-08-24] (Hauppauge Computer Works, Inc.)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-11-11] ()
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-08-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2010-08-16] (Acronis)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena\plugins\UI\safedrv.sys [x]

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\system32\drivers\acedrv11.sys A3769020F7E8A70FD3E824C050F33306
C:\Windows\system32\drivers\acedrv11.sys A3769020F7E8A70FD3E824C050F33306
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\afcdp.sys 3426A6EAA09077F3AB946FB9CEB85D8E
C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\system32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\atksgt.sys FC0E8778C000291CAF60EB88C011E931
C:\Windows\System32\DRIVERS\avgidsdrivera.sys 633360E94804E7BAFE642017817C9413
C:\Windows\System32\DRIVERS\avgidsfiltera.sys 0F293406F64B48D5D2F0D3A1117F3A83
C:\Windows\System32\DRIVERS\avgidsha.sys CFFC3A4A638F462E0561CB368B9A7A3A
C:\Windows\System32\DRIVERS\avgldx64.sys BE8BC5D10ABA05D7F6E79D8296906C86
C:\Windows\System32\DRIVERS\avgmfx64.sys A6AEC362AAE5E2DDA7445E7690CB0F33
C:\Windows\System32\DRIVERS\avgrkx64.sys 645C7F0A0E39758A0024A9B1748273C0
C:\Windows\System32\DRIVERS\avgtdia.sys A441A655D6D9DDDDBA11994530F84981
C:\Windows\system32\drivers\avgtpx64.sys 3B5657B6C11CDA87F664DD6F7DD0702D
C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 9AC4F97C2D3E93367E2148EA940CD2CD
C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys AF2E16242AA723F68F461B6EAE2EAD3D
C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hamachi.sys 1E6438D4EA6E1174A3B3B1EDC4DE660B
C:\Windows\system32\drivers\hcw85cir3.sys AF84E64405113B84CEA7B57FA6368DC7
C:\Windows\system32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\System32\DRIVERS\igdkmd64.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys EE64207F2F5C20BFE5F73DB2566C4601
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ivusb.sys BD5BF20EC242E003A2F570B8754A56D1
C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
C:\Windows\System32\Drivers\ksecpkg.sys 26C43A7C2862447EC59DEDA188D1DA07
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lirsgt.sys 156AB2E56DC3CA0B582E3362E07CDED7
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys AD37248BD442D41C9A896E53EB8A85EE
C:\Windows\System32\DRIVERS\nvlddmkm.sys AAF5559039E99D0CC22E25255F3DC06E
C:\Windows\System32\DRIVERS\nvmf6264.sys 9C3024E48DB4C98E50AF7D8B72D0EF89
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\DRIVERS\nvstor64.sys EBFE363AAB0D6E4086ADBF04C41EBDF8
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\DRIVERS\pccsmcfdx64.sys BC0018C2D29F655188A0ED3FA94FDB24
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\s1039bus.sys 0031DD0C5D4446DA0A3E02617DC6D642
C:\Windows\System32\DRIVERS\s1039mdfl.sys 98C7DBE2290D8CB0235E9528F6A1A53D
C:\Windows\System32\DRIVERS\s1039mdm.sys 7EF052A067D862ECD2A2335914611074
C:\Windows\System32\DRIVERS\s1039mgmt.sys BCC3F31F1FE1E78A5BA2CD6A0E44BA64
C:\Windows\System32\DRIVERS\s1039nd5.sys A0CF11BFFA41176CCD54E701CEB68921
C:\Windows\System32\DRIVERS\s1039obex.sys BD2DA968C5DCEF51BA8014FBAC7A0B6A
C:\Windows\System32\DRIVERS\s1039unic.sys 96B4051B65C1974258A8A33A03C0B082
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\snapman.sys 446EB38CE4A6D040F548B2F547CA96FF
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\sptd.sys 602884696850C86434530790B110E8EB
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\System32\Drivers\StarOpen.sys E57B778208C783D8DEBAB320C16A1B82
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\DRIVERS\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tdrpm251.sys DF9179B7BDF0C5B71F9C3D93C016BAE5
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\timntr.sys F7546EAD58CC3000AC02CF9529B9934E
C:\Windows\System32\drivers\tpm.sys DBCC20C02E8A3E43B03C304A4E40A84F
C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys DCC94C51D27C7EC0DADECA8F64C94FCF
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys C025055FE7B87701EB042095DF1A2D7B
C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24
C:\Windows\System32\DRIVERS\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbser.sys 4ACEE387FA8FD39F83564FCD2FC234F2
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\System32\drivers\WmBEnum.sys E7F4937B613B1E4294100C9D4EFC36A9
C:\Windows\System32\drivers\WmFilter.sys 6F6F2B263002B243D3501C7E6C8FC11D
C:\Windows\System32\drivers\WmHidLo.sys 1584F8D5FDFE44C03DBA85A2106B937F
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\System32\drivers\WmVirHid.sys 52B4FCC6AFAEC0FFD80BDA63F9B140CD
C:\Windows\System32\drivers\WmXlCore.sys 395B3E7FBA81BDC4501641B3B2CF2E20
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-13 09:15 - 2013-06-13 09:15 - 00000000 ____D C:\FRST
2013-06-12 23:17 - 2013-06-12 23:18 - 00000000 ____D C:\rsit
2013-06-12 23:17 - 2013-06-12 23:18 - 00000000 ____D C:\Program Files\trend micro
2013-06-12 14:45 - 2013-06-12 22:53 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 14:45 - 2013-06-12 22:51 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
2013-06-08 03:08 - 2013-06-08 03:08 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:06 - 2013-06-08 03:06 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:03 - 2013-06-08 03:11 - 00009153 ____A C:\Windows\IE10_main.log
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-05-27 13:51 - 2013-05-27 13:51 - 00000000 ____D C:\Users\JURICA\Desktop\Fotky
2013-05-15 11:33 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-15 11:33 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-15 11:33 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-15 11:33 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-15 11:33 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-15 11:33 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-15 11:33 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-15 11:33 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-15 11:33 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-15 11:33 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-15 11:33 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-15 11:33 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-15 11:33 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-15 11:33 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 čer 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#4 Příspěvek od Member45 »

==================== One Month Modified Files and Folders =======

2013-06-13 09:15 - 2013-06-13 09:15 - 00000000 ____D C:\FRST
2013-06-12 23:18 - 2013-06-12 23:17 - 00000000 ____D C:\rsit
2013-06-12 23:18 - 2013-06-12 23:17 - 00000000 ____D C:\Program Files\trend micro
2013-06-12 22:56 - 2010-08-16 20:08 - 00073243 ____A C:\Windows\setupact.log
2013-06-12 22:56 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-12 22:54 - 2011-10-08 10:18 - 00000000 ____D C:\Users\JURICA\AppData\Roaming\BitTorrent
2013-06-12 22:54 - 2010-08-11 19:29 - 01707303 ____A C:\Windows\WindowsUpdate.log
2013-06-12 22:54 - 2009-07-14 06:45 - 00009920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-12 22:54 - 2009-07-14 06:45 - 00009920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-12 22:53 - 2013-06-12 14:45 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 22:51 - 2013-06-12 14:45 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 22:51 - 2010-08-16 14:49 - 00000932 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-12 22:47 - 2010-08-16 14:49 - 00000936 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-12 22:46 - 2013-01-14 11:27 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-12 17:12 - 2010-08-16 14:46 - 00000950 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000UA.job
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
2013-06-12 13:33 - 2013-01-14 11:27 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 13:33 - 2011-07-26 14:06 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 13:12 - 2012-07-31 09:51 - 00000000 ____D C:\Counter-Strike 1.6
2013-06-12 12:06 - 2009-07-14 07:13 - 00726444 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-12 10:58 - 2011-11-06 12:19 - 00000000 ____D C:\Windows\System32\Drivers\AVG
2013-06-12 10:44 - 2010-08-16 14:46 - 00000898 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000Core.job
2013-06-11 10:34 - 2010-08-24 21:29 - 00000000 ____D C:\Program Files (x86)\L4F
2013-06-11 10:33 - 2010-11-02 20:56 - 00000000 ____D C:\Users\JURICA\Desktop\Michal
2013-06-08 09:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-08 03:28 - 2010-09-16 03:19 - 00065820 ____A C:\Windows\PFRO.log
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\sk-SK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-08 03:11 - 2013-06-08 03:03 - 00009153 ____A C:\Windows\IE10_main.log
2013-06-08 03:08 - 2013-06-08 03:08 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:06 - 2013-06-08 03:06 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 13:12 - 2010-10-17 19:54 - 00000000 ____D C:\Users\JURICA\Documents\FIFA 11
2013-06-07 09:24 - 2012-10-10 09:29 - 00603136 __ASH C:\Users\JURICA\Desktop\Thumbs.db
2013-06-06 16:53 - 2012-05-01 22:30 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-06-06 09:55 - 2010-08-16 14:46 - 00002382 ____A C:\Users\JURICA\Desktop\Google Chrome.lnk
2013-06-06 07:27 - 2010-10-13 18:49 - 00000000 ____D C:\Users\JURICA\Desktop\J. Jurica
2013-06-04 17:12 - 2013-03-15 14:57 - 00003584 ____A C:\Users\JURICA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-04 17:09 - 2012-07-10 11:05 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-05-31 14:39 - 2013-03-11 16:03 - 00000000 ___RD C:\Users\JURICA\Desktop\maťko najlepší
2013-05-27 15:16 - 2011-02-13 23:31 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-05-27 15:16 - 2010-08-24 21:54 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-05-27 14:16 - 2011-08-11 11:59 - 00000000 ___RD C:\Users\JURICA\Desktop\Hry
2013-05-27 14:02 - 2010-08-28 22:17 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-05-27 14:01 - 2011-07-14 15:20 - 00000000 ____D C:\Program Files (x86)\Nokia
2013-05-27 13:52 - 2010-09-24 22:57 - 00000000 ____D C:\Program Files (x86)\Codemasters
2013-05-27 13:51 - 2013-05-27 13:51 - 00000000 ____D C:\Users\JURICA\Desktop\Fotky
2013-05-27 13:48 - 2010-12-27 22:55 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-27 13:44 - 2011-08-28 22:56 - 00000000 ____D C:\Users\JURICA\AppData\Roaming\GameRanger
2013-05-27 13:43 - 2013-01-03 09:06 - 00000000 ____D C:\Users\JURICA\AppData\Local\Conduit
2013-05-27 13:43 - 2011-02-22 15:19 - 00000000 ____D C:\Program Files (x86)\Valve
2013-05-25 10:32 - 2013-04-06 16:53 - 00000000 ____D C:\Users\JURICA\Documents\Euro Truck Simulator 2
2013-05-16 03:33 - 2009-07-14 06:45 - 00422000 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 03:15 - 2009-08-21 00:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-16 03:12 - 2010-08-12 00:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-15 12:00 - 2011-11-06 12:04 - 00000000 ____D C:\ProgramData\MFAData
2013-05-15 11:59 - 2011-11-06 12:20 - 00001007 ____A C:\Users\Public\Desktop\AVG 2012.lnk

Files to move or delete:
====================
C:\ProgramData\rundll32.exe
C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
C:\ProgramData\3ocig.bat
C:\ProgramData\3ocig.pad
C:\ProgramData\3ocig.reg
C:\ProgramData\gico3.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== BCD ================================

Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale sk-SK
inherit {globalsettings}
default {current}
resumeobject {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale sk-SK
inherit {bootloadersettings}
recoverysequence {15e7f002-10d0-11df-b1ea-fdc1de7bb1b8}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
nx OptIn
detecthal Yes

Windows Boot Loader
-------------------
identifier {15e7f002-10d0-11df-b1ea-fdc1de7bb1b8}
device ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
systemroot \windows
nx OptIn
winpe Yes

Resume from Hibernate
---------------------
identifier {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale sk-SK
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No

Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Windows Memory Diagnostic
locale sk-SK
inherit {globalsettings}
badmemoryaccess Yes

EMS Settings
------------
identifier {emssettings}
bootems Yes

Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200

RAM Defects
-----------
identifier {badmemory}

Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}

Device options
--------------
identifier {15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
description Ramdisk Options
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \Recovery\WindowsRE\boot.sdi



LastRegBack: 2013-06-06 12:57

==================== End Of Log ============================


nedalo sa mi to odoslat do jednej spravy
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#5 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    HKLM-x32\...\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" [1226928 2013-05-12] (AVG Secure Search)
HKLM-x32\...\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728 2012-02-26] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [1298240 2013-05-15] (Spigot, Inc.)
HKCU\...\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00 [165888 2013-06-12] ()
Startup: C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\gico3.dat ()
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
URLSearchHook: (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File
URLSearchHook: (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
URLSearchHook: (No Name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={3E01B750-B570-11E1-B16C-001999793892}
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {1A905A79-3E96-45A3-B69D-A31BFB268841} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=^AHO&apn_dtid=^YYYYYY^YY^SK&apn_uid=68c246cc-493b-4e4c-967d-e2b1eba5a595&apn_sauid=BE5D7238-D29B-4857-8C56-410A16B96E70
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {91A6F567-EE61-4D67-88D7-FF5F4374B890} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=ct3205709&SSPV=IENSP06
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {C3CCD014-A93C-4272-BD95-69DCBE26E5DD} URL = http://search.yahoo.com/search?fr=chr-g ... =937811&p={searchTerms}
SearchScopes: HKCU - {D476AB60-EC88-4C55-B617-4E4468905EBA} URL = 
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={3E01B750-B570-11E1-B16C-001999793892}
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKLM-x32 - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM-x32 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {62D40876-DF18-411F-9D34-A9DD7A197BC5} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://isearch.avg.com/?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp
FF Extension: Yontoo - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\plugin@yontoo.com
FF Extension: Zynga Community Toolbar - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF Extension: FoxTrick - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}
FF Extension: ytd - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7E77F5DF-8022-40e3-9122-F03DEBEFC43B}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
CHR HomePage: hxxp://www.ask.com/?l=dis&o=APN10374cr&gct=hp
CHR Extension: (AVG Safe Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0
CHR Extension: (AVG Security Toolbar) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.2.0.5_0
S2 vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [1015984 2013-05-12] (AVG Secure Search)
C:\Program Files (x86)\Common Files\AVG Secure Search
2013-06-12 14:45 - 2013-06-12 22:53 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 14:45 - 2013-06-12 22:51 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
C:\Program Files (x86)\YTD Toolbar
:\Program Files (x86)\DAEMON Tools Toolbar
C:\Program Files (x86)\uTorrentBar
C:\Program Files (x86)\Common Files\Spigot
C:\Program Files (x86)\SweetIM
C:\Program Files (x86)\AVG Secure Search
C:\ProgramData\rundll32.exe
C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
C:\ProgramData\3ocig.bat
C:\ProgramData\3ocig.pad
C:\ProgramData\3ocig.reg
C:\ProgramData\gico3.dat
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny log na flashku k FRST
:arrow: Spustte znovu FRST.exe na tom poskozenem PC
  • Kliknete na Fix
  • Probehne oprava a na flash disku se vytvori log Fixlog.txt
:arrow: Pokuste se nastartovat do bezneho rezimu

:arrow: Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 čer 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#6 Příspěvek od Member45 »

dakujem velmi za pomoc.
a ten topic mam dat fixlog ktory mi to vypisalo ci ten povodny log ktory som sem daval?
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#7 Příspěvek od vyosek »

Dejte mi sem fixlog.txt a pote i novy log z RSITu
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“