Logfile of random's system information tool 1.08 (written by random/random)
Run by MIXI at 2013-06-16 12:01:58
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 2 GB (5%) free of 35 GB
Total RAM: 6120 MB (80% free)
HijackThis download failed
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\SysWOW64\rundll32.exe" msisbf32.dll,CifVusMNs
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe" /PROTECT
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Winamp\winampa.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {793DD845-2A02-4A43-8D60-7906A1FFBA68}
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide
"C:\Windows\system32\rundll32.exe" "C:\Windows\syswow64\WININET.dll",DispatchAPICall 1
"C:\Windows\system32\rundll32.exe" "C:\Windows\syswow64\WININET.dll",DispatchAPICall 1
"C:\Windows\system32\rundll32.exe" "C:\Windows\syswow64\WININET.dll",DispatchAPICall 1
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"K:\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1527647954-2329658124-3671890040-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1527647954-2329658124-3671890040-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-11-08 7543912]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-03-04 6330568]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSIDLL"=C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2009-04-21 37888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 months======
2013-06-16 12:01:59 ----D---- C:\Program Files\trend micro
2013-06-16 12:01:58 ----D---- C:\rsit
2013-06-16 11:45:38 ----D---- C:\ProgramData\ESET
2013-06-16 11:45:38 ----D---- C:\Program Files\ESET
2013-06-16 11:41:45 ----SHD---- C:\$RECYCLE.BIN
2013-06-16 11:33:39 ----D---- C:\Windows\temp
2013-06-16 11:33:36 ----A---- C:\ComboFix.txt
2013-06-16 11:25:06 ----A---- C:\Windows\zip.exe
2013-06-16 11:25:06 ----A---- C:\Windows\SWSC.exe
2013-06-16 11:25:06 ----A---- C:\Windows\SWREG.exe
2013-06-16 11:25:06 ----A---- C:\Windows\sed.exe
2013-06-16 11:25:06 ----A---- C:\Windows\PEV.exe
2013-06-16 11:25:06 ----A---- C:\Windows\NIRCMD.exe
2013-06-16 11:25:06 ----A---- C:\Windows\MBR.exe
2013-06-16 11:25:06 ----A---- C:\Windows\grep.exe
2013-06-16 11:24:55 ----AD---- C:\Qoobox
2013-06-16 11:24:41 ----D---- C:\Windows\erdnt
2013-06-14 14:10:53 ----D---- C:\Windows\Minidump
2013-05-21 12:14:09 ----D---- C:\Users\MIXI\AppData\Roaming\Nero
2013-05-21 12:12:01 ----A---- C:\Windows\SYSWOW64\TwnLib4.dll
2013-05-21 12:12:01 ----A---- C:\Windows\SYSWOW64\imagXRA7.dll
2013-05-21 12:12:01 ----A---- C:\Windows\SYSWOW64\imagXR7.dll
2013-05-21 12:12:01 ----A---- C:\Windows\SYSWOW64\imagXpr7.dll
2013-05-21 12:12:01 ----A---- C:\Windows\SYSWOW64\imagX7.dll
2013-05-21 12:11:59 ----D---- C:\ProgramData\Nero
2013-05-21 12:11:59 ----D---- C:\Program Files (x86)\Nero
2013-05-20 11:50:48 ----D---- C:\ProgramData\Orbit
2013-05-20 11:48:16 ----D---- C:\Program Files (x86)\Ubisoft
2013-05-20 11:47:32 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-05-20 11:47:32 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-05-20 11:47:32 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-05-20 11:47:31 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-05-20 11:47:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-05-20 11:47:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-05-20 11:47:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-05-20 11:47:29 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-05-20 11:47:28 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-05-20 11:47:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-05-20 11:47:28 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-05-20 11:47:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-05-20 11:47:28 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-05-20 11:47:28 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-05-20 11:47:28 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-05-20 11:47:28 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-05-20 11:47:27 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-05-20 11:47:27 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-05-20 11:47:27 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-05-20 11:47:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-05-20 11:47:26 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-05-20 11:47:25 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-05-20 11:47:25 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-05-20 11:47:25 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-05-20 11:47:25 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-05-20 11:47:24 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-05-20 11:47:24 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-05-20 11:47:24 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-05-20 11:47:24 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-05-20 11:47:21 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-05-20 11:47:16 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-05-20 11:47:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-05-20 11:47:16 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-05-20 11:47:16 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-05-20 11:47:16 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-05-20 11:47:16 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-05-20 11:47:15 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-05-20 11:47:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-05-20 11:47:15 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-05-20 11:47:15 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-05-20 11:47:14 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-05-20 11:47:14 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-05-20 11:47:04 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-05-20 11:47:04 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-05-20 11:47:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-05-20 11:47:04 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-05-20 11:47:04 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-05-20 11:47:04 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-05-20 11:47:03 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-05-20 11:47:03 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-05-20 11:47:01 ----A---- C:\Windows\system32\xinput1_3.dll
2013-05-20 11:47:00 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-05-20 11:47:00 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-05-20 11:46:59 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-05-20 11:46:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-05-20 11:46:59 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-05-20 11:46:59 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-05-20 11:46:58 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-05-20 11:46:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-05-20 11:46:55 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-05-20 11:46:55 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-05-20 11:46:54 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-05-20 11:46:54 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-05-20 11:46:54 ----A---- C:\Windows\system32\xinput1_2.dll
2013-05-20 11:46:54 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-05-20 11:46:53 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-05-20 11:46:53 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-05-20 11:46:53 ----A---- C:\Windows\system32\xinput1_1.dll
2013-05-20 11:46:53 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-05-20 11:46:46 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-05-20 11:46:46 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-05-20 11:46:43 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-05-20 11:46:43 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-05-20 11:46:41 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-05-20 11:46:41 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-05-19 23:35:43 ----D---- C:\Program Files (x86)\CountDown ShutDown PC
2013-05-17 11:49:31 ----D---- C:\Users\MIXI\AppData\Roaming\Skype
2013-05-17 11:49:26 ----RD---- C:\Program Files (x86)\Skype
2013-05-17 11:49:19 ----D---- C:\ProgramData\Skype
======List of files/folders modified in the last 1 months======
2013-06-16 12:01:59 ----RD---- C:\Program Files
2013-06-16 11:47:37 ----SHD---- C:\Windows\Installer
2013-06-16 11:46:41 ----D---- C:\Windows\system32\DriverStore
2013-06-16 11:46:41 ----D---- C:\Windows\system32\drivers
2013-06-16 11:46:41 ----D---- C:\Windows\system32\catroot
2013-06-16 11:46:40 ----D---- C:\Windows\inf
2013-06-16 11:46:25 ----D---- C:\Windows\System32
2013-06-16 11:46:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-16 11:45:38 ----D---- C:\ProgramData
2013-06-16 11:44:39 ----SHD---- C:\System Volume Information
2013-06-16 11:41:48 ----D---- C:\Windows\system32\Tasks
2013-06-16 11:41:18 ----D---- C:\ProgramData\NVIDIA
2013-06-16 11:33:39 ----D---- C:\Windows
2013-06-16 11:31:55 ----A---- C:\Windows\system.ini
2013-06-16 11:31:49 ----D---- C:\Windows\system32\drivers\etc
2013-06-16 11:29:27 ----D---- C:\Windows\SYSWOW64\drivers
2013-06-16 11:29:27 ----D---- C:\Windows\SysWOW64
2013-06-16 11:29:27 ----D---- C:\Windows\AppPatch
2013-06-16 11:29:26 ----D---- C:\Program Files (x86)\Common Files
2013-06-16 11:25:01 ----D---- C:\Windows\Prefetch
2013-06-16 11:23:36 ----SD---- C:\Users\MIXI\AppData\Roaming\Microsoft
2013-06-15 23:26:29 ----D---- C:\Users\MIXI\AppData\Roaming\vlc
2013-06-14 11:10:17 ----D---- C:\Windows\system32\config
2013-06-14 11:01:57 ----D---- C:\Windows\system32\NDF
2013-06-09 22:21:51 ----D---- C:\ProgramData\BrowserProtect
2013-06-09 20:31:09 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-21 12:11:59 ----RD---- C:\Program Files (x86)
2013-05-21 12:11:45 ----D---- C:\Windows\winsxs
2013-05-21 12:11:16 ----D---- C:\Windows\system32\catroot2
2013-05-20 11:46:53 ----RSD---- C:\Windows\assembly
2013-05-20 11:46:47 ----D---- C:\Windows\Microsoft.NET
2013-05-20 11:45:14 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-09 283200]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\amdhub30.sys [2011-03-18 87168]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\amdxhc.sys [2011-03-18 188544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-11-08 2945640]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-05-25 174184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 BrowserProtect;BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-06-03 3085264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-03-04 1341664]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-04-19 161384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-09 1255736]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Poprosil bych o kontrolu LOGU
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119526
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Poprosil bych o kontrolu LOGU
Zdravím!
1. Váš oper. systém je určitě legální, že?
2. Kontrola logu je bezpředmětná, spouštěl jste ComboFix, který stoprocentně smaže všechny případné stopy po nákaze. Navíc je to utilita pro profesionály, kterou si laik může snadno poškodit systém.
1. Váš oper. systém je určitě legální, že?
2. Kontrola logu je bezpředmětná, spouštěl jste ComboFix, který stoprocentně smaže všechny případné stopy po nákaze. Navíc je to utilita pro profesionály, kterou si laik může snadno poškodit systém.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.