Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

chcel by som poprosit o preventivnu kontrolu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
ringov
Návštěvník
Návštěvník
Příspěvky: 313
Registrován: 04 dub 2011 14:21
Bydliště: Cejkov

chcel by som poprosit o preventivnu kontrolu

#1 Příspěvek od ringov »

Dobry večer všetkym majstrom v tomto remesle---- Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2013-11-05 20:06:29
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 551 GB (58%) free of 946 GB
Total RAM: 8149 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:06:43, on 5. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\marek.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 4746 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9ea8b738-7200-404a-bc39-2d5e3a2eddf1 -SystemEventPortName:HostProcess-aa772ce6-fb02-42b2-bc6f-8243e851db82 -IoCancelEventPortName:HostProcess-59fc68bd-e294-492e-abb2-080a580fc7e6 -NonStateChangingEventPortName:HostProcess-5f3d53df-5c33-4e29-85ee-3f3501dde4cc -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:01cfd748-05a5-4d6c-abf4-e35ca3cd075f -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\Windows\explorer.exe
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3076.0.782811481\763027825" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,18,21,24,26 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2049 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --instant-process --enable-threaded-compositing --disable-html-notifications --channel="3076.1.80562923\1886337849" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3076.2.1413702523\159977570" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3076.3.1910525872\1926558967" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3076.9.89336602\2098593936" /prefetch:673131151
"C:\Users\marek\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-11-04 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-23 462248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-11-04 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-23 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-11-04 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-11-04 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2013-10-20 1612504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Moje Subory\Programy\DaemonTools\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DefragTaskBar]
C:\Moje Subory\Programy\Ashampoo\Ashampoo Magical Defrag 3\defragtaskbar.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2013-04-04 532040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (cleanup)]
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll,ProcessCleanupScript []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMusic FastStart]
C:\Program Files (x86)\Nokia\Nokia Music Player\NokiaMusicPlayer.exe /command:faststart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Printsrv]
c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2013-10-30 1820584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2013-10-06 6588144]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-11-04 3567800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-11-05 20:06:30 ----D---- C:\Program Files\trend micro
2013-11-05 20:06:29 ----D---- C:\rsit
2013-11-05 19:46:41 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2013-11-05 19:46:23 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2013-11-04 06:03:13 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-11-04 06:03:12 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-11-04 06:03:12 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-11-04 06:03:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-11-04 06:03:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-11-04 06:03:10 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-11-04 06:03:10 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-11-04 06:03:09 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-11-04 06:03:04 ----A---- C:\Windows\avastSS.scr
2013-11-04 06:02:55 ----D---- C:\Program Files\AVAST Software
2013-11-03 21:15:39 ----D---- C:\Users\marek\AppData\Roaming\AVAST Software
2013-11-03 21:14:16 ----A---- C:\Windows\system32\aswBoot.exe
2013-11-03 21:13:19 ----D---- C:\ProgramData\AVAST Software
2013-11-03 21:03:00 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-03 21:03:00 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-11-03 20:28:10 ----D---- C:\_OTM
2013-11-03 20:12:52 ----D---- C:\AdwCleaner
2013-11-02 22:55:22 ----D---- C:\Users\marek\AppData\Roaming\Theta
2013-10-31 22:11:40 ----D---- C:\Windows\SYSWOW64\directx
2013-10-31 21:57:40 ----D---- C:\Program Files (x86)\Steam
2013-10-31 17:17:15 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-10-28 20:17:50 ----D---- C:\ProgramData\NortonInstaller
2013-10-27 21:15:30 ----D---- C:\ProgramData\Rockstar Games
2013-10-27 21:14:08 ----D---- C:\Program Files (x86)\Rockstar Games
2013-10-27 19:37:16 ----D---- C:\ProgramData\Bohemia Interactive
2013-10-27 13:39:36 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-10-27 13:39:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-10-27 13:39:36 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-10-27 13:39:36 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-10-27 13:39:34 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-10-27 13:39:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-10-27 13:39:34 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-10-27 13:39:34 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-10-27 13:39:32 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-10-27 13:39:32 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-10-27 13:39:26 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-10-27 13:39:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-10-27 13:39:26 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-10-27 13:39:26 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-10-27 13:39:25 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-10-27 13:39:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-10-27 13:39:25 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-10-27 13:39:25 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-10-27 13:39:23 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-10-27 13:39:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-10-27 13:39:23 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-10-27 13:39:23 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-10-27 13:39:22 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-10-27 13:39:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-10-27 13:39:22 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-10-27 13:39:22 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-10-27 13:39:19 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-10-27 13:39:19 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-10-27 13:39:19 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-10-27 13:39:19 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-10-27 13:39:18 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-10-27 13:39:17 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-10-27 13:39:17 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-10-27 13:39:14 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-10-27 13:39:14 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\xinput1_3.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-10-27 13:39:11 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-10-27 13:39:11 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-10-27 13:39:11 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-10-27 13:39:11 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-10-27 13:39:10 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-10-27 13:39:10 ----A---- C:\Windows\system32\d3dx10.dll
2013-10-27 13:39:09 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-10-27 13:39:09 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-10-27 13:39:08 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-10-27 13:39:08 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-10-27 13:39:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-10-27 13:39:08 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-10-27 13:39:07 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-10-27 13:39:07 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-10-27 13:39:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-10-27 13:39:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-10-27 13:39:06 ----A---- C:\Windows\system32\xinput1_2.dll
2013-10-27 13:39:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-10-27 13:39:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-10-27 13:39:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-10-27 13:39:04 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\system32\xinput1_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-10-27 13:38:58 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-10-27 13:38:58 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-10-27 13:38:57 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-10-27 13:38:56 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-10-27 13:38:56 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-10-27 13:38:55 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-10-27 13:38:55 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-10-27 13:38:52 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-10-27 13:38:52 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-10-27 13:38:51 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-10-27 13:38:51 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-10-27 13:38:49 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-10-27 13:38:49 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-10-27 13:38:47 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-10-27 13:38:47 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-10-26 20:17:25 ----D---- C:\Program Files (x86)\Cheat Engine 6.2
2013-10-26 19:41:08 ----SHD---- C:\$RECYCLE.BIN
2013-10-26 19:41:06 ----D---- C:\Windows\temp
2013-10-19 22:48:48 ----D---- C:\Users\marek\AppData\Roaming\WinRAR
2013-10-19 22:48:35 ----D---- C:\Program Files\WinRAR
2013-10-18 23:37:03 ----D---- C:\ProgramData\Norton
2013-10-13 19:12:31 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-13 13:18:44 ----D---- C:\ProgramData\Codemasters
2013-10-13 05:38:37 ----D---- C:\ProgramData\Ashampoo
2013-10-13 05:38:31 ----D---- C:\Program Files (x86)\Ashampoo
2013-10-13 00:15:30 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2013-10-12 04:01:08 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2013-10-12 04:00:51 ----D---- C:\ProgramData\IObit
2013-10-12 04:00:38 ----D---- C:\Users\marek\AppData\Roaming\IObit
2013-10-12 04:00:38 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2013-10-12 03:49:53 ----D---- C:\Users\marek\AppData\Roaming\deluge
2013-10-09 20:32:28 ----D---- C:\ProgramData\Orbit
2013-10-09 19:37:27 ----D---- C:\Users\marek\AppData\Roaming\Macromedia
2013-10-09 19:36:44 ----D---- C:\Windows\SYSWOW64\Macromed
2013-10-09 19:36:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-10-09 19:36:43 ----D---- C:\Windows\system32\Macromed
2013-10-09 19:29:14 ----D---- C:\Users\marek\AppData\Roaming\Opera Software
2013-10-09 19:29:12 ----D---- C:\Program Files (x86)\Opera
2013-10-09 19:27:04 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\ieui.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\iesetup.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\iernonce.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-08 19:21:33 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\iertutil.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-08 19:21:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\jscript9.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\jscript.dll
2013-10-08 19:21:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-08 19:21:31 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-08 19:21:31 ----A---- C:\Windows\system32\urlmon.dll
2013-10-08 19:21:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-08 19:21:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-08 19:21:30 ----A---- C:\Windows\system32\wininet.dll
2013-10-08 19:21:30 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-08 19:21:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-08 19:21:29 ----A---- C:\Windows\system32\ieframe.dll
2013-10-08 19:21:28 ----A---- C:\Windows\system32\mshtml.dll
2013-10-08 19:21:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-08 19:13:40 ----A---- C:\Windows\system32\win32k.sys
2013-10-08 19:13:38 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-08 19:13:38 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\lpk.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\fontsub.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-08 19:13:34 ----A---- C:\Windows\system32\dciman32.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\atmlib.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\atmfd.dll
2013-10-08 19:13:33 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\mswsock.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-08 19:13:33 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-08 19:13:32 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-08 19:13:32 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-08 19:13:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-08 19:13:32 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-08 19:13:32 ----A---- C:\Windows\system32\davclnt.dll
2013-10-08 19:13:31 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-08 19:13:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-08 19:13:31 ----A---- C:\Windows\system32\advapi32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\wow64.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\tdh.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\ntdll.dll
2013-10-08 19:13:29 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-08 19:13:29 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-08 19:13:29 ----A---- C:\Windows\system32\comctl32.dll
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbser.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-08 19:13:26 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-08 19:13:25 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 19:13:25 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-07 19:38:05 ----D---- C:\ProgramData\GlarySoft
2013-10-07 19:21:30 ----D---- C:\Users\marek\AppData\Roaming\GlarySoft

======List of files/folders modified in the last 1 month======

2013-11-05 20:06:30 ----RD---- C:\Program Files
2013-11-05 19:46:41 ----D---- C:\Windows\system32\drivers
2013-11-05 15:36:00 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2013-11-05 14:03:24 ----D---- C:\Windows\system32\config
2013-11-05 13:54:35 ----D---- C:\Windows\System32
2013-11-05 13:54:35 ----D---- C:\Windows\inf
2013-11-05 13:54:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-04 07:16:36 ----SHD---- C:\System Volume Information
2013-11-04 06:59:09 ----D---- C:\Windows
2013-11-04 06:00:05 ----D---- C:\Windows\SoftwareDistribution
2013-11-03 21:22:13 ----D---- C:\Windows\system32\Tasks
2013-11-03 21:14:17 ----D---- C:\Windows\winsxs
2013-11-03 21:14:14 ----D---- C:\Program Files\Windows Sidebar
2013-11-03 21:13:19 ----D---- C:\ProgramData
2013-11-03 21:09:07 ----SHD---- C:\Windows\Installer
2013-11-03 21:09:07 ----D---- C:\Config.Msi
2013-11-03 21:03:00 ----RD---- C:\Program Files (x86)
2013-11-03 20:12:28 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2013-11-03 11:12:03 ----D---- C:\Windows\system32\NDF
2013-10-31 22:15:29 ----D---- C:\Windows\Logs
2013-10-31 22:11:40 ----D---- C:\Windows\SysWOW64
2013-10-31 21:57:40 ----D---- C:\Program Files (x86)\Common Files
2013-10-31 17:16:36 ----RSD---- C:\Windows\assembly
2013-10-31 17:15:36 ----D---- C:\Windows\Prefetch
2013-10-29 05:19:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-28 20:17:31 ----A---- C:\Windows\Ascd_tmp.ini
2013-10-28 20:17:23 ----A---- C:\Windows\Language_trs.ini
2013-10-27 21:15:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-10-27 13:38:22 ----D---- C:\Windows\system32\catroot2
2013-10-26 19:49:15 ----D---- C:\Qoobox
2013-10-26 19:40:08 ----A---- C:\Windows\system.ini
2013-10-26 19:39:09 ----D---- C:\Windows\SYSWOW64\drivers
2013-10-26 19:39:09 ----D---- C:\Windows\AppPatch
2013-10-26 17:14:58 ----D---- C:\Program Files\SUPERAntiSpyware
2013-10-18 23:22:45 ----D---- C:\Windows\Tasks
2013-10-17 20:26:33 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2013-10-13 19:10:31 ----RD---- C:\Moje Subory
2013-10-13 19:04:07 ----D---- C:\Users\marek\AppData\Roaming\NVIDIA
2013-10-13 09:46:56 ----D---- C:\Windows\Microsoft.NET
2013-10-12 18:27:38 ----D---- C:\Program Files (x86)\Google
2013-10-11 17:50:32 ----D---- C:\Windows\rescache
2013-10-09 19:14:31 ----D---- C:\Windows\system32\DriverStore
2013-10-09 19:14:31 ----D---- C:\Windows\system32\catroot
2013-10-08 19:30:38 ----D---- C:\Windows\panther
2013-10-08 19:30:37 ----D---- C:\Windows\debug
2013-10-08 19:23:58 ----D---- C:\Program Files\Internet Explorer
2013-10-08 19:23:58 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-08 19:23:57 ----D---- C:\Windows\system32\en-US
2013-10-08 19:18:37 ----D---- C:\Windows\system32\MRT
2013-10-08 19:17:22 ----A---- C:\Windows\system32\MRT.exe
2013-10-08 12:45:57 ----D---- C:\ProgramData\NVIDIA
2013-10-08 03:01:31 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2013-10-08 03:01:30 ----D---- C:\ProgramData\Comodo
2013-10-07 19:38:37 ----D---- C:\Users\marek\AppData\Roaming\Nokia
2013-10-07 19:38:37 ----D---- C:\Users\marek\AppData\Roaming\Apple Computer
2013-10-07 19:38:35 ----SD---- C:\ProgramData\Microsoft
2013-10-07 19:38:35 ----RD---- C:\Users
2013-10-06 08:34:35 ----D---- C:\ProgramData\PC Suite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-11-04 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-11-04 205320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2013-05-22 17720]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-11-04 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-11-04 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-04 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-11-04 65264]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-09-24 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-31 283200]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-11-04 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-11-04 84328]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-03 677480]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2011-11-11 2182768]
S0 ofvpmj;ofvpmj; C:\Windows\system32\drivers\ofvpmj.sys []
S3 bdfsfltr;bdfsfltr; C:\Windows\system32\DRIVERS\bdfsfltr.sys [2011-03-24 431176]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 RegFilter;RegFilter; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-09-29 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 UrlFilter;UrlFilter; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Moje Subory\Programy\Game Booster\Game Booster 3\Driver\WinRing0x64.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 FileMonitor;FileMonitor; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys []
S4 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2013-11-05 116440]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-11-04 50344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-06-21 884512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-30 566696]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-05-23 143120]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-06-21 413472]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2011-11-11 27760]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119531
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: chcel by som poprosit o preventivnu kontrolu

#2 Příspěvek od Rudy »

Zdravím!
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\system32\drivers\ofvpmj.sys
C:\Windows\system32\DRIVERS\bdfsfltr.sys

:services
ofvpmj
bdfsfltr

:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ringov
Návštěvník
Návštěvník
Příspěvky: 313
Registrován: 04 dub 2011 14:21
Bydliště: Cejkov

Re: chcel by som poprosit o preventivnu kontrolu

#3 Příspěvek od ringov »

Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2013-11-05 20:38:26
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 552 GB (58%) free of 946 GB
Total RAM: 8149 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:38:29, on 5. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\marek.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 4686 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-76b117c9-d4b9-47ea-b164-9fab1fd37f65 -SystemEventPortName:HostProcess-36415708-4aa4-450c-b880-1309ce2a5993 -IoCancelEventPortName:HostProcess-54f54edd-6d43-434b-9b47-dbea8cd2a350 -NonStateChangingEventPortName:HostProcess-e95dc603-cd7a-464c-8285-58a4156e3d80 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5e0e9637-242f-4f77-8278-19f7cdc2e6ac -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3364.0.1183299761\629747098" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,18,21,24,26 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2049 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --instant-process --enable-threaded-compositing --disable-html-notifications --channel="3364.1.1160796055\1041397788" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3364.2.586682263\2037095548" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3364.3.1219352278\1879865124" /prefetch:673131151
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group3 pct:10b stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="3364.9.158826013\876808703" /prefetch:673131151
"C:\Users\marek\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-11-04 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-23 462248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-11-04 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-23 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-11-04 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-11-04 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2013-10-20 1612504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Moje Subory\Programy\DaemonTools\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DefragTaskBar]
C:\Moje Subory\Programy\Ashampoo\Ashampoo Magical Defrag 3\defragtaskbar.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2013-04-04 532040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (cleanup)]
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll,ProcessCleanupScript []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMusic FastStart]
C:\Program Files (x86)\Nokia\Nokia Music Player\NokiaMusicPlayer.exe /command:faststart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Printsrv]
c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2013-10-30 1820584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2013-10-06 6588144]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-11-04 3567800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-11-05 20:06:30 ----D---- C:\Program Files\trend micro
2013-11-05 20:06:29 ----D---- C:\rsit
2013-11-05 19:46:23 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2013-11-04 06:03:13 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-11-04 06:03:12 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-11-04 06:03:12 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-11-04 06:03:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-11-04 06:03:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-11-04 06:03:10 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-11-04 06:03:10 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-11-04 06:03:09 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-11-04 06:03:04 ----A---- C:\Windows\avastSS.scr
2013-11-04 06:02:55 ----D---- C:\Program Files\AVAST Software
2013-11-03 21:15:39 ----D---- C:\Users\marek\AppData\Roaming\AVAST Software
2013-11-03 21:14:16 ----A---- C:\Windows\system32\aswBoot.exe
2013-11-03 21:13:19 ----D---- C:\ProgramData\AVAST Software
2013-11-03 21:03:00 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-03 21:03:00 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-11-03 20:28:10 ----D---- C:\_OTM
2013-11-03 20:12:52 ----D---- C:\AdwCleaner
2013-11-02 22:55:22 ----D---- C:\Users\marek\AppData\Roaming\Theta
2013-10-31 22:11:40 ----D---- C:\Windows\SYSWOW64\directx
2013-10-31 21:57:40 ----D---- C:\Program Files (x86)\Steam
2013-10-31 17:17:15 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-10-31 17:17:09 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-10-31 17:17:09 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-10-31 17:17:08 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-10-31 17:17:07 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-10-28 20:17:50 ----D---- C:\ProgramData\NortonInstaller
2013-10-27 21:15:30 ----D---- C:\ProgramData\Rockstar Games
2013-10-27 21:14:08 ----D---- C:\Program Files (x86)\Rockstar Games
2013-10-27 19:37:16 ----D---- C:\ProgramData\Bohemia Interactive
2013-10-27 13:39:36 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-10-27 13:39:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-10-27 13:39:36 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-10-27 13:39:36 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-10-27 13:39:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-10-27 13:39:35 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-10-27 13:39:34 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-10-27 13:39:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-10-27 13:39:34 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-10-27 13:39:34 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-10-27 13:39:33 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-10-27 13:39:32 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-10-27 13:39:32 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-10-27 13:39:31 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-10-27 13:39:30 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-10-27 13:39:30 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-10-27 13:39:29 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-10-27 13:39:27 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-10-27 13:39:27 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-10-27 13:39:26 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-10-27 13:39:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-10-27 13:39:26 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-10-27 13:39:26 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-10-27 13:39:25 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-10-27 13:39:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-10-27 13:39:25 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-10-27 13:39:25 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-10-27 13:39:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-10-27 13:39:23 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-10-27 13:39:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-10-27 13:39:23 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-10-27 13:39:23 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-10-27 13:39:22 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-10-27 13:39:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-10-27 13:39:22 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-10-27 13:39:22 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-10-27 13:39:21 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-10-27 13:39:20 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-10-27 13:39:19 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-10-27 13:39:19 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-10-27 13:39:19 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-10-27 13:39:19 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-10-27 13:39:18 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-10-27 13:39:18 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-10-27 13:39:17 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-10-27 13:39:17 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-10-27 13:39:16 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-10-27 13:39:15 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-10-27 13:39:14 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-10-27 13:39:14 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-10-27 13:39:13 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\xinput1_3.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-10-27 13:39:13 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-10-27 13:39:12 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-10-27 13:39:11 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-10-27 13:39:11 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-10-27 13:39:11 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-10-27 13:39:11 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-10-27 13:39:10 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-10-27 13:39:10 ----A---- C:\Windows\system32\d3dx10.dll
2013-10-27 13:39:09 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-10-27 13:39:09 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-10-27 13:39:08 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-10-27 13:39:08 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-10-27 13:39:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-10-27 13:39:08 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-10-27 13:39:07 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-10-27 13:39:07 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-10-27 13:39:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-10-27 13:39:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-10-27 13:39:06 ----A---- C:\Windows\system32\xinput1_2.dll
2013-10-27 13:39:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-10-27 13:39:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-10-27 13:39:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-10-27 13:39:04 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\system32\xinput1_1.dll
2013-10-27 13:39:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-10-27 13:38:58 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-10-27 13:38:58 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-10-27 13:38:57 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-10-27 13:38:57 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-10-27 13:38:56 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-10-27 13:38:56 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-10-27 13:38:55 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-10-27 13:38:55 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-10-27 13:38:52 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-10-27 13:38:52 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-10-27 13:38:51 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-10-27 13:38:51 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-10-27 13:38:49 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-10-27 13:38:49 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-10-27 13:38:47 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-10-27 13:38:47 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-10-26 20:17:25 ----D---- C:\Program Files (x86)\Cheat Engine 6.2
2013-10-26 19:41:08 ----SHD---- C:\$RECYCLE.BIN
2013-10-26 19:41:06 ----D---- C:\Windows\temp
2013-10-19 22:48:48 ----D---- C:\Users\marek\AppData\Roaming\WinRAR
2013-10-19 22:48:35 ----D---- C:\Program Files\WinRAR
2013-10-18 23:37:03 ----D---- C:\ProgramData\Norton
2013-10-13 19:12:31 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-13 13:18:44 ----D---- C:\ProgramData\Codemasters
2013-10-13 05:38:37 ----D---- C:\ProgramData\Ashampoo
2013-10-13 05:38:31 ----D---- C:\Program Files (x86)\Ashampoo
2013-10-13 00:15:30 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2013-10-12 04:01:08 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2013-10-12 04:00:51 ----D---- C:\ProgramData\IObit
2013-10-12 04:00:38 ----D---- C:\Users\marek\AppData\Roaming\IObit
2013-10-12 04:00:38 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2013-10-12 03:49:53 ----D---- C:\Users\marek\AppData\Roaming\deluge
2013-10-09 20:32:28 ----D---- C:\ProgramData\Orbit
2013-10-09 19:37:27 ----D---- C:\Users\marek\AppData\Roaming\Macromedia
2013-10-09 19:36:44 ----D---- C:\Windows\SYSWOW64\Macromed
2013-10-09 19:36:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-10-09 19:36:43 ----D---- C:\Windows\system32\Macromed
2013-10-09 19:29:14 ----D---- C:\Users\marek\AppData\Roaming\Opera Software
2013-10-09 19:29:12 ----D---- C:\Program Files (x86)\Opera
2013-10-09 19:27:04 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-08 19:21:34 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\ieui.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\iesetup.dll
2013-10-08 19:21:34 ----A---- C:\Windows\system32\iernonce.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-08 19:21:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-08 19:21:33 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\iertutil.dll
2013-10-08 19:21:33 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-08 19:21:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\jscript9.dll
2013-10-08 19:21:32 ----A---- C:\Windows\system32\jscript.dll
2013-10-08 19:21:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-08 19:21:31 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-08 19:21:31 ----A---- C:\Windows\system32\urlmon.dll
2013-10-08 19:21:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-08 19:21:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-08 19:21:30 ----A---- C:\Windows\system32\wininet.dll
2013-10-08 19:21:30 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-08 19:21:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-08 19:21:29 ----A---- C:\Windows\system32\ieframe.dll
2013-10-08 19:21:28 ----A---- C:\Windows\system32\mshtml.dll
2013-10-08 19:21:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-08 19:13:40 ----A---- C:\Windows\system32\win32k.sys
2013-10-08 19:13:38 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-08 19:13:38 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-08 19:13:34 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\lpk.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\fontsub.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-08 19:13:34 ----A---- C:\Windows\system32\dciman32.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\atmlib.dll
2013-10-08 19:13:34 ----A---- C:\Windows\system32\atmfd.dll
2013-10-08 19:13:33 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\mswsock.dll
2013-10-08 19:13:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-08 19:13:33 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-08 19:13:32 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-08 19:13:32 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-08 19:13:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-08 19:13:32 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-08 19:13:32 ----A---- C:\Windows\system32\davclnt.dll
2013-10-08 19:13:31 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-08 19:13:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-08 19:13:31 ----A---- C:\Windows\system32\advapi32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-08 19:13:30 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\wow64.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\tdh.dll
2013-10-08 19:13:30 ----A---- C:\Windows\system32\ntdll.dll
2013-10-08 19:13:29 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-08 19:13:29 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-08 19:13:29 ----A---- C:\Windows\system32\comctl32.dll
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbser.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-10-08 19:13:28 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-08 19:13:26 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-08 19:13:25 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 19:13:25 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-07 19:38:05 ----D---- C:\ProgramData\GlarySoft
2013-10-07 19:21:30 ----D---- C:\Users\marek\AppData\Roaming\GlarySoft

======List of files/folders modified in the last 1 month======

2013-11-05 20:36:19 ----D---- C:\Windows\system32\config
2013-11-05 20:07:01 ----D---- C:\Windows\system32\drivers
2013-11-05 20:06:30 ----RD---- C:\Program Files
2013-11-05 15:36:00 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2013-11-05 13:54:35 ----D---- C:\Windows\System32
2013-11-05 13:54:35 ----D---- C:\Windows\inf
2013-11-05 13:54:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-04 07:16:36 ----SHD---- C:\System Volume Information
2013-11-04 06:59:09 ----D---- C:\Windows
2013-11-04 06:00:05 ----D---- C:\Windows\SoftwareDistribution
2013-11-03 21:22:13 ----D---- C:\Windows\system32\Tasks
2013-11-03 21:14:17 ----D---- C:\Windows\winsxs
2013-11-03 21:14:14 ----D---- C:\Program Files\Windows Sidebar
2013-11-03 21:13:19 ----D---- C:\ProgramData
2013-11-03 21:09:07 ----SHD---- C:\Windows\Installer
2013-11-03 21:09:07 ----D---- C:\Config.Msi
2013-11-03 21:03:00 ----RD---- C:\Program Files (x86)
2013-11-03 20:12:28 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2013-11-03 11:12:03 ----D---- C:\Windows\system32\NDF
2013-10-31 22:15:29 ----D---- C:\Windows\Logs
2013-10-31 22:11:40 ----D---- C:\Windows\SysWOW64
2013-10-31 21:57:40 ----D---- C:\Program Files (x86)\Common Files
2013-10-31 17:16:36 ----RSD---- C:\Windows\assembly
2013-10-31 17:15:36 ----D---- C:\Windows\Prefetch
2013-10-29 05:19:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-28 20:17:31 ----A---- C:\Windows\Ascd_tmp.ini
2013-10-28 20:17:23 ----A---- C:\Windows\Language_trs.ini
2013-10-27 21:15:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-10-27 13:38:22 ----D---- C:\Windows\system32\catroot2
2013-10-26 19:49:15 ----D---- C:\Qoobox
2013-10-26 19:40:08 ----A---- C:\Windows\system.ini
2013-10-26 19:39:09 ----D---- C:\Windows\SYSWOW64\drivers
2013-10-26 19:39:09 ----D---- C:\Windows\AppPatch
2013-10-26 17:14:58 ----D---- C:\Program Files\SUPERAntiSpyware
2013-10-18 23:22:45 ----D---- C:\Windows\Tasks
2013-10-17 20:26:33 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2013-10-13 19:10:31 ----RD---- C:\Moje Subory
2013-10-13 19:04:07 ----D---- C:\Users\marek\AppData\Roaming\NVIDIA
2013-10-13 09:46:56 ----D---- C:\Windows\Microsoft.NET
2013-10-12 18:27:38 ----D---- C:\Program Files (x86)\Google
2013-10-11 17:50:32 ----D---- C:\Windows\rescache
2013-10-09 19:14:31 ----D---- C:\Windows\system32\DriverStore
2013-10-09 19:14:31 ----D---- C:\Windows\system32\catroot
2013-10-08 19:30:38 ----D---- C:\Windows\panther
2013-10-08 19:30:37 ----D---- C:\Windows\debug
2013-10-08 19:23:58 ----D---- C:\Program Files\Internet Explorer
2013-10-08 19:23:58 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-08 19:23:57 ----D---- C:\Windows\system32\en-US
2013-10-08 19:18:37 ----D---- C:\Windows\system32\MRT
2013-10-08 19:17:22 ----A---- C:\Windows\system32\MRT.exe
2013-10-08 12:45:57 ----D---- C:\ProgramData\NVIDIA
2013-10-08 03:01:31 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2013-10-08 03:01:30 ----D---- C:\ProgramData\Comodo
2013-10-07 19:38:37 ----D---- C:\Users\marek\AppData\Roaming\Nokia
2013-10-07 19:38:37 ----D---- C:\Users\marek\AppData\Roaming\Apple Computer
2013-10-07 19:38:35 ----SD---- C:\ProgramData\Microsoft
2013-10-07 19:38:35 ----RD---- C:\Users
2013-10-06 08:34:35 ----D---- C:\ProgramData\PC Suite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-11-04 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-11-04 205320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2013-05-22 17720]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-11-04 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-11-04 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-04 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-11-04 65264]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-09-24 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-31 283200]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-11-04 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-11-04 84328]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-03 677480]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2011-11-11 2182768]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 RegFilter;RegFilter; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-09-29 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 UrlFilter;UrlFilter; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Moje Subory\Programy\Game Booster\Game Booster 3\Driver\WinRing0x64.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 FileMonitor;FileMonitor; \??\C:\Moje Subory\Programy\IObit Malware Fighter 2\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-11-04 50344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-06-21 884512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-30 566696]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-05-23 143120]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-06-21 413472]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2011-11-11 27760]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119531
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: chcel by som poprosit o preventivnu kontrolu

#4 Příspěvek od Rudy »

Log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ringov
Návštěvník
Návštěvník
Příspěvky: 313
Registrován: 04 dub 2011 14:21
Bydliště: Cejkov

Re: chcel by som poprosit o preventivnu kontrolu

#5 Příspěvek od ringov »

bol tam virus?Dakujam za pomoc,ste MACHRI :thumbsup:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119531
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: chcel by som poprosit o preventivnu kontrolu

#6 Příspěvek od Rudy »

Byl. 2x rootkit. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“