prosim o kontrolu - zpomaleny ntb

Zpráva

strata · #31 Příspěvek od **strata** » 09 led 2014 01:14

ComboFix 14-01-04.03 - radka 08.01.2014 16:20:59.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2814.1536 [GMT -7:00]
Spuštěný z: c:\users\radka\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\radka\AppData\Local\assembly\tmp
c:\users\radka\AppData\Local\MSGBOX.EXE
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-08 do 2014-01-08 )))))))))))))))))))))))))))))))
.
.
2014-01-08 23:33 . 2014-01-08 23:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-08 22:36 . 2013-12-16 08:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F48FA74A-5F58-4194-810F-808222F4CFF7}\mpengine.dll
2014-01-08 04:22 . 2014-01-08 04:22 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-01-08 02:29 . 2014-01-08 02:29 -------- d-----w- c:\users\radka\AppData\Roaming\AVAST Software
2014-01-08 02:28 . 2014-01-08 04:22 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-01-08 02:28 . 2014-01-08 02:28 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-01-08 02:28 . 2014-01-08 04:22 422216 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-01-08 02:28 . 2014-01-08 04:22 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-01-08 02:28 . 2014-01-08 04:22 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-01-08 02:28 . 2014-01-08 02:27 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-01-08 02:27 . 2014-01-08 04:22 43152 ----a-w- c:\windows\avastSS.scr
2014-01-06 22:47 . 2014-01-06 22:47 -------- d-----w- c:\program files\Defraggler
2014-01-05 23:02 . 2014-01-06 16:14 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2014-01-05 23:01 . 2014-01-06 16:13 9728 ----a-w- c:\windows\system32\drivers\errdev.sys.bak
2014-01-04 23:04 . 2014-01-04 23:04 -------- d-----w- c:\users\radka\AppData\Roaming\Malwarebytes
2014-01-04 23:03 . 2014-01-04 23:03 -------- d-----w- c:\programdata\Malwarebytes
2013-12-25 17:55 . 2013-11-26 09:18 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-12-24 19:08 . 2013-10-15 01:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-12-23 19:32 . 2013-12-23 19:32 4558848 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-12-13 23:00 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-13 23:00 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-13 23:00 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-13 23:00 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-13 23:00 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2013-12-11 15:46 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-12-11 15:46 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-12-11 15:46 . 2013-10-30 01:24 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-12-11 15:46 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-12-11 15:46 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-11 15:46 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-11 15:46 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-12-11 15:46 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-11 15:46 . 2013-11-12 02:07 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-12-11 15:45 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-11 15:45 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-11 15:45 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2013-12-11 15:45 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2013-12-11 15:45 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2013-12-11 15:45 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2013-12-11 15:45 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2013-12-11 15:45 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2013-12-11 15:45 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2013-12-11 15:45 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-08 04:22 . 2011-05-01 09:13 334136 ----a-w- c:\windows\system32\aswBoot.exe
2013-12-15 05:07 . 2011-03-02 21:53 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-11 18:07 . 2012-04-12 06:44 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-11 18:07 . 2011-12-13 19:44 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-26 19:25 . 2012-01-05 16:41 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-12 02:30 . 2013-11-22 03:13 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:29 . 2013-11-22 03:13 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:29 . 2013-11-22 03:13 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-12 02:03 . 2013-11-22 03:13 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-10-12 02:01 . 2013-11-22 03:13 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-13 98304]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"UCam_Menu"="c:\program files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-08 3764024]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2010-4-20 1083680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\windows\System32\IgrsSvcs.exe;c:\windows\SYSNATIVE\IgrsSvcs.exe [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBridge.sys;c:\windows\SYSNATIVE\drivers\WDBridge.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IGRS;IGRS;c:\program files (x86)\Lenovo\ReadyComm\common\IGRS.exe;c:\program files (x86)\Lenovo\ReadyComm\common\IGRS.exe [x]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
R3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe;c:\program files\Lenovo\ReadyComm\AppSvc.exe [x]
R3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\System32\IgrsSvcs.exe;c:\windows\SYSNATIVE\IgrsSvcs.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 602XML Updater;602Updater;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys;c:\windows\SYSNATIVE\DRIVERS\WDMirror.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter PS_MDP
<NO NAME> REG_SZ
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 05:59 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-08 04:22 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2010-10-21 00:44 1502720 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-20 10151968]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-04-20 908320]
"TpShocks"="c:\windows\System32\TpShocks.exe" [2010-03-15 231328]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\utility.exe" [2010-04-12 4462496]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\translator\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\translator\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\translator\WEBIE.DLL
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\radka\AppData\Roaming\Mozilla\Firefox\Profiles\va4qno99.default\
FF - ExtSQL: 2014-01-07 19:28; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-VisualBee for Microsoft PowerPoint - c:\users\radka\AppData\Local\VisualBeeExe\uninst.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-01-08 16:40:02
ComboFix-quarantined-files.txt 2014-01-08 23:40
.
Před spuštěním: Volných bajtů: 274 746 302 464
Po spuštění: Volných bajtů: 274 208 403 456
.
- - End Of File - - AF76F6B8A6E511F91D4845248826A42C
5C616939100B85E558DA92B899A0FC36

#32 Příspěvek od **Márty84** » 10 led 2014 10:12

Vypnete trvale Windows Defender.

Stahnete novy ComboFix (aby byla aktualni verze) a ulozte ho na plochu.

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

strata · #33 Příspěvek od **strata** » 10 led 2014 16:16

zdravim vas,
ok provedu, jen mi prosim napiste, jak vypnu Windows defender

diky

#34 Příspěvek od **Márty84** » 10 led 2014 22:28

http://windows.microsoft.com/cs-cz/wind ... =windows-7

strata · #35 Příspěvek od **strata** » 11 led 2014 05:36

zdravim,
a dopredu hlasim - pokud by to melo nejaky vliv, ze behem prace combofixu mi usnul ntb

po akci jsem opet zapnula defender - ok??

log zde:

ComboFix 14-01-08.03 - radka 10.01.2014 20:54:52.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2814.1683 [GMT -7:00]
Spuštěný z: c:\users\radka\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\radka\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-11 do 2014-01-11 )))))))))))))))))))))))))))))))
.
.
2014-01-11 04:11 . 2014-01-11 04:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-10 14:48 . 2013-12-16 08:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A30AD8E6-94E7-4A1D-9F19-D0D6518D78FC}\mpengine.dll
2014-01-08 04:22 . 2014-01-08 04:22 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-01-08 02:29 . 2014-01-08 02:29 -------- d-----w- c:\users\radka\AppData\Roaming\AVAST Software
2014-01-08 02:28 . 2014-01-08 04:22 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-01-08 02:28 . 2014-01-08 02:28 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-01-08 02:28 . 2014-01-08 04:22 422216 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-01-08 02:28 . 2014-01-08 04:22 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-01-08 02:28 . 2014-01-08 04:22 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-01-08 02:28 . 2014-01-08 02:27 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-01-08 02:27 . 2014-01-08 04:22 43152 ----a-w- c:\windows\avastSS.scr
2014-01-06 22:47 . 2014-01-06 22:47 -------- d-----w- c:\program files\Defraggler
2014-01-05 23:02 . 2014-01-06 16:14 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2014-01-05 23:01 . 2014-01-06 16:13 9728 ----a-w- c:\windows\system32\drivers\errdev.sys.bak
2014-01-04 23:04 . 2014-01-04 23:04 -------- d-----w- c:\users\radka\AppData\Roaming\Malwarebytes
2014-01-04 23:03 . 2014-01-04 23:03 -------- d-----w- c:\programdata\Malwarebytes
2013-12-25 17:55 . 2013-11-26 09:18 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-12-24 19:08 . 2013-10-15 01:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-12-23 19:32 . 2013-12-23 19:32 4558848 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-12-13 23:00 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-13 23:00 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-13 23:00 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-13 23:00 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-13 23:00 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-08 04:22 . 2011-05-01 09:13 334136 ----a-w- c:\windows\system32\aswBoot.exe
2013-12-15 05:07 . 2011-03-02 21:53 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-11 18:07 . 2012-04-12 06:44 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-11 18:07 . 2011-12-13 19:44 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-26 19:25 . 2012-01-05 16:41 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-11-23 18:26 . 2013-12-11 15:46 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 15:46 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-12 02:23 . 2013-12-11 15:46 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-11 15:46 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-10-30 02:32 . 2013-12-11 15:46 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-10-30 02:19 . 2013-12-11 15:46 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-10-30 01:24 . 2013-12-11 15:46 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-10-19 02:18 . 2013-12-11 15:46 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-10-19 01:36 . 2013-12-11 15:46 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-13 98304]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"UCam_Menu"="c:\program files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-08 3764024]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2010-4-20 1083680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\windows\System32\IgrsSvcs.exe;c:\windows\SYSNATIVE\IgrsSvcs.exe [x]
R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBridge.sys;c:\windows\SYSNATIVE\drivers\WDBridge.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IGRS;IGRS;c:\program files (x86)\Lenovo\ReadyComm\common\IGRS.exe;c:\program files (x86)\Lenovo\ReadyComm\common\IGRS.exe [x]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
R3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe;c:\program files\Lenovo\ReadyComm\AppSvc.exe [x]
R3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\System32\IgrsSvcs.exe;c:\windows\SYSNATIVE\IgrsSvcs.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 602XML Updater;602Updater;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys;c:\windows\SYSNATIVE\DRIVERS\WDMirror.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter PS_MDP
<NO NAME> REG_SZ
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 05:59 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-08 04:22 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2010-10-21 00:44 1502720 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-20 10151968]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-04-20 908320]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"TpShocks"="c:\windows\System32\TpShocks.exe" [2010-03-15 231328]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\utility.exe" [2010-04-12 4462496]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\translator\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\translator\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\translator\WEBIE.DLL
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\radka\AppData\Roaming\Mozilla\Firefox\Profiles\va4qno99.default\
FF - ExtSQL: 2014-01-07 19:28; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\atibtmon.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Celkový čas: 2014-01-10 21:24:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-01-11 04:24
ComboFix2.txt 2014-01-08 23:40
.
Před spuštěním: Volných bajtů: 265 520 943 104
Po spuštění: Volných bajtů: 265 242 075 136
.
- - End Of File - - FE71A93C267FD54B201E139D9BC82C32
5C616939100B85E558DA92B899A0FC36

#36 Příspěvek od **Márty84** » 11 led 2014 09:36

strata píše:a dopredu hlasim - pokud by to melo nejaky vliv, ze behem prace combofixu mi usnul ntb

No idealni to neni, ale podle logu to vliv nemelo

strata píše:po akci jsem opet zapnula defender - ok??

Ne, nechte ho vypnuty. Avast staci, zbytecne bezi dva stity a muzou se i ovlivnovat.

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

vyosek píše: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
Stahnete a spustte

Pro potvrzeni volby mackejte A, Enter

Po pouziti utilitu smazte

Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Dejte novy log z RSIT

strata · #37 Příspěvek od **strata** » 11 led 2014 23:54

pri pouziti t-cleaneru nasledujici hlaska:

v pocitaci byla nalezena slozka C:\windows\erdtn.
tato slozka je soucasti programu ERUNT slouziciho k zalohovani registru. Do pocitace se take integruje pouzitim combofixu a SDfixu
Pokud program nepouzivate, muze byt smazana.
Stisknete A pro smazani, N pro ponechani

#38 Příspěvek od **Márty84** » 12 led 2014 09:00

Pokud ten program ERUNT mate a pouzivate, nemazte to. Jestli to slysite poprve, smazte, je to soucast ComboFixu

strata · #39 Příspěvek od **strata** » 12 led 2014 14:31

novy log RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by radka at 2014-01-12 06:28:34
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 254 GB (59%) free of 432 GB
Total RAM: 2814 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:28:41, on 12.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\radka.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLATOR\WEBIE.DLL
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLATOR\WEBIE.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: PDFill PDF Editor - {FB858B22-55E2-413f-87F5-30ADC5552151} - C:\Program Files (x86)\PlotSoft\PDFill\DownloadPDF.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\windows\System32\TPHDEXLG64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9627 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
atieclxx
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\atibtmon.exe Global\Ati_VariBrightMonitorEvent
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 3324880
\??\C:\windows\system32\conhost.exe "-6845726631114519405-1440148124-670847173-1317509029-718587959-550993921-378396714
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
taskeng.exe {F4F13B87-CBD0-4F49-BC13-FFC0A3157386}
"taskhost.exe"
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\windows\system32\svchost.exe -k imgsvc
System32\TPHDEXLG64.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2232
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\radka\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-07 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-07 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-04 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-02 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-07 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-02 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-07 1372864]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-07 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\TRANSLATOR\WEBIE.DLL [2011-03-09 114688]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-07 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-04-20 10151968]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-04-20 908320]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"TpShocks"=C:\Windows\System32\TpShocks.exe [2010-03-15 231328]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2010-04-12 4462496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Energy Management]
C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2010-03-18 7056800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2010-12-03 141368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeriFaceManager]
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2010-10-20 3122528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirror Tray icon]
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2010-03-02 171104]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-01-13 98304]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2010-01-15 536576]
"UCam_Menu"=C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-07 3764024]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2014-01-12 06:28:34 ----D---- C:\rsit
2014-01-11 15:39:29 ----SHD---- C:\$RECYCLE.BIN
2014-01-11 15:37:21 ----SD---- C:\Uninstall
2014-01-10 21:11:41 ----D---- C:\windows\temp
2014-01-07 21:22:14 ----A---- C:\windows\system32\drivers\aswstm.sys
2014-01-07 19:29:36 ----D---- C:\Users\radka\AppData\Roaming\AVAST Software
2014-01-07 19:28:17 ----A---- C:\windows\system32\drivers\aswVmm.sys
2014-01-07 19:28:17 ----A---- C:\windows\system32\drivers\aswRvrt.sys
2014-01-07 19:28:16 ----A---- C:\windows\system32\drivers\aswSP.sys
2014-01-07 19:28:16 ----A---- C:\windows\system32\drivers\aswSnx.sys
2014-01-07 19:28:15 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2014-01-07 19:28:14 ----A---- C:\windows\system32\drivers\aswRdr2.sys
2014-01-07 19:23:37 ----D---- C:\Config.Msi
2014-01-06 15:47:29 ----D---- C:\Program Files\Defraggler
2014-01-05 16:03:07 ----A---- C:\windows\system32\drivers\WUDFRd.sys.bak
2014-01-05 16:03:07 ----A---- C:\windows\system32\drivers\WUDFPf.sys.bak
2014-01-05 16:03:06 ----A---- C:\windows\system32\drivers\wsvd.sys.bak
2014-01-05 16:03:06 ----A---- C:\windows\system32\drivers\ws2ifsl.sys.bak
2014-01-05 16:03:06 ----A---- C:\windows\system32\drivers\wmilib.sys.bak
2014-01-05 16:03:06 ----A---- C:\windows\system32\drivers\wmiacpi.sys.bak
2014-01-05 16:03:06 ----A---- C:\windows\system32\drivers\winusb.sys.bak
2014-01-05 16:03:05 ----A---- C:\windows\system32\drivers\wimmount.sys.bak
2014-01-05 16:03:05 ----A---- C:\windows\system32\drivers\WimFltr.sys.bak
2014-01-05 16:03:05 ----A---- C:\windows\system32\drivers\wfplwf.sys.bak
2014-01-05 16:03:05 ----A---- C:\windows\system32\drivers\WDMirror.sys.bak
2014-01-05 16:03:05 ----A---- C:\windows\system32\drivers\WdfLdr.sys.bak
2014-01-05 16:03:04 ----A---- C:\windows\system32\drivers\Wdf01000.sys.bak
2014-01-05 16:03:04 ----A---- C:\windows\system32\drivers\WDBridge.sys.bak
2014-01-05 16:03:04 ----A---- C:\windows\system32\drivers\wd.sys.bak
2014-01-05 16:03:04 ----A---- C:\windows\system32\drivers\watchdog.sys.bak
2014-01-05 16:03:03 ----A---- C:\windows\system32\drivers\wanarp.sys.bak
2014-01-05 16:03:03 ----A---- C:\windows\system32\drivers\wacompen.sys.bak
2014-01-05 16:03:03 ----A---- C:\windows\system32\drivers\vwifimp.sys.bak
2014-01-05 16:03:03 ----A---- C:\windows\system32\drivers\vwififlt.sys.bak
2014-01-05 16:03:03 ----A---- C:\windows\system32\drivers\vwifibus.sys.bak
2014-01-05 16:03:02 ----A---- C:\windows\system32\drivers\vsmraid.sys.bak
2014-01-05 16:03:02 ----A---- C:\windows\system32\drivers\volsnap.sys.bak
2014-01-05 16:03:02 ----A---- C:\windows\system32\drivers\volmgrx.sys.bak
2014-01-05 16:03:01 ----A---- C:\windows\system32\drivers\volmgr.sys.bak
2014-01-05 16:03:01 ----A---- C:\windows\system32\drivers\vm331avs.sys.bak
2014-01-05 16:03:01 ----A---- C:\windows\system32\drivers\videoprt.sys.bak
2014-01-05 16:03:01 ----A---- C:\windows\system32\drivers\viaide.sys.bak
2014-01-05 16:03:01 ----A---- C:\windows\system32\drivers\vhdmp.sys.bak
2014-01-05 16:03:00 ----A---- C:\windows\system32\drivers\vgapnp.sys.bak
2014-01-05 16:03:00 ----A---- C:\windows\system32\drivers\vga.sys.bak
2014-01-05 16:03:00 ----A---- C:\windows\system32\drivers\vdrvroot.sys.bak
2014-01-05 16:03:00 ----A---- C:\windows\system32\drivers\usbvideo.sys.bak
2014-01-05 16:02:59 ----A---- C:\windows\system32\drivers\usbuhci.sys.bak
2014-01-05 16:02:59 ----A---- C:\windows\system32\drivers\USBSTOR.SYS.bak
2014-01-05 16:02:59 ----A---- C:\windows\system32\drivers\usbser_lowerfltx64.sys.bak
2014-01-05 16:02:59 ----A---- C:\windows\system32\drivers\usbser_lowerfltjx64.sys.bak
2014-01-05 16:02:59 ----A---- C:\windows\system32\drivers\usbser.sys.bak
2014-01-05 16:02:58 ----A---- C:\windows\system32\drivers\usbrpm.sys.bak
2014-01-05 16:02:58 ----A---- C:\windows\system32\drivers\usbprint.sys.bak
2014-01-05 16:02:58 ----A---- C:\windows\system32\drivers\usbport.sys.bak
2014-01-05 16:02:58 ----A---- C:\windows\system32\drivers\usbohci.sys.bak
2014-01-05 16:02:57 ----A---- C:\windows\system32\drivers\usbhub.sys.bak
2014-01-05 16:02:57 ----A---- C:\windows\system32\drivers\usbehci.sys.bak
2014-01-05 16:02:57 ----A---- C:\windows\system32\drivers\usbd.sys.bak
2014-01-05 16:02:57 ----A---- C:\windows\system32\drivers\usbcir.sys.bak
2014-01-05 16:02:57 ----A---- C:\windows\system32\drivers\usbccgp.sys.bak
2014-01-05 16:02:56 ----A---- C:\windows\system32\drivers\USBCAMD2.sys.bak
2014-01-05 16:02:56 ----A---- C:\windows\system32\drivers\usb8023.sys.bak
2014-01-05 16:02:56 ----A---- C:\windows\system32\drivers\umpass.sys.bak
2014-01-05 16:02:56 ----A---- C:\windows\system32\drivers\umbus.sys.bak
2014-01-05 16:02:55 ----A---- C:\windows\system32\drivers\ULIAGPKX.SYS.bak
2014-01-05 16:02:55 ----A---- C:\windows\system32\drivers\udfs.sys.bak
2014-01-05 16:02:55 ----A---- C:\windows\system32\drivers\UAGP35.SYS.bak
2014-01-05 16:02:55 ----A---- C:\windows\system32\drivers\tunnel.sys.bak
2014-01-05 16:02:55 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys.bak
2014-01-05 16:02:54 ----A---- C:\windows\system32\drivers\tssecsrv.sys.bak
2014-01-05 16:02:54 ----A---- C:\windows\system32\drivers\termdd.sys.bak
2014-01-05 16:02:54 ----A---- C:\windows\system32\drivers\tdx.sys.bak
2014-01-05 16:02:54 ----A---- C:\windows\system32\drivers\tdtcp.sys.bak
2014-01-05 16:02:53 ----A---- C:\windows\system32\drivers\tdpipe.sys.bak
2014-01-05 16:02:53 ----A---- C:\windows\system32\drivers\tdi.sys.bak
2014-01-05 16:02:52 ----A---- C:\windows\system32\drivers\tcpipreg.sys.bak
2014-01-05 16:02:52 ----A---- C:\windows\system32\drivers\tcpip.sys.bak
2014-01-05 16:02:52 ----A---- C:\windows\system32\drivers\tape.sys.bak
2014-01-05 16:02:51 ----A---- C:\windows\system32\drivers\SynTP.sys.bak
2014-01-05 16:02:51 ----A---- C:\windows\system32\drivers\swenum.sys.bak
2014-01-05 16:02:51 ----A---- C:\windows\system32\drivers\stream.sys.bak
2014-01-05 16:02:51 ----A---- C:\windows\system32\drivers\storport.sys.bak
2014-01-05 16:02:51 ----A---- C:\windows\system32\drivers\stexstor.sys.bak
2014-01-05 16:02:50 ----A---- C:\windows\system32\drivers\srvnet.sys.bak
2014-01-05 16:02:50 ----A---- C:\windows\system32\drivers\srv2.sys.bak
2014-01-05 16:02:50 ----A---- C:\windows\system32\drivers\srv.sys.bak
2014-01-05 16:02:45 ----A---- C:\windows\system32\drivers\sptd.sys.bak
2014-01-05 16:02:44 ----A---- C:\windows\system32\drivers\spsys.sys.bak
2014-01-05 16:02:44 ----A---- C:\windows\system32\drivers\spldr.sys.bak
2014-01-05 16:02:44 ----A---- C:\windows\system32\drivers\smclib.sys.bak
2014-01-05 16:02:44 ----A---- C:\windows\system32\drivers\smb.sys.bak
2014-01-05 16:02:44 ----A---- C:\windows\system32\drivers\sisraid4.sys.bak
2014-01-05 16:02:43 ----A---- C:\windows\system32\drivers\sisraid2.sys.bak
2014-01-05 16:02:43 ----A---- C:\windows\system32\drivers\Sftvollh.sys.bak
2014-01-05 16:02:43 ----A---- C:\windows\system32\drivers\Sftredirlh.sys.bak
2014-01-05 16:02:42 ----A---- C:\windows\system32\drivers\Sftplaylh.sys.bak
2014-01-05 16:02:42 ----A---- C:\windows\system32\drivers\Sftfslh.sys.bak
2014-01-05 16:02:41 ----A---- C:\windows\system32\drivers\sfloppy.sys.bak
2014-01-05 16:02:41 ----A---- C:\windows\system32\drivers\sffp_sd.sys.bak
2014-01-05 16:02:41 ----A---- C:\windows\system32\drivers\sffp_mmc.sys.bak
2014-01-05 16:02:41 ----A---- C:\windows\system32\drivers\sffdisk.sys.bak
2014-01-05 16:02:41 ----A---- C:\windows\system32\drivers\sermouse.sys.bak
2014-01-05 16:02:40 ----A---- C:\windows\system32\drivers\serial.sys.bak
2014-01-05 16:02:40 ----A---- C:\windows\system32\drivers\serenum.sys.bak
2014-01-05 16:02:40 ----A---- C:\windows\system32\drivers\secdrv.sys.bak
2014-01-05 16:02:40 ----A---- C:\windows\system32\drivers\scsiport.sys.bak
2014-01-05 16:02:40 ----A---- C:\windows\system32\drivers\scfilter.sys.bak
2014-01-05 16:02:39 ----A---- C:\windows\system32\drivers\sbp2port.sys.bak
2014-01-05 16:02:38 ----A---- C:\windows\system32\drivers\RtsUStor.sys.bak
2014-01-05 16:02:38 ----A---- C:\windows\system32\drivers\RTKVHD64.sys.bak
2014-01-05 16:02:38 ----A---- C:\windows\system32\drivers\rspndr.sys.bak
2014-01-05 16:02:38 ----A---- C:\windows\system32\drivers\rootmdm.sys.bak
2014-01-05 16:02:37 ----A---- C:\windows\system32\drivers\RNDISMP.sys.bak
2014-01-05 16:02:37 ----A---- C:\windows\system32\drivers\rmcast.sys.bak
2014-01-05 16:02:37 ----A---- C:\windows\system32\drivers\rfcomm.sys.bak
2014-01-05 16:02:36 ----A---- C:\windows\system32\drivers\rdyboost.sys.bak
2014-01-05 16:02:36 ----A---- C:\windows\system32\drivers\rdpwd.sys.bak
2014-01-05 16:02:36 ----A---- C:\windows\system32\drivers\RDPREFMP.sys.bak
2014-01-05 16:02:36 ----A---- C:\windows\system32\drivers\RDPENCDD.sys.bak
2014-01-05 16:02:36 ----A---- C:\windows\system32\drivers\RDPCDD.sys.bak
2014-01-05 16:02:35 ----A---- C:\windows\system32\drivers\rdpbus.sys.bak
2014-01-05 16:02:35 ----A---- C:\windows\system32\drivers\rdbss.sys.bak
2014-01-05 16:02:35 ----A---- C:\windows\system32\drivers\rassstp.sys.bak
2014-01-05 16:02:35 ----A---- C:\windows\system32\drivers\raspptp.sys.bak
2014-01-05 16:02:34 ----A---- C:\windows\system32\drivers\raspppoe.sys.bak
2014-01-05 16:02:34 ----A---- C:\windows\system32\drivers\rasl2tp.sys.bak
2014-01-05 16:02:34 ----A---- C:\windows\system32\drivers\rasacd.sys.bak
2014-01-05 16:02:34 ----A---- C:\windows\system32\drivers\qwavedrv.sys.bak
2014-01-05 16:02:33 ----A---- C:\windows\system32\drivers\ql40xx.sys.bak
2014-01-05 16:02:33 ----A---- C:\windows\system32\drivers\ql2300.sys.bak
2014-01-05 16:02:33 ----A---- C:\windows\system32\drivers\processr.sys.bak
2014-01-05 16:02:32 ----A---- C:\windows\system32\drivers\portcls.sys.bak
2014-01-05 16:02:32 ----A---- C:\windows\system32\drivers\PEAuth.sys.bak
2014-01-05 16:02:32 ----A---- C:\windows\system32\drivers\pcw.sys.bak
2014-01-05 16:02:31 ----A---- C:\windows\system32\drivers\pcmcia.sys.bak
2014-01-05 16:02:31 ----A---- C:\windows\system32\drivers\pciidex.sys.bak
2014-01-05 16:02:31 ----A---- C:\windows\system32\drivers\pciide.sys.bak
2014-01-05 16:02:31 ----A---- C:\windows\system32\drivers\pci.sys.bak
2014-01-05 16:02:31 ----A---- C:\windows\system32\drivers\pccsmcfdx64.sys.bak
2014-01-05 16:02:30 ----A---- C:\windows\system32\drivers\partmgr.sys.bak
2014-01-05 16:02:30 ----A---- C:\windows\system32\drivers\parport.sys.bak
2014-01-05 16:02:30 ----A---- C:\windows\system32\drivers\pacer.sys.bak
2014-01-05 16:02:29 ----A---- C:\windows\system32\drivers\ohci1394.sys.bak
2014-01-05 16:02:29 ----A---- C:\windows\system32\drivers\nwifi.sys.bak
2014-01-05 16:02:29 ----A---- C:\windows\system32\drivers\nvstor.sys.bak
2014-01-05 16:02:29 ----A---- C:\windows\system32\drivers\NV_AGP.SYS.bak
2014-01-05 16:02:28 ----A---- C:\windows\system32\drivers\nvraid.sys.bak
2014-01-05 16:02:28 ----A---- C:\windows\system32\drivers\null.sys.bak
2014-01-05 16:02:28 ----A---- C:\windows\system32\drivers\ntfs.sys.bak
2014-01-05 16:02:27 ----A---- C:\windows\system32\drivers\nsiproxy.sys.bak
2014-01-05 16:02:27 ----A---- C:\windows\system32\drivers\npfs.sys.bak
2014-01-05 16:02:27 ----A---- C:\windows\system32\drivers\nmwcdnsux64.sys.bak
2014-01-05 16:02:27 ----A---- C:\windows\system32\drivers\NisDrvWFP.sys.bak
2014-01-05 16:02:25 ----A---- C:\windows\system32\drivers\nfrd960.sys.bak
2014-01-05 16:02:24 ----A---- C:\windows\system32\drivers\netw5v64.sys.bak
2014-01-05 16:02:23 ----A---- C:\windows\system32\drivers\netio.sys.bak
2014-01-05 16:02:23 ----A---- C:\windows\system32\drivers\netbt.sys.bak
2014-01-05 16:02:23 ----A---- C:\windows\system32\drivers\netbios.sys.bak
2014-01-05 16:02:23 ----A---- C:\windows\system32\drivers\ndproxy.sys.bak
2014-01-05 16:02:22 ----A---- C:\windows\system32\drivers\ndiswan.sys.bak
2014-01-05 16:02:22 ----A---- C:\windows\system32\drivers\ndisuio.sys.bak
2014-01-05 16:02:22 ----A---- C:\windows\system32\drivers\ndistapi.sys.bak
2014-01-05 16:02:21 ----A---- C:\windows\system32\drivers\ndiscap.sys.bak
2014-01-05 16:02:21 ----A---- C:\windows\system32\drivers\ndis.sys.bak
2014-01-05 16:02:21 ----A---- C:\windows\system32\drivers\mup.sys.bak
2014-01-05 16:02:21 ----A---- C:\windows\system32\drivers\MTConfig.sys.bak
2014-01-05 16:02:21 ----A---- C:\windows\system32\drivers\mstee.sys.bak
2014-01-05 16:02:20 ----A---- C:\windows\system32\drivers\mssmbios.sys.bak
2014-01-05 16:02:20 ----A---- C:\windows\system32\drivers\msrpc.sys.bak
2014-01-05 16:02:20 ----A---- C:\windows\system32\drivers\mspqm.sys.bak
2014-01-05 16:02:20 ----A---- C:\windows\system32\drivers\mspclock.sys.bak
2014-01-05 16:02:19 ----A---- C:\windows\system32\drivers\mskssrv.sys.bak
2014-01-05 16:02:19 ----A---- C:\windows\system32\drivers\msiscsi.sys.bak
2014-01-05 16:02:19 ----A---- C:\windows\system32\drivers\msisadrv.sys.bak
2014-01-05 16:02:19 ----A---- C:\windows\system32\drivers\mshidkmdf.sys.bak
2014-01-05 16:02:19 ----A---- C:\windows\system32\drivers\msfs.sys.bak
2014-01-05 16:02:18 ----A---- C:\windows\system32\drivers\msdsm.sys.bak
2014-01-05 16:02:18 ----A---- C:\windows\system32\drivers\msahci.sys.bak
2014-01-05 16:02:18 ----A---- C:\windows\system32\drivers\mrxsmb20.sys.bak
2014-01-05 16:02:18 ----A---- C:\windows\system32\drivers\mrxsmb10.sys.bak
2014-01-05 16:02:17 ----A---- C:\windows\system32\drivers\mrxsmb.sys.bak
2014-01-05 16:02:17 ----A---- C:\windows\system32\drivers\mrxdav.sys.bak
2014-01-05 16:02:17 ----A---- C:\windows\system32\drivers\mpsdrv.sys.bak
2014-01-05 16:02:17 ----A---- C:\windows\system32\drivers\mpio.sys.bak
2014-01-05 16:02:16 ----A---- C:\windows\system32\drivers\MpFilter.sys.bak
2014-01-05 16:02:16 ----A---- C:\windows\system32\drivers\mountmgr.sys.bak
2014-01-05 16:02:16 ----A---- C:\windows\system32\drivers\mouhid.sys.bak
2014-01-05 16:02:16 ----A---- C:\windows\system32\drivers\mouclass.sys.bak
2014-01-05 16:02:15 ----A---- C:\windows\system32\drivers\monitor.sys.bak
2014-01-05 16:02:15 ----A---- C:\windows\system32\drivers\modem.sys.bak
2014-01-05 16:02:15 ----A---- C:\windows\system32\drivers\MegaSR.sys.bak
2014-01-05 16:02:14 ----A---- C:\windows\system32\drivers\megasas.sys.bak
2014-01-05 16:02:14 ----A---- C:\windows\system32\drivers\mcd.sys.bak
2014-01-05 16:02:14 ----A---- C:\windows\system32\drivers\luafv.sys.bak
2014-01-05 16:02:14 ----A---- C:\windows\system32\drivers\lsi_scsi.sys.bak
2014-01-05 16:02:14 ----A---- C:\windows\system32\drivers\lsi_sas2.sys.bak
2014-01-05 16:02:13 ----A---- C:\windows\system32\drivers\lsi_sas.sys.bak
2014-01-05 16:02:13 ----A---- C:\windows\system32\drivers\lsi_fc.sys.bak
2014-01-05 16:02:13 ----A---- C:\windows\system32\drivers\lltdio.sys.bak
2014-01-05 16:02:13 ----A---- C:\windows\system32\drivers\LhdX64.sys.bak
2014-01-05 16:02:13 ----A---- C:\windows\system32\drivers\L1C62x64.sys.bak
2014-01-05 16:02:12 ----A---- C:\windows\system32\drivers\ksthunk.sys.bak
2014-01-05 16:02:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys.bak
2014-01-05 16:02:12 ----A---- C:\windows\system32\drivers\ksecdd.sys.bak
2014-01-05 16:02:12 ----A---- C:\windows\system32\drivers\ks.sys.bak
2014-01-05 16:02:11 ----A---- C:\windows\system32\drivers\kbdhid.sys.bak
2014-01-05 16:02:11 ----A---- C:\windows\system32\drivers\kbdclass.sys.bak
2014-01-05 16:02:11 ----A---- C:\windows\system32\drivers\k57nd60a.sys.bak
2014-01-05 16:02:11 ----A---- C:\windows\system32\drivers\isapnp.sys.bak
2014-01-05 16:02:10 ----A---- C:\windows\system32\drivers\irenum.sys.bak
2014-01-05 16:02:10 ----A---- C:\windows\system32\drivers\irda.sys.bak
2014-01-05 16:02:10 ----A---- C:\windows\system32\drivers\ipnat.sys.bak
2014-01-05 16:02:10 ----A---- C:\windows\system32\drivers\IPMIDrv.sys.bak
2014-01-05 16:02:09 ----A---- C:\windows\system32\drivers\ipfltdrv.sys.bak
2014-01-05 16:02:09 ----A---- C:\windows\system32\drivers\intelppm.sys.bak
2014-01-05 16:02:09 ----A---- C:\windows\system32\drivers\intelide.sys.bak
2014-01-05 16:02:08 ----A---- C:\windows\system32\drivers\iirsp.sys.bak
2014-01-05 16:02:07 ----A---- C:\windows\system32\drivers\igdkmd64.sys.bak
2014-01-05 16:02:06 ----A---- C:\windows\system32\drivers\iaStorV.sys.bak
2014-01-05 16:02:06 ----A---- C:\windows\system32\drivers\i8042prt.sys.bak
2014-01-05 16:02:06 ----A---- C:\windows\system32\drivers\hwpolicy.sys.bak
2014-01-05 16:02:05 ----A---- C:\windows\system32\drivers\http.sys.bak
2014-01-05 16:02:05 ----A---- C:\windows\system32\drivers\HpSAMD.sys.bak
2014-01-05 16:02:05 ----A---- C:\windows\system32\drivers\hidusb.sys.bak
2014-01-05 16:02:05 ----A---- C:\windows\system32\drivers\hidparse.sys.bak
2014-01-05 16:02:04 ----A---- C:\windows\system32\drivers\hidir.sys.bak
2014-01-05 16:02:04 ----A---- C:\windows\system32\drivers\hidclass.sys.bak
2014-01-05 16:02:04 ----A---- C:\windows\system32\drivers\hidbth.sys.bak
2014-01-05 16:02:04 ----A---- C:\windows\system32\drivers\hidbatt.sys.bak
2014-01-05 16:02:04 ----A---- C:\windows\system32\drivers\HdAudio.sys.bak
2014-01-05 16:02:03 ----A---- C:\windows\system32\drivers\hdaudbus.sys.bak
2014-01-05 16:02:03 ----A---- C:\windows\system32\drivers\hcw85cir.sys.bak
2014-01-05 16:02:03 ----A---- C:\windows\system32\drivers\GAGP30KX.SYS.bak
2014-01-05 16:02:03 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS.bak
2014-01-05 16:02:02 ----A---- C:\windows\system32\drivers\fvevol.sys.bak
2014-01-05 16:02:02 ----A---- C:\windows\system32\drivers\fsdepends.sys.bak
2014-01-05 16:02:02 ----A---- C:\windows\system32\drivers\fs_rec.sys.bak
2014-01-05 16:02:02 ----A---- C:\windows\system32\drivers\fltMgr.sys.bak
2014-01-05 16:02:01 ----A---- C:\windows\system32\drivers\flpydisk.sys.bak
2014-01-05 16:02:01 ----A---- C:\windows\system32\drivers\filetrace.sys.bak
2014-01-05 16:02:01 ----A---- C:\windows\system32\drivers\fileinfo.sys.bak
2014-01-05 16:02:01 ----A---- C:\windows\system32\drivers\fdc.sys.bak
2014-01-05 16:02:00 ----A---- C:\windows\system32\drivers\fastfat.sys.bak
2014-01-05 16:02:00 ----A---- C:\windows\system32\drivers\exfat.sys.bak
2014-01-05 16:01:59 ----A---- C:\windows\system32\drivers\evbda.sys.bak
2014-01-05 16:01:59 ----A---- C:\windows\system32\drivers\errdev.sys.bak
2014-01-05 16:01:58 ----A---- C:\windows\system32\drivers\elxstor.sys.bak
2014-01-05 16:01:58 ----A---- C:\windows\system32\drivers\dxgmms1.sys.bak
2014-01-05 16:01:57 ----A---- C:\windows\system32\drivers\dxgkrnl.sys.bak
2014-01-05 16:01:57 ----A---- C:\windows\system32\drivers\dxg.sys.bak
2014-01-05 16:01:57 ----A---- C:\windows\system32\drivers\dxapi.sys.bak
2014-01-05 16:01:57 ----A---- C:\windows\system32\drivers\dumpfve.sys.bak
2014-01-05 16:01:57 ----A---- C:\windows\system32\drivers\Dumpata.sys.bak
2014-01-05 16:01:56 ----A---- C:\windows\system32\drivers\drmkaud.sys.bak
2014-01-05 16:01:56 ----A---- C:\windows\system32\drivers\drmk.sys.bak
2014-01-05 16:01:56 ----A---- C:\windows\system32\drivers\Diskdump.sys.bak
2014-01-05 16:01:56 ----A---- C:\windows\system32\drivers\disk.sys.bak
2014-01-05 16:01:56 ----A---- C:\windows\system32\drivers\discache.sys.bak
2014-01-05 16:01:55 ----A---- C:\windows\system32\drivers\dfsc.sys.bak
2014-01-05 16:01:55 ----A---- C:\windows\system32\drivers\crcdisk.sys.bak
2014-01-05 16:01:55 ----A---- C:\windows\system32\drivers\crashdmp.sys.bak
2014-01-05 16:01:55 ----A---- C:\windows\system32\drivers\CompositeBus.sys.bak
2014-01-05 16:01:55 ----A---- C:\windows\system32\drivers\compbatt.sys.bak
2014-01-05 16:01:54 ----A---- C:\windows\system32\drivers\cng.sys.bak
2014-01-05 16:01:54 ----A---- C:\windows\system32\drivers\cmdide.sys.bak
2014-01-05 16:01:54 ----A---- C:\windows\system32\drivers\CmBatt.sys.bak
2014-01-05 16:01:54 ----A---- C:\windows\system32\drivers\Classpnp.sys.bak
2014-01-05 16:01:54 ----A---- C:\windows\system32\drivers\circlass.sys.bak
2014-01-05 16:01:53 ----A---- C:\windows\system32\drivers\cdrom.sys.bak
2014-01-05 16:01:53 ----A---- C:\windows\system32\drivers\cdfs.sys.bak
2014-01-05 16:01:53 ----A---- C:\windows\system32\drivers\ccdcmbx64.sys.bak
2014-01-05 16:01:53 ----A---- C:\windows\system32\drivers\ccdcmbox64.sys.bak
2014-01-05 16:01:52 ----A---- C:\windows\system32\drivers\bxvbda.sys.bak
2014-01-05 16:01:52 ----A---- C:\windows\system32\drivers\btwrchid.sys.bak
2014-01-05 16:01:52 ----A---- C:\windows\system32\drivers\btwl2cap.sys.bak
2014-01-05 16:01:52 ----A---- C:\windows\system32\drivers\btwavdt.sys.bak
2014-01-05 16:01:51 ----A---- C:\windows\system32\drivers\btwaudio.sys.bak
2014-01-05 16:01:51 ----A---- C:\windows\system32\drivers\btusbflt.sys.bak
2014-01-05 16:01:51 ----A---- C:\windows\system32\drivers\BTHUSB.SYS.bak
2014-01-05 16:01:50 ----A---- C:\windows\system32\drivers\bthport.sys.bak
2014-01-05 16:01:50 ----A---- C:\windows\system32\drivers\bthpan.sys.bak
2014-01-05 16:01:50 ----A---- C:\windows\system32\drivers\bthmodem.sys.bak
2014-01-05 16:01:50 ----A---- C:\windows\system32\drivers\bthenum.sys.bak
2014-01-05 16:01:50 ----A---- C:\windows\system32\drivers\BrUsbSer.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\BrUsbMdm.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\BrSerWdm.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\BrSerId.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\bridge.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\BrFiltUp.sys.bak
2014-01-05 16:01:49 ----A---- C:\windows\system32\drivers\BrFiltLo.sys.bak
2014-01-05 16:01:48 ----A---- C:\windows\system32\drivers\bowser.sys.bak
2014-01-05 16:01:48 ----A---- C:\windows\system32\drivers\blbdrive.sys.bak
2014-01-05 16:01:47 ----A---- C:\windows\system32\drivers\beep.sys.bak
2014-01-05 16:01:47 ----A---- C:\windows\system32\drivers\BCMWL664.SYS.bak
2014-01-05 16:01:46 ----A---- C:\windows\system32\drivers\battc.sys.bak
2014-01-05 16:01:45 ----A---- C:\windows\system32\drivers\b57nd60a.sys.bak
2014-01-05 16:01:44 ----A---- C:\windows\system32\drivers\atipmdag.sys.bak
2014-01-05 16:01:44 ----A---- C:\windows\system32\drivers\AtiPcie.sys.bak
2014-01-05 16:01:43 ----A---- C:\windows\system32\drivers\atikmpag.sys.bak
2014-01-05 16:01:42 ----A---- C:\windows\system32\drivers\atikmdag.sys.bak
2014-01-05 16:01:41 ----A---- C:\windows\system32\drivers\AtiHdmi.sys.bak
2014-01-05 16:01:41 ----A---- C:\windows\system32\drivers\ataport.sys.bak
2014-01-05 16:01:41 ----A---- C:\windows\system32\drivers\atapi.sys.bak
2014-01-05 16:01:41 ----A---- C:\windows\system32\drivers\asyncmac.sys.bak
2014-01-05 16:01:40 ----A---- C:\windows\system32\drivers\arcsas.sys.bak
2014-01-05 16:01:40 ----A---- C:\windows\system32\drivers\arc.sys.bak
2014-01-05 16:01:40 ----A---- C:\windows\system32\drivers\ApsX64.sys.bak
2014-01-05 16:01:40 ----A---- C:\windows\system32\drivers\ApsHM64.sys.bak
2014-01-05 16:01:40 ----A---- C:\windows\system32\drivers\appid.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdxata.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdsbs.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdsata.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdppm.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdk8.sys.bak
2014-01-05 16:01:39 ----A---- C:\windows\system32\drivers\amdide.sys.bak
2014-01-05 16:01:38 ----A---- C:\windows\system32\drivers\aliide.sys.bak
2014-01-05 16:01:38 ----A---- C:\windows\system32\drivers\AGP440.sys.bak
2014-01-05 16:01:38 ----A---- C:\windows\system32\drivers\agilevpn.sys.bak
2014-01-05 16:01:38 ----A---- C:\windows\system32\drivers\afd.sys.bak
2014-01-05 16:01:38 ----A---- C:\windows\system32\drivers\adpu320.sys.bak
2014-01-05 16:01:37 ----A---- C:\windows\system32\drivers\adpahci.sys.bak
2014-01-05 16:01:37 ----A---- C:\windows\system32\drivers\adp94xx.sys.bak
2014-01-05 16:01:37 ----A---- C:\windows\system32\drivers\AcpiVpc.sys.bak
2014-01-05 16:01:37 ----A---- C:\windows\system32\drivers\acpipmi.sys.bak
2014-01-05 16:01:37 ----A---- C:\windows\system32\drivers\acpi.sys.bak
2014-01-05 16:01:36 ----A---- C:\windows\system32\drivers\1394ohci.sys.bak
2014-01-05 16:01:36 ----A---- C:\windows\system32\drivers\1394bus.sys.bak
2014-01-04 16:04:21 ----D---- C:\Users\radka\AppData\Roaming\Malwarebytes
2014-01-04 16:03:54 ----D---- C:\ProgramData\Malwarebytes
2013-12-25 10:56:04 ----A---- C:\windows\system32\ieetwcollectorres.dll
2013-12-25 10:56:01 ----A---- C:\windows\system32\ieui.dll
2013-12-25 10:56:00 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-12-25 10:56:00 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-12-25 10:56:00 ----A---- C:\windows\system32\jsproxy.dll
2013-12-25 10:55:59 ----A---- C:\windows\system32\ieUnatt.exe
2013-12-25 10:55:58 ----A---- C:\windows\system32\iesetup.dll
2013-12-25 10:55:58 ----A---- C:\windows\system32\iernonce.dll
2013-12-25 10:55:58 ----A---- C:\windows\system32\ie4uinit.exe
2013-12-25 10:55:57 ----A---- C:\windows\system32\ieetwproxystub.dll
2013-12-25 10:55:56 ----A---- C:\windows\system32\ieetwcollector.exe
2013-12-25 10:55:55 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2013-12-25 10:55:55 ----A---- C:\windows\system32\mshtml.dll
2013-12-25 10:55:55 ----A---- C:\windows\system32\jscript9diag.dll
2013-12-25 10:55:54 ----A---- C:\windows\system32\ieapfltr.dll
2013-12-25 10:55:53 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-12-25 10:55:52 ----A---- C:\windows\system32\iertutil.dll
2013-12-25 10:55:51 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-12-25 10:55:51 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-12-25 10:55:50 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-12-25 10:55:50 ----A---- C:\windows\system32\wininet.dll
2013-12-25 10:55:49 ----A---- C:\windows\system32\urlmon.dll
2013-12-25 10:55:45 ----A---- C:\windows\system32\ieframe.dll
2013-12-25 10:55:43 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-12-25 10:55:42 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-12-25 10:55:41 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-12-25 10:55:40 ----A---- C:\windows\system32\jscript9.dll
2013-12-24 12:08:34 ----A---- C:\windows\system32\IEUDINIT.EXE
2013-12-24 11:57:58 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-12-24 11:57:58 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-24 11:57:48 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-12-24 11:57:48 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-12-24 11:57:48 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-12-24 11:57:48 ----A---- C:\windows\SYSWOW64\jsIntl.dll
2013-12-24 11:57:48 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2013-12-24 11:57:48 ----A---- C:\windows\system32\elshyph.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\url.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-12-24 11:57:47 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\occache.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-12-24 11:57:46 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2013-12-24 11:57:45 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-12-24 11:57:45 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-12-24 11:57:45 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-12-24 11:57:45 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-12-24 11:57:44 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-12-24 11:57:44 ----A---- C:\windows\system32\msls31.dll
2013-12-24 11:57:44 ----A---- C:\windows\system32\jsIntl.dll
2013-12-24 11:57:43 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-12-24 11:57:43 ----A---- C:\windows\system32\msrating.dll
2013-12-24 11:57:43 ----A---- C:\windows\system32\mshtmler.dll
2013-12-24 11:57:43 ----A---- C:\windows\system32\msfeedssync.exe
2013-12-24 11:57:43 ----A---- C:\windows\system32\msfeedsbs.dll
2013-12-24 11:57:43 ----A---- C:\windows\system32\iesysprep.dll
2013-12-24 11:57:43 ----A---- C:\windows\system32\IEAdvpack.dll
2013-12-24 11:57:42 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\webcheck.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\url.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\licmgr10.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\iedkcs32.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\icardie.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\dxtrans.dll
2013-12-24 11:57:41 ----A---- C:\windows\system32\dxtmsft.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\wextract.exe
2013-12-24 11:57:40 ----A---- C:\windows\system32\vbscript.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\pngfilt.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\occache.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\mshtmled.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\msfeeds.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\inseng.dll
2013-12-24 11:57:40 ----A---- C:\windows\system32\iexpress.exe
2013-12-24 11:57:39 ----A---- C:\windows\system32\MshtmlDac.dll
2013-12-24 11:57:39 ----A---- C:\windows\system32\mshta.exe
2013-12-24 11:57:39 ----A---- C:\windows\system32\jscript.dll
2013-12-24 11:57:39 ----A---- C:\windows\system32\imgutil.dll
2013-12-24 11:57:39 ----A---- C:\windows\system32\iepeers.dll
2013-12-13 16:00:11 ----A---- C:\windows\system32\wmploc.DLL
2013-12-13 16:00:08 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2013-12-13 16:00:07 ----A---- C:\windows\SYSWOW64\wmp.dll
2013-12-13 16:00:02 ----A---- C:\windows\system32\wmp.dll

======List of files/folders modified in the last 1 months======

2014-01-12 06:28:39 ----D---- C:\Program Files\trend micro
2014-01-12 06:25:42 ----D---- C:\windows\Prefetch
2014-01-12 06:25:39 ----D---- C:\windows\system32\config
2014-01-12 06:23:08 ----D---- C:\Windows
2014-01-11 20:44:22 ----D---- C:\windows\System32
2014-01-11 20:44:22 ----D---- C:\windows\inf
2014-01-11 20:44:22 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-01-11 19:46:37 ----D---- C:\Users\radka\AppData\Roaming\vlc
2014-01-11 19:23:49 ----D---- C:\Users\radka\AppData\Roaming\Skype
2014-01-11 15:37:30 ----SHD---- C:\System Volume Information
2014-01-11 15:34:48 ----D---- C:\windows\system32\drivers
2014-01-10 21:14:39 ----A---- C:\windows\system.ini
2014-01-10 21:14:18 ----D---- C:\windows\system32\drivers\etc
2014-01-10 21:05:43 ----D---- C:\windows\SYSWOW64\drivers
2014-01-10 21:05:43 ----D---- C:\windows\SysWOW64
2014-01-10 21:05:43 ----D---- C:\windows\AppPatch
2014-01-10 21:05:40 ----D---- C:\Program Files (x86)\Common Files
2014-01-08 17:08:13 ----D---- C:\Users\radka\AppData\Roaming\Media Player Classic
2014-01-07 21:22:18 ----D---- C:\windows\system32\Tasks
2014-01-07 21:22:08 ----A---- C:\windows\system32\aswBoot.exe
2014-01-07 19:28:06 ----D---- C:\windows\winsxs
2014-01-07 19:24:43 ----D---- C:\ProgramData\AVAST Software
2014-01-07 19:24:05 ----SHD---- C:\windows\Installer
2014-01-07 19:24:05 ----RD---- C:\Program Files
2014-01-07 19:23:55 ----RD---- C:\Program Files (x86)
2014-01-06 14:56:58 ----D---- C:\windows\Globalization
2014-01-06 14:56:51 ----D---- C:\windows\Tasks
2014-01-04 16:03:54 ----D---- C:\ProgramData
2014-01-03 19:39:48 ----D---- C:\Radka
2014-01-01 09:18:10 ----D---- C:\windows\system32\catroot2
2013-12-25 11:06:38 ----D---- C:\Program Files\Internet Explorer
2013-12-25 11:06:38 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-25 10:57:06 ----D---- C:\windows\system32\catroot
2013-12-24 13:55:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-12-24 13:55:46 ----D---- C:\windows\system32\cs-CZ
2013-12-24 13:55:42 ----D---- C:\windows\SYSWOW64\migration
2013-12-24 13:55:41 ----D---- C:\windows\SYSWOW64\en-US
2013-12-24 13:55:37 ----D---- C:\windows\system32\migration
2013-12-24 13:55:37 ----D---- C:\windows\PolicyDefinitions
2013-12-24 13:55:35 ----D---- C:\windows\system32\en-US
2013-12-24 12:08:34 ----D---- C:\windows\Logs
2013-12-16 23:15:16 ----D---- C:\windows\debug
2013-12-14 22:24:16 ----D---- C:\windows\system32\MRT
2013-12-14 22:07:00 ----A---- C:\windows\system32\MRT.exe
2013-12-13 16:19:19 ----D---- C:\Program Files\Windows Media Player
2013-12-13 16:19:19 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-13 16:19:15 ----D---- C:\windows\system32\DriverStore
2013-12-13 15:54:21 ----D---- C:\ProgramData\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-01-07 65776]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-01-07 207904]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2010-01-15 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 Shockprf;Shockprf; C:\windows\System32\DRIVERS\Apsx64.sys [2009-12-09 135264]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2013-03-15 564824]
R0 TPDIGIMN;TPDIGIMN; C:\windows\System32\DRIVERS\ApsHM64.sys [2009-12-09 23648]
R1 aswRdr;aswRdr; \??\C:\windows\system32\drivers\aswRdr2.sys [2014-01-07 92544]
R1 aswSnx;aswSnx; \??\C:\windows\system32\drivers\aswSnx.sys [2014-01-07 1034464]
R1 aswSP;aswSP; \??\C:\windows\system32\drivers\aswSP.sys [2014-01-07 422216]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 59904]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2014-01-07 78648]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-18 28176]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atipmdag.sys [2010-01-13 6327296]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2010-01-13 185344]
R3 aswStm;aswStm; \??\C:\windows\system32\drivers\aswStm.sys [2014-01-07 79672]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2010-01-28 116736]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-02-02 3058168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-04-20 2350240]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-02-22 75304]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 vm331avs;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2010-01-26 214912]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11280]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-15 79376]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-13 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-13 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-13 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-27 80384]
S3 btusbflt;Bluetooth USB Filter; C:\windows\system32\drivers\btusbflt.sys [2010-04-08 54824]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-01-14 98344]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-01-14 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-01-14 21288]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmbx64.sys [2012-11-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbox64.sys [2012-11-09 27136]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\windows\system32\drivers\nmwcdnsux64.sys [2012-11-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-13 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-13 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-11-11 232480]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-11-09 9216]
S3 usbser;USB Modem Driver; C:\windows\system32\drivers\usbser.sys [2013-08-28 33280]
S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-11-09 9216]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 151656]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2010-01-13 202752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-07 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-04-20 903456]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\windows\System32\TPHDEXLG64.exe [2009-12-09 47712]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 IGRS;IGRS; C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-11-17 575304]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-11 129976]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-19 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-03-02 1255736]

-----------------EOF-----------------

#40 Příspěvek od **Márty84** » 12 led 2014 15:11

Log je cisty. Co pocitac, nastala nejaka zmena?

strata · #41 Příspěvek od **strata** » 12 led 2014 23:32

az na firefox, ktery je hodne pomaly a cca od predevcira pomerne casto hlasi
"Skript na této stránce je buď zaneprázdněn nebo přestal reagovat. Nyní můžete skript ukončit nebo počkat, zda se dokončí sám."
chodi vse ok.
jakmile ale spustim net, jde pomalu vse.

#42 Příspěvek od **Márty84** » 13 led 2014 14:47

Firefox preinstalujte. Pokud nechcete prijit o zalozky, muzete si je zazalohovat pomoci mozbackup http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/

strata píše:jakmile ale spustim net, jde pomalu vse.

Jakykoliv prohlizec? Nebo ani nemusi byt prohlizec zapnuty, ale staci treba skype, nebo icq, nebo neco takoveho?

strata · #43 Příspěvek od **strata** » 13 led 2014 15:49

kdyz spustim firefox.
skype is ok

#44 Příspěvek od **Márty84** » 13 led 2014 19:29

I po te preinstalaci to dela? Kdyz pouzijete treba Chrome, nebo IE, taky je to vsechno zpomalene?

strata · #45 Příspěvek od **strata** » 21 led 2014 18:43

zdravim,
vse ok

diky moc za pomoc, a prosim o uzavreni tematu.

VIRY.CZ

prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb

Re: prosim o kontrolu - zpomaleny ntb