Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Nikolak
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 10 Dub 2014 09:35

Prosím o kontrolu logu

#1 Příspěvek od Nikolak »

Ahoj, vyskočilo mi okno viru Policie ČR. Restartovala jsem a projela AVG a Malwarebytes Anti-Malware. Plus po skenu AVG mi ihned po spuštění začal vyskakovat error: Při spuštění souboru C:\Users\Niky\AppData\Roaming\newnext.me\nengine.dll došlo k problému. Uvedený modul nebyl nalezen.
Tak bych moc poprosila o kontrolu logu, zda je to čisté.
Win 7 64x
Díky moc za pomoc.

LOG:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Niky at 2014-04-10 10:18:12
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 280 GB (61%) free of 462 GB
Total RAM: 3895 MB (44% free)


======Listing Processes======

\SystemRoot\System32\smss.exe
C:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=94512d1f-eacd-4061-aa61-d565a46c3a17 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\d148aa24-8c94-4703-84d0-d07079851504-160-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 37324240
\??\C:\Windows\system32\conhost.exe "566881271815093513774522-1576117449844160636-11616766011148577723987323355
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\SysWOW64\rundll32.exe" "C:\Users\Niky\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe"
"C:\Users\Niky\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4420.0.1714117767\419105225" --disable-image-transport-surface --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,27 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2342 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.2.1854246237\1097048362" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.5.738781339\612136784" /prefetch:673131151
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.8.1365771953\491351522" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4420.9.1384250746\108111056" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.10.977083984\412916342" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.11.1548999821\277854529" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.12.712885003\945564732" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.13.676687009\943710815" /prefetch:673131151
"C:\Users\Niky\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/EnableZeroSuggestMostVisited_R7_Stable_Experiment/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_85/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-accelerated-video-decode --enable-software-compositing --channel="4420.17.112341226\1877497191" /prefetch:673131151
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Niky\Documents\odvirov.txt
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Niky\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-705884046-4236463535-1927204500-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-705884046-4236463535-1927204500-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\2pb7s7y6.default

prefs.js - "browser.startup.homepage" - "http://www.searchya.com/?s=0&a=foxtab&c ... =247650275"
prefs.js - "keyword.URL" - "http://search.babylon.com/?affID=113480 ... de71d9f&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\2pb7s7y6.default\extensions\
AppGraffiti@AppGraffiti.com
crossriderapp2258@crossrider.com
ffxtlbr@searchya.com
{E71B541F-5E72-5555-A47C-E47863195841}

C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\2pb7s7y6.default\searchplugins\
Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll [2014-01-16 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158}]
I Want This - C:\Program Files (x86)\I Want This\I Want This.dll [2012-05-15 493440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25927741-5E5B-4D27-8D8B-9188FE64373F}]
Ironsource LTD Helper Object - C:\PROGRA~2\SearchYa!\1.5.25.0\bh\searchya.dll [2012-09-29 268904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll [2011-08-14 270960]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]
AppGraffiti - C:\PROGRA~2\APPGRA~1\APPGRA~1.DLL [2013-12-03 1038504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll [2011-08-14 237680]
{33AA308B-B565-4376-AC66-59EE9B6AD13E} - SearchYa Toolbar - C:\PROGRA~2\SearchYa!\1.5.25.0\searchyaTlbr.dll [2012-09-29 286824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-29 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-29 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-29 418840]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-03-16 1128448]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2012-05-29 6476288]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"VDownloader"=C:\Program Files\VDownloader\VDownloader.exe [2014-01-28 882176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Niky\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-30 116648]
"AGupdate"=C:\Program Files (x86)\AppGraffiti\AGupdate.exe [2013-03-19 894048]
"NextLive"=C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2010-08-11 487561]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-03-19 4971024]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe

C:\Users\Niky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Niky\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-10 10:18:13 ----D---- C:\Program Files\trend micro
2014-04-10 10:18:12 ----D---- C:\rsit
2014-04-10 09:19:05 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-04-10 09:18:32 ----D---- C:\ProgramData\Malwarebytes
2014-04-10 09:18:32 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-04-10 09:05:32 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-04-10 09:05:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-04-10 09:05:32 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-04-10 09:05:32 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-04-10 09:05:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-04-10 09:05:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-04-10 09:05:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-04-10 09:05:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-04-10 09:05:29 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-04-10 09:05:29 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-04-10 09:05:27 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-04-10 09:05:27 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-04-10 09:05:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-04-10 09:05:22 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-04-10 09:05:16 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-04-10 09:05:16 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-04-10 09:05:15 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-04-10 09:05:15 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-04-10 09:05:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-04-10 09:05:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-04-10 09:05:13 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-04-10 09:05:13 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-04-10 09:05:08 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-04-10 09:05:08 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-04-10 09:05:05 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-04-10 09:05:05 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-04-10 09:05:04 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-04-10 09:05:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-04-10 09:05:03 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-04-10 09:05:03 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-04-10 09:05:03 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-04-10 09:05:02 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-04-10 09:05:02 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-04-10 09:05:01 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-04-10 09:05:01 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-04-10 09:05:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-04-10 09:05:00 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-04-10 09:04:58 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-04-10 09:04:57 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-04-10 09:04:57 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-04-10 09:04:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-04-10 09:04:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-04-10 09:04:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-04-10 09:04:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-04-10 09:04:54 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-04-10 09:04:54 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-04-10 09:04:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-04-10 09:04:53 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-04-10 09:04:52 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-04-10 09:04:51 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-04-10 09:04:51 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-04-10 09:04:50 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-04-10 09:04:50 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-04-10 09:04:49 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-04-10 09:04:45 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-04-10 09:04:45 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-04-10 09:04:42 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-04-10 09:04:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-04-10 09:04:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-04-10 09:04:36 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-04-10 09:04:36 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-04-10 09:04:34 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-04-10 09:04:32 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-04-10 09:04:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-04-10 09:04:31 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-04-10 09:04:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-04-10 09:04:31 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-04-10 09:04:31 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-04-10 09:04:30 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-04-10 09:04:29 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-04-10 09:04:29 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-04-10 09:04:28 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-04-10 09:04:28 ----A---- C:\Windows\system32\xinput1_3.dll
2014-04-10 09:04:23 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-04-10 09:04:23 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-04-10 09:04:22 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-04-10 09:04:20 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-04-10 09:04:20 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-04-10 09:04:15 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-04-10 09:04:15 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-04-10 09:04:09 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-04-10 09:04:09 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-04-10 09:04:08 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-04-10 09:04:08 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-04-10 09:04:08 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-04-10 09:04:08 ----A---- C:\Windows\system32\d3dx10.dll
2014-04-10 09:04:04 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-04-10 09:04:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-04-10 09:04:04 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-04-10 09:04:04 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-04-10 09:04:02 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-04-10 09:04:02 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-04-10 09:03:58 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-04-10 09:03:58 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-04-10 09:03:57 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-04-10 09:03:57 ----A---- C:\Windows\system32\xinput1_2.dll
2014-04-10 09:03:53 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-04-10 09:03:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-04-10 09:03:50 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-04-10 09:03:50 ----A---- C:\Windows\system32\xinput1_1.dll
2014-04-10 09:03:46 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-04-10 09:03:46 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-04-10 09:03:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-04-10 09:03:38 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-04-10 09:03:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-04-10 09:03:31 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-04-10 09:03:31 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-04-10 09:03:30 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-04-10 09:03:30 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-04-10 09:03:29 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-04-10 09:03:29 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-04-10 09:03:28 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-04-10 09:03:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-04-10 09:03:27 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-04-10 09:03:27 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-04-10 09:03:26 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-04-10 09:03:26 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-04-10 08:57:27 ----HD---- C:\Windows\msdownld.tmp
2014-04-10 08:57:14 ----D---- C:\Windows\SYSWOW64\directx
2014-03-29 18:29:32 ----D---- C:\Users\Niky\AppData\Roaming\AVG2014
2014-03-29 18:27:11 ----HD---- C:\$AVG
2014-03-29 18:27:10 ----D---- C:\ProgramData\AVG2014
2014-03-29 18:25:57 ----D---- C:\Program Files (x86)\AVG
2014-03-29 18:23:47 ----D---- C:\ProgramData\MFAData
2014-03-29 17:23:12 ----A---- C:\autoexec.bat
2014-03-29 16:46:31 ----D---- C:\Program Files\Enigma Software Group
2014-03-29 16:46:17 ----D---- C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-29 16:41:56 ----A---- C:\Windows\ntbtlog.txt
2014-03-12 20:08:20 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 20:08:20 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 20:08:20 ----A---- C:\Windows\system32\wer.dll
2014-03-12 20:08:19 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 20:08:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 20:08:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 20:08:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 20:08:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 20:08:16 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 20:08:16 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 20:08:15 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 20:08:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 20:08:14 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 20:08:13 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 20:08:12 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 20:08:12 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 20:08:11 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 20:08:11 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 20:08:10 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 20:08:10 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 20:08:08 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 20:08:08 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 20:08:08 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 20:08:07 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 20:08:07 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 20:07:13 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 20:07:13 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 20:07:13 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 20:07:12 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll

======List of files/folders modified in the last 1 month======

2014-04-10 10:18:13 ----RD---- C:\Program Files
2014-04-10 10:17:53 ----D---- C:\Windows\Temp
2014-04-10 09:56:58 ----D---- C:\Windows\system32\config
2014-04-10 09:48:28 ----D---- C:\Users\Niky\AppData\Roaming\Dropbox
2014-04-10 09:19:05 ----D---- C:\Windows\system32\drivers
2014-04-10 09:18:32 ----RD---- C:\Program Files (x86)
2014-04-10 09:18:32 ----HD---- C:\ProgramData
2014-04-10 09:05:33 ----D---- C:\Windows\System32
2014-04-10 09:05:32 ----D---- C:\Windows\SysWOW64
2014-04-10 09:03:46 ----RSD---- C:\Windows\assembly
2014-04-10 09:03:27 ----D---- C:\Windows
2014-04-10 09:03:16 ----D---- C:\Windows\Microsoft.NET
2014-04-10 09:02:49 ----SHD---- C:\System Volume Information
2014-04-10 08:57:14 ----D---- C:\Windows\Logs
2014-04-10 08:48:52 ----D---- C:\Windows\system32\catroot2
2014-04-10 08:48:52 ----D---- C:\Windows\system32\catroot
2014-04-10 08:48:49 ----D---- C:\Windows\winsxs
2014-04-09 20:48:43 ----D---- C:\Program Files\VDownloader
2014-04-09 17:07:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-09 17:07:22 ----D---- C:\Windows\inf
2014-04-09 07:03:52 ----D---- C:\Windows\Prefetch
2014-04-08 19:34:55 ----SHD---- C:\Windows\Installer
2014-04-07 18:55:39 ----D---- C:\ProgramData\Microsoft Help
2014-04-03 07:31:00 ----D---- C:\Program Files\Microsoft Security Client
2014-04-03 07:30:57 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-03-29 19:04:49 ----D---- C:\Users\Niky\AppData\Roaming\newnext.me
2014-03-29 18:54:25 ----D---- C:\Program Files (x86)\Mobogenie
2014-03-29 18:28:42 ----D---- C:\Users\Niky\AppData\Roaming\TuneUp Software
2014-03-29 16:46:13 ----D---- C:\Program Files (x86)\Common Files
2014-03-19 00:15:11 ----D---- C:\Windows\system32\MRT
2014-03-19 00:13:07 ----A---- C:\Windows\system32\MRT.exe
2014-03-13 08:29:01 ----D---- C:\Program Files\Internet Explorer
2014-03-13 08:29:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-13 08:28:50 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-13 08:28:49 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 23:39:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-11-25 196376]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-10-31 294712]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-10-01 123704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-09-10 31544]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2013-11-25 150808]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-25 243480]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-11-01 212280]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2012-05-29 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-05-29 4719168]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-02-08 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-02-08 107560]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2011-02-08 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-08 39464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-02-08 21416]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2010-06-07 174848]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-04-03 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-04-10 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-04-03 63192]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-03-16 521728]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-10-29 250984]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-02-23 3782672]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-02-08 956192]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-04-03 857912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-04-03 1809720]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-03-16 297984]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2012-05-29 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [2014-01-16 289256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-29 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu

#2 Příspěvek od JaRon »

ahoj,
vycisti PC s ADWCleanerom - scan/clean
+
odinstaluj McAfee+MSC+AVG a daj tam Avast
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Nikolak
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 10 Dub 2014 09:35

Re: Prosím o kontrolu logu

#3 Příspěvek od Nikolak »

Děkuju moc. Provedla jsem a aktuálně to vypadá takhle:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Niky at 2014-04-10 11:49:11
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 280 GB (61%) free of 462 GB
Total RAM: 3895 MB (48% free)


======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 27875648
\??\C:\Windows\system32\conhost.exe "-2111495248509017051-437889826-1020817220-204707458110402386703476835181435680903
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
taskeng.exe {07B8AC8B-74CC-43CE-A015-8A53D7D91D93}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Users\Niky\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Windows\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\system32\SearchIndexer.exe /Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e36feef7-27cf-40b4-86e0-dbe4010dccbb -SystemEventPortName:HostProcess-13e32e0b-2920-4734-b742-399e8c099697 -IoCancelEventPortName:HostProcess-0fe25940-2e63-4ae5-9419-64f8b5516e7b -NonStateChangingEventPortName:HostProcess-ea3a23b9-160d-4ba4-85b7-bf9d55749a89 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7fd8bf95-f57e-4a63-a098-e4a2312ee6c5 -DeviceGroupId:WpdFsGroup
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Users\Niky\Downloads\adwcleaner.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Niky\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-705884046-4236463535-1927204500-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-705884046-4236463535-1927204500-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\2pb7s7y6.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\2pb7s7y6.default\extensions\
crossriderapp2258@crossrider.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-10 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-10 597816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-29 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-29 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-29 418840]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-03-16 1128448]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2012-05-29 6476288]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"VDownloader"=C:\Program Files\VDownloader\VDownloader.exe [2014-01-28 882176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Niky\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-30 116648]
"AGupdate"=C:\Program Files (x86)\AppGraffiti\AGupdate.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2010-08-11 487561]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-10 3854640]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Niky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Niky\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-10 11:36:06 ----D---- C:\AdwCleaner
2014-04-10 11:32:47 ----D---- C:\Users\Niky\AppData\Roaming\AVAST Software
2014-04-10 11:29:48 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-10 11:29:48 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-04-10 11:29:47 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-04-10 11:29:46 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-04-10 11:29:44 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-10 11:29:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-04-10 11:29:42 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-04-10 11:29:38 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-04-10 11:29:31 ----A---- C:\Windows\system32\aswBoot.exe
2014-04-10 11:29:19 ----A---- C:\Windows\avastSS.scr
2014-04-10 11:28:37 ----SHD---- C:\Config.Msi
2014-04-10 11:28:34 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-04-10 11:26:16 ----D---- C:\Program Files\AVAST Software
2014-04-10 11:24:33 ----D---- C:\ProgramData\AVAST Software
2014-04-10 11:22:46 ----A---- C:\AVScanner.ini
2014-04-10 10:18:13 ----D---- C:\Program Files\trend micro
2014-04-10 10:18:12 ----D---- C:\rsit
2014-04-10 09:19:05 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-04-10 09:18:32 ----D---- C:\ProgramData\Malwarebytes
2014-04-10 09:18:32 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-04-10 09:18:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-04-10 09:05:32 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-04-10 09:05:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-04-10 09:05:32 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-04-10 09:05:32 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-04-10 09:05:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-04-10 09:05:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-04-10 09:05:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-04-10 09:05:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-04-10 09:05:29 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-04-10 09:05:29 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-04-10 09:05:28 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-04-10 09:05:27 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-04-10 09:05:27 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-04-10 09:05:26 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-04-10 09:05:26 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-04-10 09:05:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-04-10 09:05:22 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-04-10 09:05:16 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-04-10 09:05:16 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-04-10 09:05:15 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-04-10 09:05:15 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-04-10 09:05:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-04-10 09:05:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-04-10 09:05:13 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-04-10 09:05:13 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-04-10 09:05:11 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-04-10 09:05:09 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-04-10 09:05:08 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-04-10 09:05:08 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-04-10 09:05:06 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-04-10 09:05:06 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-04-10 09:05:05 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-04-10 09:05:05 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-04-10 09:05:04 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-04-10 09:05:04 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-04-10 09:05:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-04-10 09:05:03 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-04-10 09:05:03 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-04-10 09:05:03 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-04-10 09:05:02 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-04-10 09:05:02 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-04-10 09:05:01 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-04-10 09:05:01 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-04-10 09:05:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-04-10 09:05:00 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-04-10 09:04:59 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-04-10 09:04:59 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-04-10 09:04:58 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-04-10 09:04:58 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-04-10 09:04:57 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-04-10 09:04:57 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-04-10 09:04:55 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-04-10 09:04:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-04-10 09:04:55 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-04-10 09:04:55 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-04-10 09:04:54 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-04-10 09:04:54 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-04-10 09:04:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-04-10 09:04:53 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-04-10 09:04:52 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-04-10 09:04:52 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-04-10 09:04:51 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-04-10 09:04:51 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-04-10 09:04:50 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-04-10 09:04:50 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-04-10 09:04:49 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-04-10 09:04:49 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-04-10 09:04:48 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-04-10 09:04:45 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-04-10 09:04:45 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-04-10 09:04:42 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-04-10 09:04:42 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-04-10 09:04:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-04-10 09:04:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-04-10 09:04:36 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-04-10 09:04:36 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-04-10 09:04:34 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-04-10 09:04:34 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-04-10 09:04:32 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-04-10 09:04:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-04-10 09:04:31 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-04-10 09:04:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-04-10 09:04:31 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-04-10 09:04:31 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-04-10 09:04:30 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-04-10 09:04:30 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-04-10 09:04:29 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-04-10 09:04:29 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-04-10 09:04:28 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-04-10 09:04:28 ----A---- C:\Windows\system32\xinput1_3.dll
2014-04-10 09:04:23 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-04-10 09:04:23 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-04-10 09:04:22 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-04-10 09:04:22 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-04-10 09:04:20 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-04-10 09:04:20 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-04-10 09:04:15 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-04-10 09:04:15 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-04-10 09:04:09 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-04-10 09:04:09 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-04-10 09:04:08 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-04-10 09:04:08 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-04-10 09:04:08 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-04-10 09:04:08 ----A---- C:\Windows\system32\d3dx10.dll
2014-04-10 09:04:04 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-04-10 09:04:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-04-10 09:04:04 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-04-10 09:04:04 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-04-10 09:04:02 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-04-10 09:04:02 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-04-10 09:03:58 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-04-10 09:03:58 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-04-10 09:03:57 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-04-10 09:03:57 ----A---- C:\Windows\system32\xinput1_2.dll
2014-04-10 09:03:53 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-04-10 09:03:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-04-10 09:03:50 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-04-10 09:03:50 ----A---- C:\Windows\system32\xinput1_1.dll
2014-04-10 09:03:46 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-04-10 09:03:46 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-04-10 09:03:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-04-10 09:03:38 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-04-10 09:03:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-04-10 09:03:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-04-10 09:03:31 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-04-10 09:03:31 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-04-10 09:03:30 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-04-10 09:03:30 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-04-10 09:03:29 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-04-10 09:03:29 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-04-10 09:03:28 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-04-10 09:03:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-04-10 09:03:27 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-04-10 09:03:27 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-04-10 09:03:26 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-04-10 09:03:26 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-04-10 08:57:27 ----HD---- C:\Windows\msdownld.tmp
2014-04-10 08:57:14 ----D---- C:\Windows\SYSWOW64\directx
2014-03-29 18:23:47 ----D---- C:\ProgramData\MFAData
2014-03-29 17:23:12 ----A---- C:\autoexec.bat
2014-03-29 16:46:31 ----D---- C:\Program Files\Enigma Software Group
2014-03-29 16:46:17 ----D---- C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-29 16:41:56 ----A---- C:\Windows\ntbtlog.txt
2014-03-12 20:08:20 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 20:08:20 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 20:08:20 ----A---- C:\Windows\system32\wer.dll
2014-03-12 20:08:19 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 20:08:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 20:08:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 20:08:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 20:08:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 20:08:17 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 20:08:16 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 20:08:16 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 20:08:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 20:08:15 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 20:08:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 20:08:14 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 20:08:13 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 20:08:12 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 20:08:12 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 20:08:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 20:08:11 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 20:08:11 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 20:08:10 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 20:08:10 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 20:08:09 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 20:08:08 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 20:08:08 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 20:08:08 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 20:08:07 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 20:08:07 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 20:07:13 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 20:07:13 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 20:07:13 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 20:07:12 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll

======List of files/folders modified in the last 1 month======

2014-04-10 11:48:37 ----D---- C:\Windows\Temp
2014-04-10 11:44:36 ----D---- C:\Users\Niky\AppData\Roaming\Dropbox
2014-04-10 11:43:36 ----D---- C:\Windows\system32\config
2014-04-10 11:40:20 ----HD---- C:\ProgramData
2014-04-10 11:38:01 ----RD---- C:\Program Files (x86)
2014-04-10 11:34:12 ----SHD---- C:\Windows\Installer
2014-04-10 11:33:32 ----SHD---- C:\System Volume Information
2014-04-10 11:30:31 ----D---- C:\Windows\system32\drivers
2014-04-10 11:30:31 ----D---- C:\Windows\inf
2014-04-10 11:30:30 ----D---- C:\Windows\system32\catroot
2014-04-10 11:30:29 ----D---- C:\Windows\system32\DriverStore
2014-04-10 11:30:08 ----D---- C:\Windows\system32\Tasks
2014-04-10 11:29:32 ----D---- C:\Windows\winsxs
2014-04-10 11:29:31 ----D---- C:\Windows\System32
2014-04-10 11:29:30 ----D---- C:\Windows
2014-04-10 11:26:16 ----RD---- C:\Program Files
2014-04-10 10:54:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-10 09:05:32 ----D---- C:\Windows\SysWOW64
2014-04-10 09:03:46 ----RSD---- C:\Windows\assembly
2014-04-10 09:03:16 ----D---- C:\Windows\Microsoft.NET
2014-04-10 08:57:14 ----D---- C:\Windows\Logs
2014-04-10 08:48:52 ----D---- C:\Windows\system32\catroot2
2014-04-09 20:48:43 ----D---- C:\Program Files\VDownloader
2014-04-09 07:03:52 ----D---- C:\Windows\Prefetch
2014-04-07 18:55:39 ----D---- C:\ProgramData\Microsoft Help
2014-04-03 07:31:00 ----D---- C:\Program Files\Microsoft Security Client
2014-04-03 07:30:57 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-03-29 18:28:42 ----D---- C:\Users\Niky\AppData\Roaming\TuneUp Software
2014-03-29 16:46:13 ----D---- C:\Program Files (x86)\Common Files
2014-03-19 00:15:11 ----D---- C:\Windows\system32\MRT
2014-03-19 00:13:07 ----A---- C:\Windows\system32\MRT.exe
2014-03-13 08:29:01 ----D---- C:\Program Files\Internet Explorer
2014-03-13 08:29:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-13 08:28:50 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-13 08:28:49 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 23:39:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-04-10 445304]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-10 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-10 208928]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-04-10 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-10 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-10 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-10 423240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-10 79184]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-10 84816]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2012-05-29 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-05-29 4719168]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-02-08 349736]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2010-06-07 174848]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-04-03 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-04-10 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-04-03 63192]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-03-16 521728]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-02-08 107560]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2011-02-08 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-08 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-02-08 21416]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-10-29 250984]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-10 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-04-10 109048]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-02-08 956192]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-04-03 857912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-04-03 1809720]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-03-16 297984]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2012-05-29 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-29 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu

#4 Příspěvek od JaRon »

toto este stale bezi "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
pokus sa to odinstalovat - ale inac to vypada fajn :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Nikolak
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 10 Dub 2014 09:35

Re: Prosím o kontrolu logu

#5 Příspěvek od Nikolak »

Tak skvělý! :) Ještě jednou díky moc a hezkej zbytek dne :))

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu

#6 Příspěvek od JaRon »

rado sa stalo - maj sa fajn :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno