Logfile of random's system information tool 1.10 (written by random/random)
Run by VS at 2015-04-05 09:35:27
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 321 GB (46%) free of 698 GB
Total RAM: 8127 MB (74% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:35:30, on 5.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\VS.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1428169107
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {F680B28A-3AEE-4C88-93ED-45AE9215C128} (CryptSignX Control) - https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Communications - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9137 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
C:\Windows\SysWOW64\PSIService.exe
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 928
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\svchost.exe -k HPService
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
ngservice.exe pipeserver
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3948 CREDAT:267521 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3487921375-2190866117-4252034884-100123_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3487921375-2190866117-4252034884-100123 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\VS\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-04 662672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-04 565304]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-04-07 10144288]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-04-07 908320]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-04-15 2095400]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-04-01 558168]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-04-01 349272]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-04-23 861216]
"Corel Photo Downloader"=C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2007-12-14 531784]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1428169107 []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2007-12-14 531784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-04 284696]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-29 98304]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-04-08 908368]
"Corel File Shell Monitor"=C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [2008-01-15 16200]
"Print2PDF Print Monitor"=C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2011-04-12 222776]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-04-04 5512912]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2015-04-05 09:35:27 ----D---- C:\rsit
2015-04-04 18:45:41 ----A---- C:\ComboFix.txt
2015-04-04 18:37:43 ----SHD---- C:\$RECYCLE.BIN
2015-04-04 18:15:41 ----A---- C:\Windows\zip.exe
2015-04-04 18:15:41 ----A---- C:\Windows\SWSC.exe
2015-04-04 18:15:41 ----A---- C:\Windows\SWREG.exe
2015-04-04 18:15:41 ----A---- C:\Windows\sed.exe
2015-04-04 18:15:41 ----A---- C:\Windows\PEV.exe
2015-04-04 18:15:41 ----A---- C:\Windows\NIRCMD.exe
2015-04-04 18:15:41 ----A---- C:\Windows\MBR.exe
2015-04-04 18:15:41 ----A---- C:\Windows\grep.exe
2015-04-04 18:04:30 ----D---- C:\Qoobox
2015-04-04 18:04:11 ----D---- C:\Windows\erdnt
2015-04-04 17:28:24 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 17:28:22 ----SD---- C:\Windows\system32\GWX
2015-04-04 13:14:57 ----A---- C:\Windows\system32\aswBoot.exe
2015-04-04 13:14:51 ----A---- C:\Windows\avastSS.scr
2015-04-04 13:14:00 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2015-03-11 10:28:04 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 10:28:04 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 10:28:03 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 10:28:03 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 10:28:03 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 10:28:03 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 10:28:03 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 10:28:03 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 10:28:03 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 10:28:03 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 10:27:56 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 10:27:56 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 10:27:56 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 10:27:55 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 10:27:53 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 10:27:51 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 10:27:50 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 10:27:50 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 10:27:49 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 10:27:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 10:27:48 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 10:27:48 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 10:27:47 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 10:27:47 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 10:27:47 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 10:27:47 ----A---- C:\Windows\system32\evr.dll
2015-03-11 10:27:47 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 10:27:46 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 10:27:46 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 10:27:46 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 10:27:46 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 10:27:45 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 10:27:45 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 10:27:45 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 10:27:45 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 10:27:45 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 10:27:45 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 10:27:45 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 10:27:44 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 10:27:44 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 10:27:44 ----A---- C:\Windows\system32\mf.dll
2015-03-11 10:27:44 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 10:27:43 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 10:27:43 ----A---- C:\Windows\system32\winload.exe
2015-03-11 10:27:43 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 10:27:42 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 10:27:42 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\ci.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 10:27:42 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 10:27:41 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 10:27:41 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 10:27:41 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 10:27:41 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 10:27:40 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 10:27:40 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 10:27:40 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 10:27:40 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 10:27:39 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 10:27:37 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 10:27:32 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 10:27:32 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 10:27:32 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 10:27:32 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 10:27:31 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 10:27:30 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 10:27:30 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 10:27:28 ----A---- C:\Windows\system32\smss.exe
2015-03-11 10:27:26 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 10:27:26 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 10:27:26 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 10:27:26 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 10:27:26 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 10:27:26 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 10:27:26 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 10:27:25 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 10:27:25 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 10:27:25 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 10:27:25 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 10:27:25 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 10:27:25 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 10:27:25 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 10:27:25 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 10:27:25 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 10:27:25 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 10:27:24 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 10:27:24 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 10:27:24 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 10:27:24 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 10:27:24 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 10:27:24 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 10:27:23 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 10:27:22 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 10:27:21 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 10:27:21 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 10:27:10 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 10:27:10 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 10:27:10 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 10:26:51 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 10:26:51 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 10:26:50 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 10:26:48 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 10:26:46 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 10:26:46 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 10:26:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 10:26:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 10:26:45 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 10:26:45 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 10:26:45 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 10:26:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 10:26:44 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 10:26:44 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 10:26:43 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 10:26:43 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 10:26:43 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 10:26:43 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 10:26:43 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 10:26:43 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 10:26:43 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 10:26:43 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 10:26:42 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 10:26:42 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 10:26:42 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 10:26:42 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 10:26:42 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 10:26:42 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 10:26:42 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 10:26:42 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 10:26:38 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 10:26:38 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 10:26:38 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 10:26:37 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 10:26:36 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 10:26:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 10:26:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 10:26:35 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 10:26:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 10:26:35 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 10:26:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 10:26:33 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 10:26:33 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 10:26:33 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 10:26:33 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 10:26:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 10:26:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 10:26:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 10:26:31 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 10:26:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 10:26:31 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 10:26:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 10:26:30 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 10:26:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 10:26:30 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 10:26:30 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 10:26:30 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 10:26:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 10:26:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 10:26:29 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 10:26:28 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 10:26:28 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 10:26:27 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 10:26:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 10:26:27 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 10:26:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 10:26:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 10:26:26 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 10:26:26 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 10:26:26 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 10:26:25 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 10:26:25 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 10:26:25 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 10:26:24 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 10:26:24 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 10:26:24 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 10:26:23 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 10:26:23 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 10:26:23 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 10:26:22 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 10:26:22 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 10:26:21 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 10:25:43 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-11 10:25:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
======List of files/folders modified in the last 1 month======
2015-04-05 09:35:29 ----D---- C:\Windows\Temp
2015-04-05 09:35:29 ----D---- C:\Program Files\trend micro
2015-04-05 09:23:24 ----D---- C:\Windows\system32\config
2015-04-04 19:01:51 ----SHD---- C:\Windows\Installer
2015-04-04 19:01:51 ----D---- C:\Config.Msi
2015-04-04 18:58:55 ----A---- C:\Windows\SYSWOW64\log.txt
2015-04-04 18:45:46 ----D---- C:\Windows\system32\drivers
2015-04-04 18:43:54 ----D---- C:\Windows\Tasks
2015-04-04 18:43:54 ----D---- C:\Windows\system32\Tasks
2015-04-04 18:37:45 ----AD---- C:\Windows
2015-04-04 18:37:45 ----A---- C:\Windows\system.ini
2015-04-04 18:37:34 ----D---- C:\Windows\system32\drivers\etc
2015-04-04 18:28:26 ----D---- C:\Windows\SYSWOW64\drivers
2015-04-04 18:28:26 ----D---- C:\Windows\SysWOW64
2015-04-04 18:28:26 ----D---- C:\Windows\AppPatch
2015-04-04 18:28:24 ----D---- C:\Program Files (x86)\Common Files
2015-04-04 17:54:46 ----D---- C:\AdwCleaner
2015-04-04 17:42:55 ----D---- C:\Windows\Prefetch
2015-04-04 17:39:10 ----D---- C:\Windows\System32
2015-04-04 17:39:10 ----D---- C:\Windows\inf
2015-04-04 17:39:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-04 17:28:42 ----D---- C:\Windows\winsxs
2015-04-04 17:28:38 ----D---- C:\Windows\Logs
2015-04-04 17:28:19 ----SHD---- C:\System Volume Information
2015-04-04 17:23:06 ----D---- C:\Windows\Minidump
2015-04-04 14:04:24 ----D---- C:\FRST
2015-04-04 13:19:51 ----D---- C:\Users\VS\AppData\Roaming\SoftGrid Client
2015-04-04 13:16:23 ----D---- C:\Windows\system32\DriverStore
2015-04-02 12:09:26 ----D---- C:\Program Files\CCleaner
2015-03-25 21:56:29 ----D---- C:\Users\VS\AppData\Roaming\FileZilla
2015-03-25 10:45:39 ----D---- C:\Windows\system32\catroot2
2015-03-19 15:17:29 ----D---- C:\Windows\rescache
2015-03-12 19:35:50 ----D---- C:\Windows\debug
2015-03-12 10:05:39 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-12 10:05:39 ----D---- C:\Program Files\Windows Media Player
2015-03-12 10:05:39 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-12 10:05:38 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-12 10:05:38 ----D---- C:\Windows\system32\en-US
2015-03-12 10:05:38 ----D---- C:\Windows\system32\Dism
2015-03-12 10:05:38 ----D---- C:\Windows\system32\cs-CZ
2015-03-12 10:05:37 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 10:05:37 ----D---- C:\Windows\system32\Boot
2015-03-12 10:05:33 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-12 10:05:33 ----D---- C:\Program Files\Internet Explorer
2015-03-12 10:05:31 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-12 09:58:33 ----D---- C:\Windows\system32\MRT
2015-03-12 09:54:39 ----A---- C:\Windows\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-04-04 449896]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-04-04 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-04-04 271200]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-04 540696]
R0 johci;JMicron 1394 Filter Driver; C:\Windows\system32\DRIVERS\johci.sys [2010-01-15 23152]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-04-04 28144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-04-04 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-04-04 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-04-04 442264]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-04-04 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-04-04 88408]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-04-04 136752]
R2 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys); C:\Windows\System32\Drivers\FPSensor.sys [2012-12-17 35888]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-04 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-29 6405632]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-29 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-04-07 2216960]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 123408]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-03-30 32296]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2009-12-25 76112]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-04-07 2338592]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2009-10-16 321064]
R3 Ltn_stk7770P;PCTV LITEON TT128xDA based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7770P.sys [2010-04-13 917504]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-04-15 319536]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-03-30 39464]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-03-30 55336]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-03-30 294952]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-03-30 202792]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-03-30 53800]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-03-30 154792]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-03-30 264232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
S3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2010-03-26 160880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-02-26 25088]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-08-17 171008]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-02-26 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2010-02-26 9216]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-29 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-04-01 34392]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-04 343336]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-04-04 107448]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-04-08 312400]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-04-23 867360]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-04 4030800]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04 267440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-18 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prevence je základ zdraví
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prevence je základ zdraví
Zdravim 
Proc zakladate nove tema?

Proc zakladate nove tema?

Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
- Návštěvník
- Příspěvky: 52
- Registrován: 30 čer 2014 21:02
Re: Prevence je základ zdraví
Aby se měli v ostravě čemu divit
Re: Prevence je základ zdraví
V tom pripade uz to ucel splnilo a pockejte si na odpoved v puvodnim tematu.
Tady
Tady

Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).