vír http://gameplayinfo.org/

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

vír http://gameplayinfo.org/

#1 Příspěvek od symy13 »

zravím při spuštění mi vyskakuje automaticky tato stranka hxxp://gameplayinfo.org/ nejde mi spusti ccleaner
Naposledy upravil(a) vyosek dne 15 Srp 2015 12:15, celkem upraveno 1 x.
Důvod: Z bezp. duvodu zneaktivnen link
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vír http://gameplayinfo.org/

#2 Příspěvek od vyosek »

Zdravim :)

Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

Re: vír http://gameplayinfo.org/

#3 Příspěvek od symy13 »

nejde mi stahnout a hjt mi nejde spustit opravdu nevím jsem lajk minule mi šlo všechno vpohodě ted ani tuk
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vír http://gameplayinfo.org/

#4 Příspěvek od vyosek »

Ani RSIT nejde http://forum.viry.cz/viewtopic.php?f=13&t=130786
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

Re: vír http://gameplayinfo.org/

#5 Příspěvek od symy13 »

ani jeden nejde spustit spouštím přes správce
Nahoru
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

Re: vír http://gameplayinfo.org/

#6 Příspěvek od symy13 »

tady je scan s hjt
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 17:48:33, on 15.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)

FIREFOX: 40.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\Users\pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\pc\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Stáhnuté\hlidac.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [CMD] cmd.exe /c start http://zivlingamer.org && exit
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BingSvc] C:\Users\pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\pc\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\pc\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9063 bytes
Nahoru
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

Re: vír http://gameplayinfo.org/

#7 Příspěvek od symy13 »

chyba byla vtom že jsem soubor hjt musel přejmenovat
Nahoru
symy13
Návštěvník
Návštěvník
Příspěvky: 45
Registrován: 02 Dub 2014 18:48

Re: vír http://gameplayinfo.org/

#8 Příspěvek od symy13 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by pc at 2015-08-18 17:16:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 26 GB (9%) free of 300 GB
Total RAM: 4073 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:16:41, on 18.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Program Files\trend micro\pc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BingSvc] C:\Users\pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\pc\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\pc\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8688 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\servicing\TrustedInstaller.exe

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\pc\Desktop\ss.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfff037a12d42d.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\bqdz2atk.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\bqdz2atk.default\searchplugins\
varenicz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-09-03 13671640]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-01-28 5595848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"BingSvc"=C:\Users\pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-04-07 144008]
"cz.seznam.software.autoupdate"=C:\Users\pc\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\pc\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
C:\PROGRA~2\Raptr\raptrstub.exe --startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^pc^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Crack Installer.lnk]
C:\ProgramData\{3b2be69b-b75c-0ec7-3b2b-be69bb759a6e}\Crack Installer.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.207.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.208.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AnVir.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoLogger.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner64.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST64.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HiJackThis.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegWorks.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSIT.exe]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSITx64.exe]
"Debugger="svchost.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-18 16:20:47 ----A---- C:\AdwCleaner[C2].txt
2015-08-18 16:19:29 ----A---- C:\AdwCleaner[S5].txt
2015-08-16 11:22:03 ----A---- C:\AdwCleaner[C1].txt
2015-08-16 11:21:24 ----A---- C:\AdwCleaner[S4].txt
2015-08-16 06:29:08 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-16 06:29:08 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-08-16 06:29:08 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-08-16 06:29:08 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-08-16 06:23:08 ----A---- C:\AdwCleaner[S3].txt
2015-08-16 06:20:48 ----A---- C:\AdwCleaner[S2].txt
2015-08-16 06:15:17 ----A---- C:\AdwCleaner[S1].txt
2015-08-16 06:15:15 ----D---- C:\AdwCleaner
2015-08-14 07:57:08 ----D---- C:\Users\pc\AppData\Roaming\TechSmith
2015-08-14 07:54:32 ----D---- C:\ProgramData\regid.1995-08.com.techsmith
2015-08-14 07:54:30 ----D---- C:\Program Files (x86)\QuickTime
2015-08-14 07:53:59 ----D---- C:\ProgramData\TechSmith
2015-08-14 07:53:59 ----D---- C:\Program Files (x86)\TechSmith
2015-08-12 20:50:00 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 20:50:00 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-08-12 20:37:59 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-08-12 20:37:59 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 20:37:59 ----A---- C:\Windows\system32\iertutil.dll
2015-08-12 20:37:59 ----A---- C:\Windows\system32\iernonce.dll
2015-08-12 20:37:59 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-12 20:37:59 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-12 20:37:59 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-12 20:37:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-08-12 20:37:58 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-08-12 20:37:58 ----A---- C:\Windows\system32\urlmon.dll
2015-08-12 20:37:58 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-12 20:37:57 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-08-12 20:37:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 20:37:57 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-12 20:37:57 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 20:37:57 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-12 20:37:56 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-08-12 20:37:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-12 20:37:56 ----A---- C:\Windows\system32\vbscript.dll
2015-08-12 20:37:56 ----A---- C:\Windows\system32\iesetup.dll
2015-08-12 20:37:56 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-12 20:37:55 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-12 20:37:55 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-12 20:37:55 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-08-12 20:37:55 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-12 20:37:55 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-12 20:37:55 ----A---- C:\Windows\system32\ieui.dll
2015-08-12 20:37:55 ----A---- C:\Windows\system32\ieframe.dll
2015-08-12 20:37:55 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\wininet.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\jscript9.dll
2015-08-12 20:37:54 ----A---- C:\Windows\system32\jscript.dll
2015-08-12 20:37:53 ----A---- C:\Windows\system32\msrating.dll
2015-08-12 20:37:53 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-12 20:37:53 ----A---- C:\Windows\system32\mshtml.dll
2015-08-12 20:36:58 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-12 20:36:58 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-12 20:36:58 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-12 20:36:58 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-12 20:36:58 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-12 20:36:58 ----A---- C:\Windows\system32\wuapp.exe
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wups2.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wups.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wudriver.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wucltux.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wuapi.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 20:36:57 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-12 20:36:52 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-12 20:36:52 ----A---- C:\Windows\system32\notepad.exe
2015-08-12 20:36:52 ----A---- C:\Windows\notepad.exe
2015-08-12 20:36:50 ----A---- C:\Windows\system32\mstscax.dll
2015-08-12 20:36:49 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-12 20:36:49 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-12 20:36:49 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-08-12 20:36:49 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-12 20:36:49 ----A---- C:\Windows\system32\aaclient.dll
2015-08-12 20:36:45 ----A---- C:\Windows\system32\basesrv.dll
2015-08-12 20:36:32 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-12 20:36:32 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-12 20:36:32 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-12 20:36:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-12 20:36:32 ----A---- C:\Windows\system32\ntdll.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 20:36:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-12 20:36:31 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\wow64win.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\wow64.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\winsrv.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\wdigest.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\sysmain.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\sspicli.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\srcore.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\srclient.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\smss.exe
2015-08-12 20:36:31 ----A---- C:\Windows\system32\secur32.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\schannel.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\rstrui.exe
2015-08-12 20:36:31 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\lsass.exe
2015-08-12 20:36:31 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\kernel32.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\kerberos.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-12 20:36:31 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\credssp.dll
2015-08-12 20:36:31 ----A---- C:\Windows\system32\conhost.exe
2015-08-12 20:36:31 ----A---- C:\Windows\system32\auditpol.exe
2015-08-12 20:36:31 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 20:36:30 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-12 20:36:30 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-12 20:36:30 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-12 20:36:30 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-12 20:36:30 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-12 20:36:30 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-12 20:36:30 ----A---- C:\Windows\system32\msobjs.dll
2015-08-12 20:36:30 ----A---- C:\Windows\system32\msaudite.dll
2015-08-12 20:36:30 ----A---- C:\Windows\system32\adtschema.dll
2015-08-12 20:36:24 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-12 20:36:24 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-12 20:36:24 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-12 20:36:24 ----A---- C:\Windows\system32\davclnt.dll
2015-08-12 20:36:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-12 20:36:23 ----A---- C:\Windows\system32\shell32.dll
2015-08-12 20:35:50 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-12 20:35:50 ----A---- C:\Windows\system32\FntCache.dll
2015-08-12 20:35:50 ----A---- C:\Windows\system32\DWrite.dll
2015-08-12 20:35:50 ----A---- C:\Windows\system32\atmfd.dll
2015-08-12 20:35:49 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-12 20:35:49 ----A---- C:\Windows\system32\win32k.sys
2015-08-12 20:35:48 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-12 20:35:48 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-12 20:35:48 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-12 20:35:48 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-12 20:35:48 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-12 20:35:48 ----A---- C:\Windows\system32\lpk.dll
2015-08-12 20:35:48 ----A---- C:\Windows\system32\fontsub.dll
2015-08-12 20:35:48 ----A---- C:\Windows\system32\dciman32.dll
2015-08-12 20:35:48 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-12 20:35:48 ----A---- C:\Windows\system32\atmlib.dll
2015-08-12 20:35:47 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-12 20:35:47 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-12 20:35:47 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-12 20:35:47 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-12 20:35:47 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-12 20:35:47 ----A---- C:\Windows\system32\msxml6.dll
2015-08-12 20:35:47 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-12 20:35:47 ----A---- C:\Windows\system32\msxml3.dll
2015-08-12 20:31:48 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-12 16:50:45 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-12 16:27:30 ----D---- C:\Program Files\CCleaner
2015-08-12 09:01:38 ----RD---- C:\Program Files (x86)\Skype
2015-07-29 16:41:57 ----D---- C:\ProgramData\ESET
2015-07-29 16:41:57 ----D---- C:\Program Files\ESET
2015-07-29 16:41:31 ----D---- C:\Windows\SYSWOW64\⢂
2015-07-28 13:54:17 ----D---- C:\Program Files (x86)\Lords Of The Fallen
2015-07-28 07:44:53 ----A---- C:\Windows\SYSWOW64\ole32.dll
2015-07-28 07:44:53 ----A---- C:\Windows\system32\ole32.dll
2015-07-28 07:44:50 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-07-28 07:44:50 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-07-28 07:44:50 ----A---- C:\Windows\system32\msiexec.exe
2015-07-28 07:44:50 ----A---- C:\Windows\system32\msi.dll
2015-07-28 07:44:50 ----A---- C:\Windows\system32\consent.exe
2015-07-28 07:44:50 ----A---- C:\Windows\system32\authui.dll
2015-07-28 07:44:49 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2015-07-28 07:44:49 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2015-07-28 07:44:49 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2015-07-28 07:44:49 ----A---- C:\Windows\system32\msimsg.dll
2015-07-28 07:44:49 ----A---- C:\Windows\system32\msihnd.dll
2015-07-28 07:44:49 ----A---- C:\Windows\system32\appinfo.dll
2015-07-28 07:44:45 ----A---- C:\Windows\SYSWOW64\cewmdm.dll
2015-07-28 07:44:45 ----A---- C:\Windows\system32\cewmdm.dll
2015-07-28 07:44:43 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-07-28 07:44:43 ----A---- C:\Windows\system32\gdi32.dll

======List of files/folders modified in the last 1 month======

2015-08-18 17:16:41 ----D---- C:\Windows\Prefetch
2015-08-18 17:16:40 ----D---- C:\Program Files\trend micro
2015-08-18 17:16:39 ----D---- C:\Windows\Temp
2015-08-18 17:14:17 ----D---- C:\Windows\system32\config
2015-08-18 16:29:56 ----D---- C:\Windows\SysWOW64
2015-08-18 16:28:48 ----SHD---- C:\System Volume Information
2015-08-18 16:27:16 ----D---- C:\Users\pc\AppData\Roaming\Seznam.cz
2015-08-18 16:23:50 ----A---- C:\Windows\SYSWOW64\log.txt
2015-08-16 11:22:03 ----RD---- C:\Program Files (x86)
2015-08-16 11:22:03 ----HD---- C:\ProgramData
2015-08-16 06:29:08 ----D---- C:\Windows\system32\drivers
2015-08-15 16:55:07 ----RD---- C:\Program Files
2015-08-15 06:56:14 ----D---- C:\Windows
2015-08-14 15:30:56 ----D---- C:\Users\pc\AppData\Roaming\Skype
2015-08-14 14:55:50 ----D---- C:\Users\pc\AppData\Roaming\.minecraft
2015-08-14 09:42:55 ----D---- C:\rsit
2015-08-14 07:56:11 ----D---- C:\Program Files (x86)\Seznam.cz
2015-08-14 07:55:18 ----SHD---- C:\Windows\Installer
2015-08-14 07:54:18 ----D---- C:\Program Files (x86)\Common Files
2015-08-13 17:09:59 ----D---- C:\Windows\rescache
2015-08-13 16:35:54 ----D---- C:\Windows\Microsoft.NET
2015-08-13 14:55:46 ----D---- C:\Users\pc\AppData\Roaming\uTorrent
2015-08-13 06:10:31 ----RSD---- C:\Windows\assembly
2015-08-13 05:56:52 ----D---- C:\Windows\SoftwareDistribution
2015-08-13 05:50:42 ----D---- C:\Windows\winsxs
2015-08-13 05:49:13 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-13 05:49:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-12 21:20:02 ----D---- C:\Windows\System32
2015-08-12 21:20:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-12 21:20:01 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-12 21:20:01 ----D---- C:\Windows\system32\cs-CZ
2015-08-12 21:20:00 ----D---- C:\Windows\AppPatch
2015-08-12 21:19:58 ----D---- C:\Windows\SYSWOW64\en-US
2015-08-12 21:19:58 ----D---- C:\Windows\system32\en-US
2015-08-12 21:19:58 ----D---- C:\Program Files\Internet Explorer
2015-08-12 21:19:57 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-12 21:19:56 ----D---- C:\Windows\PolicyDefinitions
2015-08-12 20:50:41 ----D---- C:\ProgramData\Microsoft Help
2015-08-12 20:42:33 ----D---- C:\Windows\system32\MRT
2015-08-12 20:39:06 ----A---- C:\Windows\system32\MRT.exe
2015-08-12 20:36:02 ----D---- C:\Windows\system32\catroot2
2015-08-12 18:27:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-12 16:59:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-08-12 16:26:52 ----D---- C:\Windows\system32\Tasks
2015-08-12 09:01:47 ----D---- C:\ProgramData\Skype
2015-08-10 17:01:42 ----D---- C:\Windows\inf
2015-08-10 17:01:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-07-29 16:42:07 ----D---- C:\Windows\system32\DriverStore
2015-07-21 07:13:06 ----D---- C:\Windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-09-08 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-03-10 246000]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-03-10 169792]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2015-03-10 159480]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2014-06-21 94720]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2013-08-21 494864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-09-03 3956056]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 63704]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-02 62784]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-10-25 96768]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-10-25 213504]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
R3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-01-28 1349576]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 276864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-03 116648]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2014-03-11 260360]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
S2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-02-10 75064]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-03 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-07 149160]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-04-14 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-10-16 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vír http://gameplayinfo.org/

#9 Příspěvek od vyosek »

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    :reg
-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
"cz.seznam.software.autoupdate"=-
"cz.seznam.software.szndesktop"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^pc^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Crack Installer.lnk]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.207.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.208.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AnVir.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoLogger.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner64.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST64.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HiJackThis.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegWorks.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSIT.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSITx64.exe]

:files
C:\ProgramData\{3b2be69b-b75c-0ec7-3b2b-be69bb759a6e}
C:\Program Files (x86)\Skype\Toolbars
C:\Windows\tasks\*.job
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“