prosim kotrolu o radu samovolne mi otvara stranky

[nakr]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Home at 2015-09-24 13:51:46
Microsoft Windows 7 Enterprise Service Pack 1
System drive C: has 338 GB (68%) free of 500 GB
Total RAM: 6098 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:52:53, on 24. 9. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Users\Home\AppData\Local\gmsd_ra_005010083\upgmsd_ra_005010083.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\gmsd_ra_005010083\gmsd_ra_005010083.exe
C:\Program Files (x86)\gmsd_ra_005010084\gmsd_ra_005010084.exe
C:\Program Files (x86)\gmsd_ra_005010088\gmsd_ra_005010088.exe
C:\Program Files (x86)\gmsd_ra_005010090\gmsd_ra_005010090.exe
C:\Program Files (x86)\gmsd_ra_005010091\gmsd_ra_005010091.exe
C:\Users\Home\AppData\Roaming\cpuminer\sgminer\sgm.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Users\Home\AppData\Local\Temp\nspA4E4.tmp
C:\Program Files (x86)\gmsd_ra_005010095\gmsd_ra_005010095.exe
C:\Users\Home\AppData\Local\Temp\nsjCBF8.tmp
C:\Users\Home\AppData\Local\Temp\nsu244B.tmp
C:\Users\Home\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\Home\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe
C:\Users\Home\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe
C:\Program Files\trend micro\Home.exe
C:\Users\Home\AppData\Local\Temp\nsoD2B5.tmp\setup.exe
C:\Users\Home\AppData\Local\Temp\nsv8304.tmp\Jvbvahbaywl.exe
C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-10.exe
C:\Users\Home\AppData\Local\Temp\comh.165079\globalupdate.exe
C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-4.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0000000000
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0000000000
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [gmsd_ra_005010083] "C:\Program Files (x86)\gmsd_ra_005010083\gmsd_ra_005010083.exe"
O4 - HKLM\..\Run: [gmsd_ra_005010084] "C:\Program Files (x86)\gmsd_ra_005010084\gmsd_ra_005010084.exe"
O4 - HKLM\..\Run: [gmsd_ra_005010088] "C:\Program Files (x86)\gmsd_ra_005010088\gmsd_ra_005010088.exe"
O4 - HKLM\..\Run: [gmsd_ra_005010090] "C:\Program Files (x86)\gmsd_ra_005010090\gmsd_ra_005010090.exe"
O4 - HKLM\..\Run: [gmsd_ra_005010091] "C:\Program Files (x86)\gmsd_ra_005010091\gmsd_ra_005010091.exe"
O4 - HKLM\..\Run: [gmsd_ra_005010095] "C:\Program Files (x86)\gmsd_ra_005010095\gmsd_ra_005010095.exe"
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010088.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010088\upgmsd_ra_005010088.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010091.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010091\upgmsd_ra_005010091.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010084.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010084\upgmsd_ra_005010084.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010083.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010083\upgmsd_ra_005010083.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010090.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010090\upgmsd_ra_005010090.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_ra_005010095.exe] C:\Users\Home\AppData\Local\gmsd_ra_005010095\upgmsd_ra_005010095.exe -runonce
O4 - HKLM\..\RunOnce: [Update] C:\Users\Home\AppData\Roaming\VOPackage\VOPackage.exe /runonce
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Home\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Ultra Agent] "C:\Program Files\DAEMON Tools Ultra\DTAgent.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Disc Soft Ultra Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Trial Version Drop Shadow (rulyjonu) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SSFK - TODO: <???> - C:\Program Files (x86)\SFK\SSFK.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: Encyclopaedia Enter (vicoqudu) - Unknown owner - C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\hnsb9A2C.tmp
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Typewriter High Resolution (zejytose) - Unknown owner - C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\jnsr7904.tmp
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 12949 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 31031440
\??\C:\Windows\system32\conhost.exe "-5792368319122975796397282091133215981-1065819919-12842765422051971035-1002487428
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\viakaraokesrv.exe
C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\hnsb9A2C.tmp
C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\jnsr7904.tmp
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Users\Home\AppData\Local\gmsd_ra_005010083\upgmsd_ra_005010083.exe" -runhelper
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
"C:\Program Files\DAEMON Tools Ultra\DTAgent.exe" -autorun
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\gmsd_ra_005010083\gmsd_ra_005010083.exe"
"C:\Program Files (x86)\gmsd_ra_005010084\gmsd_ra_005010084.exe"
cmd /C "C:\Users\Home\AppData\Roaming\cpuminer\sgminer\start.cmd"
\??\C:\Windows\system32\conhost.exe "-1732272508-15802617021604387182-49237355561606234513549502731635913545-221414184
"C:\Program Files (x86)\gmsd_ra_005010088\gmsd_ra_005010088.exe"
"C:\Program Files (x86)\gmsd_ra_005010090\gmsd_ra_005010090.exe"
"C:\Program Files (x86)\gmsd_ra_005010091\gmsd_ra_005010091.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
sgm.exe --config sgminer.conf
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe" -Embedding
"C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\Windows\System32\svchost.exe -k secsvcs
ctfmon.exe
C:\Users\Home\AppData\Local\Temp\nspA4E4.tmp /s
"C:\Program Files (x86)\F9C06E00-1436898156-81E1-3C3C-3085A915A406\knsj124C.tmp"
"C:\Program Files (x86)\gmsd_ra_005010095\gmsd_ra_005010095.exe"
"C:\Program Files (x86)\SFK\SSFK.exe" -s
C:\Users\Home\AppData\Local\Temp\nsjCBF8.tmp
C:\Users\Home\AppData\Local\Temp\nsu244B.tmp /s
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 29513624-6c04-49a8-9cf4-ecded18d982d 1
\??\C:\Windows\system32\conhost.exe "-69490861419262084917465851011455046225742088883-114035513185996252-921129542
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "502071267-149894747-2076398295-13334163481779796226684233376-9094780-1844539713

"C:\Users\Home\AppData\Roaming\uTorrent\uTorrent.exe"
"C:\Users\Home\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe" uTorrent_2020_03C308B8_168424385 µTorrent4823DF041B09 uTorrent
"C:\Users\Home\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe" uTorrent_2020_002CDE68_184076668 µTorrent4823DF041B09 uTorrent
C:\Windows\system32\sppsvc.exe
"C:\Users\Home\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\Home\AppData\Local\Temp\nsoD2B5.tmp\setup.exe
"C:\Users\Home\AppData\Local\Temp\nsv8304.tmp\Jvbvahbaywl.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
taskeng.exe {B7F41C0D-B156-4BBB-BB91-18C05E035D31}
"C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-10.exe" /rawdata=ayZGTU63ASidb64/DBVLAXVnMd0Hhhi0MAsERCRlCEokt8qeloVhE3cJMy7iQst0whyKfebDbaTojRFg3CkhCjUHbjWpdR4qSN9RfvjWz0L2oHadcuZG9eyn36qwSFm92r85qYPLKedcCqf6w2aCnVMIwLn02d8ixEnE7fT70C4UptBxvNZFa3Mw5jj1zHPLadJto0+me6seuPUo3RmH8GDY2h1L+jGCl0j6jeVZggwKTFfbxiRT0Y1m92VjInRBi7CvR4m6LCloQ4Aq951xT9uKSCznePMDIKOYIOiao/GLZ9MNi7GBoFK/+/fHfjUNnHdJhWVcYEIck8CLRAhtIjIefuVZJmFrNWrYjF5meAb7UtO+Amx6ishWLl7G6ArUCgertbeG8iq08kmotprGapvDEW7mR1Z7fRS+gcLzm+1fZq+pKmSe8nC60NhZsjjgj4FmiH0/jsRYy/skkNiqI/0OBi4yiNcKf/QhZW2C5JZex/V7rmRSqomegRQM+dcWOUwx1oqOlWHdYvZLe+803yvZEIAsEC2GTg2m93L/qmk4zW4uipMi2jh9ko+jPwtKcS+cnWdTcTyNWMP4qrLXcXUD9SEIOJoLliWkfW7YxoM0Z3f6BcjerH64oRoREwPKVKYTobJ4dcBRNIP/4EKkc6cWxBAJhrWZlHtEWRi79ba7SHjix15ivH/npEg1mK84SushR5SkwBJuEUMDIoQggxh+yrGpjYAGWGdkZwhFbpXFLymbDxTTvOSQOEQr37tlbvVMmGi7r0RnhDgpCv8Ja1KBAyqRIbfpe4g5fV5+Yt2NP09USYEvxGIxhwAxfXVPi2KlrWEDLsn8o3KUdorx+A==
C:\Users\Home\AppData\Local\Temp\comh.165079\globalupdate.exe /silent /install "appguid={3aed5ec3-eb4c-4e2e-9785-4c61f0c1fc4e}&appname=3d969ded-ff4b-4a07-835b-f70c2676a331&needsadmin=True&lang=en"
"C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-4.exe" /rawdata=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
C:\Windows\system32\msiexec.exe /V

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\APSnotifierPP1.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 3A
C:\Windows\tasks\APSnotifierPP2.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 4
C:\Windows\tasks\APSnotifierPP3.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 6
C:\Windows\tasks\DriverToolkit Autorun.job - C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe --autorun
C:\Windows\tasks\f7eb881e-fdfe-49a8-aabf-777a271a373c-10_user.job - C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-10.exe /rawdata=ayZGTU63ASidb64/DBVLAXVnMd0Hhhi0MAsERCRlCEokt8qeloVhE3cJMy7iQst0whyKfebDbaTojRFg3CkhCjUHbjWpdR4qSN9RfvjWz0L2oHadcuZG9eyn36qwSFm92r85qYPLKedcCqf6w2aCnVMIwLn02d8ixEnE7fT70C4UptBxvNZFa3Mw5jj1zHPLadJto0+me6seuPUo3RmH8GDY2h1L+jGCl0j6jeVZggwKTFfbxiRT0Y1m92VjInRBi7CvR4m6LCloQ4Aq951xT9uKSCznePMDIKOYIOiao/GLZ9MNi7GBoFK/+/fHfjUNnHdJhWVcYEIck8CLRAhtIjIefuVZJmFrNWrYjF5meAb7UtO+Amx6ishWLl7G6ArUCgertbeG8iq08kmotprGapvDEW7mR1Z7fRS+gcLzm+1fZq+pKmSe8nC60NhZsjjgj4FmiH0/jsRYy/skkNiqI/0OBi4yiNcKf/QhZW2C5JZex/V7rmRSqomegRQM+dcWOUwx1oqOlWHdYvZLe+803yvZEIAsEC2GTg2m93L/qmk4zW4uipMi2jh9ko+jPwtKcS+cnWdTcTyNWMP4qrLXcXUD9SEIOJoLliWkfW7YxoM0Z3f6BcjerH64oRoREwPKVKYTobJ4dcBRNIP/4EKkc6cWxBAJhrWZlHtEWRi79ba7SHjix15ivH/npEg1mK84SushR5SkwBJuEUMDIoQggxh+yrGpjYAGWGdkZwhFbpXFLymbDxTTvOSQOEQr37tlbvVMmGi7r0RnhDgpCv8Ja1KBAyqRIbfpe4g5fV5+Yt2NP09USYEvxGIxhwAxfXVPi2KlrWEDLsn8o3KUdorx+A==
C:\Windows\tasks\f7eb881e-fdfe-49a8-aabf-777a271a373c-4.job - C:\Program Files (x86)\Shop and Save Up\f7eb881e-fdfe-49a8-aabf-777a271a373c-4.exe /rawdata=qHXnU1C70ODH6mrPldIOIdIjAF/YTMYBNbD18r9x4oW/fIfS7+DESZTQgxRqWNayuGs5s+lb/YLGUeoE+iSE437ZkAJm1accKo1JcrSovsGpTQiHQNo155lDszjpXDDCLmIc6VUNld94P4y3135IcOfO/+wKbcDjqnWikHafvE4Aw1GisDO+hqcaALinfNgDcUcqVTzFwVQOWEyxTn22HqZ1PdV/t6hC/bNe1T1os86AtiFkQVdUyX2oqpvOpcwUlzovRWeXGYsWjJmyaXL6MxVKM/jmd6GIv8prT3roi4C7suGUYWatOPmdWyqVMYLBD66j8aTYrNgL8UP9bGgWf6R/YGyTtYlD9mW8Gf144M3uzg7/SCWjBpoMF7uas90uuF5QqEtjvkyBhS1MtXeeN13Q3hC9QLCrHkTuTpq1LIQDU2dx/LDMNDh2h84joJC666WH55WqNtjYd9xRnqeoEbOqTRd6GWubL6/jTK1CaJdMa5aXi9DXxNsKsAemsEoSjS3EjCuelYAY1ziS1urYCCvUQgnODQixy03JBNN+5yuia9cHM96lQVKLit5txidmuedK8BwDRNrIxpGPRqMAcPRIAMhUPOCnNwFK+7yAOyegv0NfSCLJ0CSvizVYBuwflvwIXXMkBvPE/xNA8bCIY6+WVOnC9VfrpJ5XM89sSn9JMVHBa+R9QRAKSzkxjsNvn8gxWrqo7DJqNL5iz3XMFSDK+YrRdXas0T2Lj9g3NtydSWASmjPVkgiYwbAeEAqb7HRkEHQnbXJPxdJFop5xxAtC9M6XjRnRZ0lQztRRXMHBrvDz2itEqvZlOKayZrED5hRMFtAlMa+NeXxxjo/rwKIfVpSfZb22Z1HsOcmTEoCgKpeRNL0WlH/VY3bTPbPMdUouoogBuz8Dhk+7xsm1xCyBI5+/98/L1KkQ6Hr0Rme7ufUZ03U7Jm1WFzN7HBCT+40RVdegN5YQXzknZP5VUJuGAt9F7B6HSC0LoIyvm3Hw63zktN1YzL6RblI/Lm4Tuss3+buZSy2XoV+278Rjr7MrEqJtT9dlFPItOBtOyzBTtk14wTOYxQfmYKmRFIrB6ZVhOMART9NIbCEb9BW+K//qcDWSXVBRdipRl0rvYJc5m+CQnZXBuDhNVaSMXHAXQc+CCHE4WUyF1cp3xyxwNqGvLGFYGvpvmhsDW4TgY2MHlNtxs0rTgJABQK/aChuEBBSU2ENQ4v46nv8nE0mb02OcJRfrOPlcROm3kEkFSzJnl4ny3eDktjRWuNHlmCafsPYinDYpDl17dFZX9xGt4ubhpfmjSJCvHzRzsUH7MQLzLVBZSJpOHNZ1qf5vMJPE95b0qYzLy/jGlMqUxMye3WWTEDFoTd1MDrIjWjYjETcHKwzBHxKI3yj5GFncnv5yw1VDbb565Rpt71/fPVOsgpqOGg/CPQoi+zwxcDVMeexeAubUQjG/sUPFGXgdrQmtkPqpCM+ku47xPrhNHIwbkkQUur0LhjpPQS0ZUemRNrHrTNblDYCTXh7w3X45nVKoCA63FdgFM4HDZ4UK3wSnrRggSPrzw+M7c+zx4Yb2kDOZB2tYl2TkeZjUzWrZ5i5E1A3wRK1OJwwLK6/r1Drcc3VBClpAqabp5rX4I4Lk80qdTVtDNULEyuwAvCBKUqcHeM6StJSuxC1J/NGU2tPAkMNsAIHnUkDFyphL7g/buJ+ZRey1AXJOVqK9Y3PCeUGckEMJP2WLtH6HimaxOu+rD7fLmABeC4G6G/cXIbqJDSIGvhTQJjqsy7oqDnUiwCdfQ0OVqJEr6u+uZZKm828n5z/cHJHOcqLNMuI3fICYUbQM6oEZR9R7KOo8kT/z3exXe/UXGg4cRsze7XIMRkNthQ==
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\qy4bc49i.default-1441901100839

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.istartsurf.com/?type=hp&ts=1 ... C3539C3539"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\qy4bc49i.default-1441901100839\extensions\
defsearchp@gmail.com
deskCutv2@gmail.com
ffddf830-f24b-489e-9e90-a42d11893b1c@gmail.com

C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\qy4bc49i.default-1441901100839\searchplugins\
istartsurf.xml
mystartsearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-08-12 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 881880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2015-07-14 2335960]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2014-01-22 707800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2015-07-14 1729752]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2013-05-08 4791024]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-06-03 2754704]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-06-03 1571696]
"gpuminer"=C:\Users\Home\AppData\Roaming\cpuminer\sgminer\start.cmd [2015-08-21 214]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-08-12 2899136]
"uTorrent"=C:\Users\Home\AppData\Roaming\uTorrent\uTorrent.exe [2015-09-19 1774432]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"DAEMON Tools Ultra Agent"=C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [2015-08-06 4526424]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-07 291608]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-07-11 5256336]
"gmsd_ra_005010082"= []
"gmsd_ra_005010083"=C:\Program Files (x86)\gmsd_ra_005010083\gmsd_ra_005010083.exe [2015-09-07 3984016]
"gmsd_ra_005010084"=C:\Program Files (x86)\gmsd_ra_005010084\gmsd_ra_005010084.exe [2015-09-09 3977872]
"gmsd_ra_005010088"=C:\Program Files (x86)\gmsd_ra_005010088\gmsd_ra_005010088.exe [2015-09-15 3977360]
"gmsd_ra_005010090"=C:\Program Files (x86)\gmsd_ra_005010090\gmsd_ra_005010090.exe [2015-09-17 3977872]
"gmsd_ra_005010091"=C:\Program Files (x86)\gmsd_ra_005010091\gmsd_ra_005010091.exe [2015-09-18 3978896]
"gmsd_ra_005010095"=C:\Program Files (x86)\gmsd_ra_005010095\gmsd_ra_005010095.exe [2015-09-22 3977872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"upgmsd_ra_005010088.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010088\upgmsd_ra_005010088.exe [2015-09-15 3314320]
"upgmsd_ra_005010091.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010091\upgmsd_ra_005010091.exe [2015-09-18 3301008]
"upgmsd_ra_005010084.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010084\upgmsd_ra_005010084.exe [2015-09-09 3310736]
"upgmsd_ra_005010083.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010083\upgmsd_ra_005010083.exe [2015-09-07 3334800]
"upgmsd_ra_005010090.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010090\upgmsd_ra_005010090.exe [2015-09-17 3312784]
"upgmsd_ra_005010095.exe"=C:\Users\Home\AppData\Local\gmsd_ra_005010095\upgmsd_ra_005010095.exe [2015-09-22 3305616]
"Update"=C:\Users\Home\AppData\Roaming\VOPackage\VOPackage.exe /runonce []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-09-24 13:52:40 ----D---- C:\Program Files (x86)\globalUpdate
2015-09-24 13:52:35 ----D---- C:\Program Files (x86)\Shop and Save Up
2015-09-24 13:51:47 ----D---- C:\Program Files\trend micro
2015-09-24 13:51:46 ----D---- C:\rsit
2015-09-24 11:18:13 ----A---- C:\Windows\system32\drivers\nzlwajrh.sys
2015-09-23 11:16:03 ----D---- C:\Program Files (x86)\SFK
2015-09-23 11:15:51 ----D---- C:\ProgramData\iWdsManProi
2015-09-23 11:15:00 ----D---- C:\Program Files (x86)\gmsd_ra_005010095
2015-09-19 15:39:09 ----D---- C:\ProgramData\lWdsManProl
2015-09-19 10:06:46 ----D---- C:\Program Files (x86)\gmsd_ra_005010091
2015-09-19 10:06:29 ----D---- C:\ProgramData\cWdsManProc
2015-09-18 09:36:24 ----D---- C:\Program Files (x86)\gmsd_ra_005010090
2015-09-16 04:35:18 ----D---- C:\Program Files (x86)\gmsd_ra_005010088
2015-09-16 04:35:10 ----D---- C:\ProgramData\yWdsManProy
2015-09-12 16:01:02 ----D---- C:\ProgramData\eWdsManProe
2015-09-10 18:02:47 ----D---- C:\ProgramData\SWdsManProS
2015-09-10 18:02:46 ----D---- C:\Program Files (x86)\gmsd_ra_005010084
2015-09-09 17:55:56 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 17:55:56 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 17:55:54 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 17:55:54 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 17:55:54 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 17:55:52 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 17:55:51 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 17:55:51 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 17:55:51 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 17:55:51 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 17:55:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 17:55:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 17:55:50 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 17:55:50 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 17:55:50 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 17:55:49 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 17:55:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 17:55:49 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 17:55:49 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 17:55:48 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 17:55:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 17:55:48 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 17:55:48 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 17:55:48 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 17:55:47 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 17:55:47 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 17:55:47 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 17:55:47 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 17:55:47 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 17:55:47 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 17:55:46 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 17:55:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 17:55:46 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 17:55:46 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 17:55:46 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 17:55:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 17:55:45 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 17:55:45 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 17:55:45 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 17:55:45 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 17:55:45 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 17:55:45 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 17:55:44 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 17:55:43 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 17:55:43 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 17:55:42 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 17:54:59 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 17:54:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 17:54:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 17:54:59 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 17:54:59 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 17:54:58 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 17:54:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 17:54:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 17:54:58 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 17:54:57 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 17:54:57 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 17:54:57 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 17:54:57 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 17:54:57 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 17:54:57 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 17:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 17:54:56 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\smss.exe
2015-09-09 17:54:56 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 17:54:56 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 17:54:56 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 17:54:56 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 17:54:56 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 17:54:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 17:54:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 17:54:56 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 17:54:56 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 17:54:56 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 17:54:56 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 17:54:52 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 17:54:52 ----A---- C:\Windows\system32\consent.exe
2015-09-09 17:54:52 ----A---- C:\Windows\system32\authui.dll
2015-09-09 17:54:52 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 17:54:51 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 17:54:51 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 17:54:50 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 17:54:50 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 17:54:50 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 17:54:50 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 17:54:50 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 17:54:50 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 17:54:48 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 17:54:48 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 17:54:48 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 17:54:48 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 17:54:48 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 17:54:48 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 17:54:48 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 17:54:44 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 17:54:44 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 17:54:44 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 17:54:44 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 17:54:44 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 17:54:44 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 17:54:44 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 17:54:44 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 17:54:44 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 17:54:44 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 17:54:44 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 17:54:43 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 17:54:43 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 17:54:43 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 17:54:43 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 17:54:43 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wups.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-09 17:54:43 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-08 10:59:54 ----D---- C:\Program Files (x86)\AnyProtectEx
2015-09-08 01:22:18 ----D---- C:\ProgramData\gWdsManProg
2015-09-08 00:28:23 ----D---- C:\Program Files (x86)\gmsd_ra_005010083
2015-09-07 19:09:00 ----D---- C:\ProgramData\XWdsManProX
2015-09-07 19:08:47 ----A---- C:\task.vbs
2015-09-07 18:30:32 ----D---- C:\Users\Home\AppData\Roaming\cpuminer
2015-09-07 18:30:14 ----D---- C:\ProgramData\5WdsManPro5
2015-09-07 17:49:48 ----D---- C:\Program Files (x86)\predm
2015-09-07 17:42:47 ----D---- C:\ProgramData\6WdsManPro6
2015-09-07 17:42:47 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-09-07 17:42:28 ----D---- C:\Program Files (x86)\Opera
2015-09-04 16:57:05 ----D---- C:\Program Files (x86)\DriverToolkit
2015-09-04 16:17:59 ----D---- C:\ProgramData\TEMP
2015-09-04 12:00:03 ----D---- C:\Users\Home\AppData\Roaming\driveridentifier
2015-09-02 18:00:48 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-09-02 17:58:39 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-09-02 17:58:39 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-09-02 17:58:39 ----A---- C:\Windows\system32\nvcuda.dll
2015-09-02 17:58:39 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-09-02 17:58:38 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvopencl.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvoglv64.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\NvIFR64.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\NvFBC64.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvdispgenco6435582.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvdispco6435582.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvcuvid.dll
2015-09-02 17:58:38 ----A---- C:\Windows\system32\nvcompiler.dll
2015-09-01 11:33:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-28 19:27:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-08-26 12:23:52 ----D---- C:\Program Files (x86)\Seznam.cz
2015-08-26 12:23:24 ----D---- C:\Users\Home\AppData\Roaming\Seznam.cz

======List of files/folders modified in the last 1 month======

2015-09-24 13:52:53 ----SHD---- C:\Windows\Installer
2015-09-24 13:52:50 ----D---- C:\Windows\Prefetch
2015-09-24 13:52:47 ----D---- C:\Windows\system32\Tasks
2015-09-24 13:52:45 ----D---- C:\Windows\Temp
2015-09-24 13:52:45 ----D---- C:\Windows\Tasks
2015-09-24 13:52:40 ----RD---- C:\Program Files (x86)
2015-09-24 13:52:40 ----D---- C:\Windows\SysWOW64
2015-09-24 13:51:58 ----D---- C:\Users\Home\AppData\Roaming\uTorrent
2015-09-24 13:51:47 ----RD---- C:\Program Files
2015-09-24 11:18:13 ----D---- C:\Windows\system32\drivers
2015-09-24 11:18:07 ----SHD---- C:\System Volume Information
2015-09-24 11:07:24 ----HD---- C:\ProgramData
2015-09-24 10:54:09 ----D---- C:\Program Files (x86)\F9C06E00-1436898156-81E1-3C3C-3085A915A406
2015-09-24 05:07:32 ----D---- C:\Windows\system32\config
2015-09-23 18:53:05 ----D---- C:\Program Files (x86)\Diablo III
2015-09-23 18:51:11 ----D---- C:\Windows\system32\NDF
2015-09-23 18:45:30 ----D---- C:\Program Files (x86)\Battle.net
2015-09-23 12:49:48 ----D---- C:\Users\Home\AppData\Roaming\vlc
2015-09-23 10:38:13 ----D---- C:\Program Files (x86)\Steam
2015-09-23 10:35:56 ----D---- C:\ProgramData\NVIDIA
2015-09-22 19:37:57 ----D---- C:\Windows\inf
2015-09-22 19:37:35 ----D---- C:\Windows
2015-09-22 16:14:01 ----D---- C:\Windows\debug
2015-09-22 14:19:56 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-09-20 13:10:31 ----D---- C:\Windows\System32
2015-09-20 13:10:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-15 15:28:25 ----HD---- C:\Windows\system32\WLANProfiles
2015-09-11 05:12:33 ----D---- C:\Windows\rescache
2015-09-10 13:00:48 ----D---- C:\Windows\Microsoft.NET
2015-09-10 13:00:32 ----RSD---- C:\Windows\assembly
2015-09-10 12:51:44 ----D---- C:\Windows\winsxs
2015-09-10 12:49:37 ----D---- C:\Program Files\Windows Journal
2015-09-10 12:49:36 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-09-10 12:49:36 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-10 12:49:36 ----D---- C:\Windows\system32\sk-SK
2015-09-10 12:49:36 ----D---- C:\Windows\system32\en-US
2015-09-10 12:49:36 ----D---- C:\Windows\PolicyDefinitions
2015-09-10 12:49:36 ----D---- C:\Windows\ehome
2015-09-10 12:49:36 ----D---- C:\Program Files\Internet Explorer
2015-09-10 12:49:36 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-10 12:49:35 ----D---- C:\Windows\AppPatch
2015-09-10 12:49:33 ----D---- C:\Windows\system32\Boot
2015-09-10 12:33:00 ----D---- C:\ProgramData\Microsoft Help
2015-09-10 12:32:10 ----A---- C:\Windows\win.ini
2015-09-10 12:32:04 ----D---- C:\Windows\system32\MRT
2015-09-10 12:22:42 ----D---- C:\Windows\system32\catroot2
2015-09-07 18:38:02 ----D---- C:\Users\Home\AppData\Roaming\NVIDIA
2015-09-02 18:01:06 ----D---- C:\ProgramData\NVIDIA Corporation
2015-09-02 18:00:44 ----D---- C:\Windows\system32\DriverStore
2015-09-02 16:41:46 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-26 18:37:02 ----A---- C:\Windows\system32\MRT.exe
2015-08-25 20:46:21 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-08-25 20:46:21 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-08-25 20:46:21 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-08-25 20:46:21 ----A---- C:\Windows\system32\OpenCL.dll
2015-08-25 20:46:21 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-08-25 20:46:21 ----A---- C:\Windows\system32\nvapi64.dll
2015-08-25 16:24:20 ----A---- C:\Windows\system32\nvvsvc.exe
2015-08-25 16:24:20 ----A---- C:\Windows\system32\nvsvcr.dll
2015-08-25 16:24:20 ----A---- C:\Windows\system32\nvsvc64.dll
2015-08-25 16:24:20 ----A---- C:\Windows\system32\nvshext.dll
2015-08-25 16:24:20 ----A---- C:\Windows\system32\nvmctray.dll
2015-08-25 16:24:19 ----A---- C:\Windows\system32\nvcpl.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-02-07 16152]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 AMPPAL;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2013-04-11 164832]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 dtultrascsibus;DAEMON Tools Ultra Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtultrascsibus.sys [2015-08-07 30264]
R3 dtultrausbbus;DAEMON Tools Ultra Virtual USB Bus; C:\Windows\system32\DRIVERS\dtultrausbbus.sys [2015-08-07 47160]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-02-07 356120]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-02-07 787736]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwsw00.sys [2013-05-08 11524096]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-06-17 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-06-03 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-05-19 46768]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-07-06 2201744]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 nzlwajrh;nzlwajrh; \??\C:\Windows\system32\drivers\nzlwajrh.sys [2015-09-24 55168]
S3 AMPPALP;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2013-04-11 164832]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-06-11 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2013-04-11 772064]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-12 135984]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2013-05-08 621296]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-06-03 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-06-03 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-06-03 23007376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-25 937776]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2013-05-08 149744]
R2 rulyjonu;Trial Version Drop Shadow; C:\Program Files (x86)\F9C06E00-1436898156-81E1-3C3C-3085A915A406\knsj124C.tmp [2015-09-24 1002496]
R2 SSFK;SSFK; C:\Program Files (x86)\SFK\SSFK.exe [2015-09-24 458400]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-25 410744]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-07-06 27792]
R2 vicoqudu;Encyclopaedia Enter; C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\hnsb9A2C.tmp [2015-07-14 165376]
R2 zejytose;Typewriter High Resolution; C:\Users\Home\AppData\Roaming\F9C06E00-1436898156-81E1-3C3C-3085A915A406\jnsr7904.tmp [2015-07-14 199168]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2013-05-08 3385584]
R3 Disc Soft Ultra Bus Service;Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [2015-08-06 1345880]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-24 68608]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-24 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-24 68608]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-28 149160]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2013-05-08 273136]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-12 838336]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-05-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[vyosek]

Zdravim

Jedna se o domaci nebo nejake pracovni\firemni PC???

[nakr]

zdravim jedna sa o domaci nb . pardon ze pisem teraz no nevedel som sa dostat na mail k heslu... ale k teme zmazal som neake gamecopdeskotplay.exe 10x plus neaku ikonu anyprotecta po ktorej stacilo prejst a uz vybehli x stranky zatial to vyzera ze to zabralo nic nevyskakuje neseka

[nakr]

vratilo sa to opet to tu vyskakuje cize problem ostava :/

[vyosek]

Jen se tedy jeste s dovolenim zeptam, kde jste prisel k verzi Windows 7 Enterprise, ktery neni bezne k zakoupeni a je urcen pro firemni klientelu??