Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský shit

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský shit

#1 Příspěvek od tom6878 »

Prosím o kontrolu logu - omylem jsem si nainstaloval nějaký ruský shit, místo programu co jsem chtěl (no prostě jsem naletěl nějakýmu hajzlovi)...Hned se mi změnily prohlížeče za nějaký jiný co vůbec neznám a celkově se děje s pc něco podivnýho...Většinu věcí co jsem našel jsem už snad odstranil, ale radši bych pomoc někoho zkušenýho.... Děkuju za pomoc


Logfile of random's system information tool 1.10 (written by random/random)
Run by TomC78 at 2015-10-22 19:31:35
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 75 GB (58%) free of 130 GB
Total RAM: 8098 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:31:39, on 22.10.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Programy\Mozilla\firefox.exe
C:\Program Files\trend micro\TomC78.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0633EE93-D776-472f-A0FF-E1416B8B2E3D} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [uTorrent] "C:\Programy\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_84D8D00D1E9B63C5CBCCD6E67527BC55] "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SearchProtectService (SPS) - Unknown owner - C:\Windows\SysWOW64\SearchProtectService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7508 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2244
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" bec0871d-6f1f-49dc-896b-ca14d3de52e1
\??\C:\Windows\system32\conhost.exe "1517947501109947585-7224734531945824649-9884521132045904871094410197176361507
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "5993450571454993186284009789-282776906-71266731-399833418519737992019691273
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC

C:\Programy\Mozilla\firefox.exe http://cooocs.com
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe25_ Global\UsGthrCtrlFltPipeMssGthrPipe25 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\TomC78\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_pepper.exe -check pepperplugin

=========Mozilla firefox=========

ProfilePath - C:\Users\TomC78\AppData\Roaming\Mozilla\Firefox\Profiles\de89abqh.default

prefs.js - "browser.startup.homepage" - "http://www.thesettlersonline.cz/cs/domo ... r%C3%A1nka"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Programy\VLC Player\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-25 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-25 559624]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Programy\uTorrent\uTorrent.exe [2015-08-26 328568]
"GoogleChromeAutoLaunch_84D8D00D1E9B63C5CBCCD6E67527BC55"=C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe [2015-08-29 636928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_207_Plugin.exe [2015-10-15 1157320]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-22 19:31:35 ----D---- C:\rsit
2015-10-22 19:31:35 ----D---- C:\Program Files\trend micro
2015-10-22 19:29:44 ----A---- C:\Windows\system32\drivers\asw8714.tmp
2015-10-22 19:29:44 ----A---- C:\Windows\system32\drivers\asw8426.tmp
2015-10-22 19:29:43 ----A---- C:\Windows\system32\drivers\asw8138.tmp
2015-10-22 19:29:42 ----A---- C:\Windows\system32\drivers\asw7E5A.tmp
2015-10-22 19:29:41 ----A---- C:\Windows\system32\drivers\asw7B0F.tmp
2015-10-22 19:29:41 ----A---- C:\Windows\system32\drivers\asw78BD.tmp
2015-10-22 19:29:40 ----A---- C:\Windows\system32\drivers\asw7562.tmp
2015-10-22 19:29:37 ----A---- C:\Windows\system32\drivers\asw6C4C.tmp
2015-10-22 19:29:37 ----A---- C:\Windows\system32\aswBoot.exe
2015-10-22 19:29:29 ----A---- C:\Windows\avastSS.scr
2015-10-22 19:09:04 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2015-10-22 19:09:04 ----A---- C:\Windows\SYSWOW64\SearchProtectService.exe
2015-10-22 19:08:40 ----D---- C:\Program Files (x86)\MyBrowser
2015-10-14 21:33:02 ----D---- C:\Users\TomC78\AppData\Roaming\NVIDIA
2015-10-08 13:37:35 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-10-08 13:37:20 ----D---- C:\ProgramData\NVIDIA
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvvsvc.exe
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvcr.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvc64.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvshext.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvmctray.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvcpl.dll
2015-10-08 13:36:46 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-10-08 13:36:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdap64.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglv64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvinitx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFR64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvFBC64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispgenco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-27 19:08:09 ----D---- C:\Windows\RegisteredPackages
2015-09-27 19:08:08 ----HD---- C:\Windows\msdownld.tmp
2015-09-27 19:08:06 ----D---- C:\Program Files (x86)\Windows Media Components
2015-09-27 09:51:47 ----SD---- C:\Windows\SYSWOW64\GWX
2015-09-27 09:51:47 ----SD---- C:\Windows\system32\GWXfuck
2015-09-27 01:51:49 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-09-26 11:56:20 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\InkEd.dll
2015-09-26 11:56:18 ----A---- C:\Windows\system32\wksprt.exe
2015-09-26 11:56:18 ----A---- C:\Windows\system32\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-09-26 11:56:13 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpudd.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpcorets.dll
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\urlmon.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-26 11:55:56 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\vbscript.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iesetup.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iertutil.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieui.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieframe.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\wininet.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\msrating.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\mshtml.dll
2015-09-26 11:54:41 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3.dll
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\kernel32.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64win.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\winsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srcore.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\smss.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rstrui.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsass.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\conhost.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\adtschema.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\win32k.sys
2015-09-26 11:54:09 ----A---- C:\Windows\system32\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmfd.dll
2015-09-26 11:54:06 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wucltux.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuapi.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups2.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-25 19:32:15 ----D---- C:\ProgramData\Freemake
2015-09-25 17:21:52 ----D---- C:\Windows\cs
2015-09-25 17:21:10 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-25 17:20:26 ----D---- C:\Windows\PCHEALTH
2015-09-25 17:20:00 ----D---- C:\Program Files (x86)\Windows Live
2015-09-24 13:20:57 ----D---- C:\Users\TomC78\AppData\Roaming\A

======List of files/folders modified in the last 1 month======

2015-10-22 19:31:37 ----D---- C:\Windows\Temp
2015-10-22 19:31:35 ----RD---- C:\Program Files
2015-10-22 19:29:59 ----D---- C:\Windows\system32\Tasks
2015-10-22 19:29:44 ----D---- C:\Windows\system32\drivers
2015-10-22 19:29:37 ----D---- C:\Windows\System32
2015-10-22 19:29:35 ----D---- C:\Windows
2015-10-22 19:28:47 ----SHD---- C:\System Volume Information
2015-10-22 19:27:11 ----RD---- C:\Programy
2015-10-22 19:15:13 ----RD---- C:\Program Files (x86)
2015-10-22 19:15:10 ----D---- C:\Windows\Tasks
2015-10-22 19:13:29 ----RD---- C:\Downloads
2015-10-22 19:12:43 ----D---- C:\Users\TomC78\AppData\Roaming\uTorrent
2015-10-22 19:12:43 ----D---- C:\Users\TomC78\AppData\Roaming\DAEMON Tools Lite
2015-10-22 19:12:32 ----D---- C:\Windows\SoftwareDistribution
2015-10-22 19:12:32 ----D---- C:\Windows\inf
2015-10-22 19:09:34 ----HD---- C:\ProgramData
2015-10-22 19:09:34 ----D---- C:\Windows\system32\GroupPolicy
2015-10-22 19:09:05 ----D---- C:\Windows\SysWOW64
2015-10-22 19:07:55 ----D---- C:\Windows\Prefetch
2015-10-22 19:02:31 ----D---- C:\Users\TomC78\AppData\Roaming\vlc
2015-10-22 01:07:52 ----D---- C:\Users\TomC78\AppData\Roaming\Skype
2015-10-20 14:03:15 ----D---- C:\Program Files (x86)\Rockstar Games
2015-10-20 14:03:06 ----D---- C:\Program Files\Rockstar Games
2015-10-15 11:23:37 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-14 16:45:24 ----D---- C:\Windows\system32\config
2015-10-12 15:57:46 ----D---- C:\Users\TomC78\AppData\Roaming\MPC-HC
2015-10-12 15:56:58 ----D---- C:\Windows\Logs
2015-10-12 15:56:58 ----D---- C:\Windows\debug
2015-10-08 13:37:57 ----D---- C:\ProgramData\NVIDIA Corporation
2015-10-08 13:37:34 ----D---- C:\Windows\system32\DriverStore
2015-10-08 13:36:54 ----D---- C:\Windows\Help
2015-10-08 13:36:54 ----D---- C:\Program Files\NVIDIA Corporation
2015-10-08 13:36:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-10-08 13:36:30 ----D---- C:\Windows\system32\catroot2
2015-09-28 15:19:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-28 15:15:34 ----SD---- C:\ProgramData\Microsoft
2015-09-28 15:15:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-09-27 19:08:23 ----SHD---- C:\Windows\Installer
2015-09-27 19:06:55 ----RSD---- C:\Windows\Fonts
2015-09-27 19:06:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-27 19:06:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-27 18:19:05 ----D---- C:\Windows\rescache
2015-09-27 10:22:04 ----D---- C:\Windows\Microsoft.NET
2015-09-27 10:20:24 ----RSD---- C:\Windows\assembly
2015-09-27 09:54:36 ----D---- C:\Windows\winsxs
2015-09-27 09:51:48 ----D---- C:\Program Files\Windows Journal
2015-09-27 09:51:47 ----D---- C:\Windows\ehome
2015-09-27 09:51:41 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-27 09:51:41 ----D---- C:\Program Files\Internet Explorer
2015-09-27 09:51:40 ----D---- C:\Windows\system32\en-US
2015-09-27 09:51:40 ----D---- C:\Windows\PolicyDefinitions
2015-09-27 09:51:39 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-27 09:51:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-27 09:51:37 ----D---- C:\Windows\system32\cs-CZ
2015-09-27 09:51:34 ----D---- C:\Windows\AppPatch
2015-09-27 09:51:33 ----D---- C:\Windows\system32\Boot
2015-09-27 01:59:22 ----D---- C:\Windows\system32\MRT
2015-09-25 17:20:28 ----D---- C:\Program Files\Common Files\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-10-22 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-10-22 274808]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-08-26 118560]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2013-10-21 213848]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-08-26 276256]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-10-22 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-10-22 1049880]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-10-22 448968]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-08-26 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-10-22 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-10-22 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-10-22 153744]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-10-03 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-27 805088]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2014-05-30 943136]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-08-25 146600]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2013-10-21 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-27 1155192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-27 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-27 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-10-03 938800]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-10-03 417400]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2003-11-12 49152]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S2 SPS;SearchProtectService; C:\Windows\SysWOW64\SearchProtectService.exe [2015-10-22 828416]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-10-14 838224]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-26 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#3 Příspěvek od tom6878 »

# AdwCleaner v5.014 - Logfile created 22/10/2015 at 19:54:12
# Updated 18/10/2015 by Xplode
# Database : 2015-10-18.5 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : TomC78 - HENDRIX
# Running from : C:\Users\TomC78\Desktop\adwcleaner_5.014.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\MyBrowser
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[-] Folder Deleted : C:\Users\TomC78\AppData\Local\MyBrowser

***** [ Files ] *****

[-] File Deleted : C:\Users\TomC78\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MyBrowser.lnk

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [MyBrowser]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A563926-CF4B-4363-A760-F71E46205B7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{357D32FC-F0AE-4B37-B36F-D44AA31496F5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80B3B43F-7508-4627-BE66-00FB9AE5EE72}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5A83D7C9-4A14-4000-BC05-389268238753}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0633EE93-D776-472F-A0FF-E1416B8B2E3D}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{357D32FC-F0AE-4B37-B36F-D44AA31496F5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{80B3B43F-7508-4627-BE66-00FB9AE5EE72}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3D}
[-] Key Deleted : HKCU\Software\IM
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\Torrent Search
[-] Key Deleted : HKCU\Software\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\Torrent Search
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser
[!] Key Not Deleted : [x64] HKCU\Software\IM
[!] Key Not Deleted : [x64] HKCU\Software\CrossBrowser
[!] Key Not Deleted : [x64] HKCU\Software\Crossbrowse
[!] Key Not Deleted : [x64] HKCU\Software\Torrent Search
[!] Key Not Deleted : [x64] HKCU\Software\MyBrowser

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3215 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#5 Příspěvek od tom6878 »

Tady je...

Logfile of random's system information tool 1.10 (written by random/random)
Run by TomC78 at 2015-10-22 21:11:52
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 75 GB (58%) free of 130 GB
Total RAM: 8098 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:11:53, on 22.10.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Programy\uTorrent\uTorrent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\trend micro\TomC78.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [uTorrent] "C:\Programy\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_84D8D00D1E9B63C5CBCCD6E67527BC55] "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SearchProtectService (SPS) - Unknown owner - C:\Windows\SysWOW64\SearchProtectService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7465 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\SysWOW64\SearchProtectService.exe
"C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Programy\uTorrent\uTorrent.exe"
WLIDSvcM.exe 2136
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" bec0871d-6f1f-49dc-896b-ca14d3de52e1
\??\C:\Windows\system32\conhost.exe "-762357802611973208-874746602-3103426892016802775-172985508111875592751042824336
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-135958979512517478817100339441397890670-12511888321475409076161515898439240078
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\NOTEPAD.EXE" C:\Moje\něco.txt

C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\TomC78\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_pepper.exe -check pepperplugin

=========Mozilla firefox=========

ProfilePath - C:\Users\TomC78\AppData\Roaming\Mozilla\Firefox\Profiles\de89abqh.default

prefs.js - "browser.startup.homepage" - "http://www.thesettlersonline.cz/cs/domo ... r%C3%A1nka"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Programy\VLC Player\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-25 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-25 559624]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Programy\uTorrent\uTorrent.exe [2015-08-26 328568]
"GoogleChromeAutoLaunch_84D8D00D1E9B63C5CBCCD6E67527BC55"=C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe --no-startup-window []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_207_Plugin.exe [2015-10-15 1157320]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-22 6134544]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-22 19:53:12 ----D---- C:\AdwCleaner
2015-10-22 19:31:35 ----D---- C:\rsit
2015-10-22 19:31:35 ----D---- C:\Program Files\trend micro
2015-10-22 19:29:37 ----A---- C:\Windows\system32\aswBoot.exe
2015-10-22 19:29:29 ----A---- C:\Windows\avastSS.scr
2015-10-22 19:09:04 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2015-10-22 19:09:04 ----A---- C:\Windows\SYSWOW64\SearchProtectService.exe
2015-10-14 21:33:02 ----D---- C:\Users\TomC78\AppData\Roaming\NVIDIA
2015-10-08 13:37:35 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-10-08 13:37:20 ----D---- C:\ProgramData\NVIDIA
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvvsvc.exe
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvcr.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvc64.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvshext.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvmctray.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvcpl.dll
2015-10-08 13:36:46 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-10-08 13:36:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdap64.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglv64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvinitx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFR64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvFBC64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispgenco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-27 19:08:09 ----D---- C:\Windows\RegisteredPackages
2015-09-27 19:08:08 ----HD---- C:\Windows\msdownld.tmp
2015-09-27 19:08:06 ----D---- C:\Program Files (x86)\Windows Media Components
2015-09-27 09:51:47 ----SD---- C:\Windows\SYSWOW64\GWX
2015-09-27 09:51:47 ----SD---- C:\Windows\system32\GWXfuck
2015-09-27 01:51:49 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-09-26 11:56:20 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\InkEd.dll
2015-09-26 11:56:18 ----A---- C:\Windows\system32\wksprt.exe
2015-09-26 11:56:18 ----A---- C:\Windows\system32\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-09-26 11:56:13 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpudd.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpcorets.dll
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\urlmon.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-26 11:55:56 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\vbscript.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iesetup.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iertutil.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieui.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieframe.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\wininet.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\msrating.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\mshtml.dll
2015-09-26 11:54:41 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3.dll
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\kernel32.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64win.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\winsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srcore.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\smss.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rstrui.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsass.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\conhost.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\adtschema.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\win32k.sys
2015-09-26 11:54:09 ----A---- C:\Windows\system32\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmfd.dll
2015-09-26 11:54:06 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wucltux.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuapi.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups2.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-25 19:32:15 ----D---- C:\ProgramData\Freemake
2015-09-25 17:21:52 ----D---- C:\Windows\cs
2015-09-25 17:21:10 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-25 17:20:26 ----D---- C:\Windows\PCHEALTH
2015-09-25 17:20:00 ----D---- C:\Program Files (x86)\Windows Live
2015-09-24 13:20:57 ----D---- C:\Users\TomC78\AppData\Roaming\A

======List of files/folders modified in the last 1 month======

2015-10-22 21:11:52 ----D---- C:\Windows\Temp
2015-10-22 21:11:48 ----D---- C:\Users\TomC78\AppData\Roaming\uTorrent
2015-10-22 19:55:53 ----D---- C:\Windows\system32\drivers
2015-10-22 19:55:25 ----D---- C:\Windows
2015-10-22 19:54:12 ----RD---- C:\Program Files (x86)
2015-10-22 19:52:55 ----RD---- C:\Downloads
2015-10-22 19:31:35 ----RD---- C:\Program Files
2015-10-22 19:29:59 ----D---- C:\Windows\system32\Tasks
2015-10-22 19:29:37 ----D---- C:\Windows\System32
2015-10-22 19:28:47 ----SHD---- C:\System Volume Information
2015-10-22 19:27:11 ----RD---- C:\Programy
2015-10-22 19:15:10 ----D---- C:\Windows\Tasks
2015-10-22 19:12:43 ----D---- C:\Users\TomC78\AppData\Roaming\DAEMON Tools Lite
2015-10-22 19:12:32 ----D---- C:\Windows\SoftwareDistribution
2015-10-22 19:12:32 ----D---- C:\Windows\inf
2015-10-22 19:09:34 ----HD---- C:\ProgramData
2015-10-22 19:09:34 ----D---- C:\Windows\system32\GroupPolicy
2015-10-22 19:09:05 ----D---- C:\Windows\SysWOW64
2015-10-22 19:07:55 ----D---- C:\Windows\Prefetch
2015-10-22 19:02:31 ----D---- C:\Users\TomC78\AppData\Roaming\vlc
2015-10-22 01:07:52 ----D---- C:\Users\TomC78\AppData\Roaming\Skype
2015-10-20 14:03:15 ----D---- C:\Program Files (x86)\Rockstar Games
2015-10-20 14:03:06 ----D---- C:\Program Files\Rockstar Games
2015-10-15 11:23:37 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-14 16:45:24 ----D---- C:\Windows\system32\config
2015-10-12 15:57:46 ----D---- C:\Users\TomC78\AppData\Roaming\MPC-HC
2015-10-12 15:56:58 ----D---- C:\Windows\Logs
2015-10-12 15:56:58 ----D---- C:\Windows\debug
2015-10-08 13:37:57 ----D---- C:\ProgramData\NVIDIA Corporation
2015-10-08 13:37:34 ----D---- C:\Windows\system32\DriverStore
2015-10-08 13:36:54 ----D---- C:\Windows\Help
2015-10-08 13:36:54 ----D---- C:\Program Files\NVIDIA Corporation
2015-10-08 13:36:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-10-08 13:36:30 ----D---- C:\Windows\system32\catroot2
2015-09-28 15:19:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-28 15:15:34 ----SD---- C:\ProgramData\Microsoft
2015-09-28 15:15:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-09-27 19:08:23 ----SHD---- C:\Windows\Installer
2015-09-27 19:06:55 ----RSD---- C:\Windows\Fonts
2015-09-27 19:06:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-27 19:06:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-27 18:19:05 ----D---- C:\Windows\rescache
2015-09-27 10:22:04 ----D---- C:\Windows\Microsoft.NET
2015-09-27 10:20:24 ----RSD---- C:\Windows\assembly
2015-09-27 09:54:36 ----D---- C:\Windows\winsxs
2015-09-27 09:51:48 ----D---- C:\Program Files\Windows Journal
2015-09-27 09:51:47 ----D---- C:\Windows\ehome
2015-09-27 09:51:41 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-27 09:51:41 ----D---- C:\Program Files\Internet Explorer
2015-09-27 09:51:40 ----D---- C:\Windows\system32\en-US
2015-09-27 09:51:40 ----D---- C:\Windows\PolicyDefinitions
2015-09-27 09:51:39 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-27 09:51:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-27 09:51:37 ----D---- C:\Windows\system32\cs-CZ
2015-09-27 09:51:34 ----D---- C:\Windows\AppPatch
2015-09-27 09:51:33 ----D---- C:\Windows\system32\Boot
2015-09-27 01:59:22 ----D---- C:\Windows\system32\MRT
2015-09-25 17:20:28 ----D---- C:\Program Files\Common Files\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-10-22 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-10-22 274808]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-08-26 118560]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2013-10-21 213848]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-08-26 276256]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-10-22 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-10-22 1049880]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-10-22 448968]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-08-26 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-10-22 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-10-22 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-10-22 153744]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-10-03 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-27 805088]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2014-05-30 943136]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-22 146600]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2013-10-21 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-27 1155192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-27 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-27 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-10-03 938800]
R2 SPS;SearchProtectService; C:\Windows\SysWOW64\SearchProtectService.exe [2015-10-22 828416]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-10-03 417400]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2003-11-12 49152]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-10-14 838224]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-26 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
c:\Program Files (x86)\MyBrowser
C:\Windows\msdownld.tmp

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_84D8D00D1E9B63C5CBCCD6E67527BC55"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#7 Příspěvek od tom6878 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by TomC78 at 2015-10-22 21:32:45
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 75 GB (58%) free of 130 GB
Total RAM: 8098 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:32:47, on 22.10.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\TomC78\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Programy\uTorrent\uTorrent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\TomC78.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://cosmosearch.ru/?ri=1&rsid=804e3d ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [uTorrent] "C:\Programy\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SearchProtectService (SPS) - Unknown owner - C:\Windows\SysWOW64\SearchProtectService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7386 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Windows\SysWOW64\SearchProtectService.exe
"C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
WLIDSvcM.exe 2244
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" bec0871d-6f1f-49dc-896b-ca14d3de52e1
\??\C:\Windows\system32\conhost.exe "1076720593697559274-1862481345-561679626-43402567858471571-207149218888729271
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "20305977894151340551717491735267088128-134706794218257195431817321782-2882449
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Users\TomC78\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe"
taskeng.exe {6932CD08-198D-467A-91D5-A06F79561129}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\10222015_212937.log
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Programy\uTorrent\uTorrent.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\TomC78\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_pepper.exe -check pepperplugin

=========Mozilla firefox=========

ProfilePath - C:\Users\TomC78\AppData\Roaming\Mozilla\Firefox\Profiles\de89abqh.default

prefs.js - "browser.startup.homepage" - "http://www.thesettlersonline.cz/cs/domo ... r%C3%A1nka"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Programy\VLC Player\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.207 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-25 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-25 559624]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Programy\uTorrent\uTorrent.exe [2015-08-26 328568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_207_Plugin.exe [2015-10-15 1157320]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-22 6134544]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-22 21:29:37 ----D---- C:\_OTM
2015-10-22 19:53:12 ----D---- C:\AdwCleaner
2015-10-22 19:31:35 ----D---- C:\rsit
2015-10-22 19:31:35 ----D---- C:\Program Files\trend micro
2015-10-22 19:29:37 ----A---- C:\Windows\system32\aswBoot.exe
2015-10-22 19:29:29 ----A---- C:\Windows\avastSS.scr
2015-10-22 19:09:04 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2015-10-22 19:09:04 ----A---- C:\Windows\SYSWOW64\SearchProtectService.exe
2015-10-14 21:33:02 ----D---- C:\Users\TomC78\AppData\Roaming\NVIDIA
2015-10-08 13:37:35 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-10-08 13:37:20 ----D---- C:\ProgramData\NVIDIA
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvvsvc.exe
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvcr.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvsvc64.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvshext.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvmctray.dll
2015-10-08 13:36:55 ----A---- C:\Windows\system32\nvcpl.dll
2015-10-08 13:36:46 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-10-08 13:36:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdap64.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-10-08 13:34:48 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvopencl.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglv64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvinitx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvIFR64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\NvFBC64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispgenco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvdispco6435850.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuvid.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcuda.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvcompiler.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-10-08 13:34:47 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-27 19:08:09 ----D---- C:\Windows\RegisteredPackages
2015-09-27 19:08:06 ----D---- C:\Program Files (x86)\Windows Media Components
2015-09-27 09:51:47 ----SD---- C:\Windows\SYSWOW64\GWX
2015-09-27 09:51:47 ----SD---- C:\Windows\system32\GWXfuck
2015-09-27 01:51:49 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-09-26 11:56:20 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-26 11:56:20 ----A---- C:\Windows\system32\InkEd.dll
2015-09-26 11:56:18 ----A---- C:\Windows\system32\wksprt.exe
2015-09-26 11:56:18 ----A---- C:\Windows\system32\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-09-26 11:56:17 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\tsgqec.dll
2015-09-26 11:56:17 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-09-26 11:56:13 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpudd.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-09-26 11:56:09 ----A---- C:\Windows\system32\rdpcorets.dll
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-09-26 11:56:06 ----A---- C:\Windows\system32\KBDRU.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-09-26 11:56:05 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\iernonce.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-26 11:55:58 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-26 11:55:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-26 11:55:57 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-26 11:55:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\urlmon.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-26 11:55:56 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-26 11:55:56 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-26 11:55:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\vbscript.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iesetup.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\iertutil.dll
2015-09-26 11:55:55 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-26 11:55:54 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieui.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\ieframe.dll
2015-09-26 11:55:54 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\wininet.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript9.dll
2015-09-26 11:55:53 ----A---- C:\Windows\system32\jscript.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\msrating.dll
2015-09-26 11:55:52 ----A---- C:\Windows\system32\mshtml.dll
2015-09-26 11:54:41 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml6.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-26 11:54:39 ----A---- C:\Windows\system32\msxml3.dll
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-26 11:54:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-26 11:54:33 ----A---- C:\Windows\system32\ntdll.dll
2015-09-26 11:54:33 ----A---- C:\Windows\system32\kernel32.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-26 11:54:32 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64win.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wow64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\winsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\wdigest.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\sspicli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srcore.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\srclient.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\smss.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\schannel.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\secur32.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rstrui.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpchttp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msobjs.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\msaudite.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsass.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\kerberos.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-26 11:54:32 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\credssp.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\conhost.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\certcli.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\auditpol.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-26 11:54:32 ----A---- C:\Windows\system32\appidapi.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-26 11:54:32 ----A---- C:\Windows\system32\adtschema.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\win32k.sys
2015-09-26 11:54:09 ----A---- C:\Windows\system32\lpk.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\fontsub.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\dciman32.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmlib.dll
2015-09-26 11:54:09 ----A---- C:\Windows\system32\atmfd.dll
2015-09-26 11:54:06 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wucltux.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-26 11:54:06 ----A---- C:\Windows\system32\wuapi.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups2.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wups.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wudriver.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wuapp.exe
2015-09-26 11:54:05 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-26 11:54:05 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-25 19:32:15 ----D---- C:\ProgramData\Freemake
2015-09-25 17:21:52 ----D---- C:\Windows\cs
2015-09-25 17:21:10 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-25 17:20:26 ----D---- C:\Windows\PCHEALTH
2015-09-25 17:20:00 ----D---- C:\Program Files (x86)\Windows Live
2015-09-24 13:20:57 ----D---- C:\Users\TomC78\AppData\Roaming\A

======List of files/folders modified in the last 1 month======

2015-10-22 21:32:28 ----D---- C:\Users\TomC78\AppData\Roaming\uTorrent
2015-10-22 21:31:45 ----D---- C:\Windows\Temp
2015-10-22 21:29:37 ----D---- C:\Windows
2015-10-22 21:28:58 ----RD---- C:\Downloads
2015-10-22 19:55:53 ----D---- C:\Windows\system32\drivers
2015-10-22 19:54:12 ----RD---- C:\Program Files (x86)
2015-10-22 19:31:35 ----RD---- C:\Program Files
2015-10-22 19:29:59 ----D---- C:\Windows\system32\Tasks
2015-10-22 19:29:37 ----D---- C:\Windows\System32
2015-10-22 19:28:47 ----SHD---- C:\System Volume Information
2015-10-22 19:27:11 ----RD---- C:\Programy
2015-10-22 19:15:10 ----D---- C:\Windows\Tasks
2015-10-22 19:12:43 ----D---- C:\Users\TomC78\AppData\Roaming\DAEMON Tools Lite
2015-10-22 19:12:32 ----D---- C:\Windows\SoftwareDistribution
2015-10-22 19:12:32 ----D---- C:\Windows\inf
2015-10-22 19:09:34 ----HD---- C:\ProgramData
2015-10-22 19:09:34 ----D---- C:\Windows\system32\GroupPolicy
2015-10-22 19:09:05 ----D---- C:\Windows\SysWOW64
2015-10-22 19:07:55 ----D---- C:\Windows\Prefetch
2015-10-22 19:02:31 ----D---- C:\Users\TomC78\AppData\Roaming\vlc
2015-10-22 01:07:52 ----D---- C:\Users\TomC78\AppData\Roaming\Skype
2015-10-20 14:03:15 ----D---- C:\Program Files (x86)\Rockstar Games
2015-10-20 14:03:06 ----D---- C:\Program Files\Rockstar Games
2015-10-15 11:23:37 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-14 16:45:24 ----D---- C:\Windows\system32\config
2015-10-12 15:57:46 ----D---- C:\Users\TomC78\AppData\Roaming\MPC-HC
2015-10-12 15:56:58 ----D---- C:\Windows\Logs
2015-10-12 15:56:58 ----D---- C:\Windows\debug
2015-10-08 13:37:57 ----D---- C:\ProgramData\NVIDIA Corporation
2015-10-08 13:37:34 ----D---- C:\Windows\system32\DriverStore
2015-10-08 13:36:54 ----D---- C:\Windows\Help
2015-10-08 13:36:54 ----D---- C:\Program Files\NVIDIA Corporation
2015-10-08 13:36:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-10-08 13:36:30 ----D---- C:\Windows\system32\catroot2
2015-09-28 15:19:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-28 15:15:34 ----SD---- C:\ProgramData\Microsoft
2015-09-28 15:15:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-09-27 19:08:23 ----SHD---- C:\Windows\Installer
2015-09-27 19:06:55 ----RSD---- C:\Windows\Fonts
2015-09-27 19:06:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-27 19:06:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-27 18:19:05 ----D---- C:\Windows\rescache
2015-09-27 10:22:04 ----D---- C:\Windows\Microsoft.NET
2015-09-27 10:20:24 ----RSD---- C:\Windows\assembly
2015-09-27 09:54:36 ----D---- C:\Windows\winsxs
2015-09-27 09:51:48 ----D---- C:\Program Files\Windows Journal
2015-09-27 09:51:47 ----D---- C:\Windows\ehome
2015-09-27 09:51:41 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-27 09:51:41 ----D---- C:\Program Files\Internet Explorer
2015-09-27 09:51:40 ----D---- C:\Windows\system32\en-US
2015-09-27 09:51:40 ----D---- C:\Windows\PolicyDefinitions
2015-09-27 09:51:39 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-27 09:51:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-27 09:51:37 ----D---- C:\Windows\system32\cs-CZ
2015-09-27 09:51:34 ----D---- C:\Windows\AppPatch
2015-09-27 09:51:33 ----D---- C:\Windows\system32\Boot
2015-09-27 01:59:22 ----D---- C:\Windows\system32\MRT
2015-09-25 17:20:28 ----D---- C:\Program Files\Common Files\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-10-22 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-10-22 274808]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-08-26 118560]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2013-10-21 213848]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-08-26 276256]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-10-22 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-10-22 1049880]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-10-22 448968]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-08-26 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-10-22 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-10-22 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-10-22 153744]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-10-03 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-27 805088]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2014-05-30 943136]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-22 146600]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2013-10-21 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-27 1155192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-27 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-27 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-10-03 938800]
R2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
R2 SPS;SearchProtectService; C:\Windows\SysWOW64\SearchProtectService.exe [2015-10-22 828416]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-10-03 417400]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2003-11-12 49152]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-10-14 838224]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-26 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#8 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\TomC78.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://cosmosearch.ru/?ri=1&rsid=804e3d ... ccd919d&q=
R3 - Default URLSearchHook is missing
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#9 Příspěvek od tom6878 »

Tak jsem všechno udělal.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#10 Příspěvek od Rudy »

Změnilo se něco?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#11 Příspěvek od tom6878 »

Jo zdá se že všechno jede zase normálně...jestli tam už nic není, tak vám moc děkuju za rychlou pomoc.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#12 Příspěvek od Rudy »

Mělo by to být všechno. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tom6878
Návštěvník
Návštěvník
Příspěvky: 138
Registrován: 14 dub 2009 00:02

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#13 Příspěvek od tom6878 »

Právě že mam za co děkovat (nechtělo by se mi zrovně ted přeinstalovávat windows)....tak ještě jednou Díky!
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119428
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu-omylem jsem nainstaloval nějaký ruský

#14 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“