Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosim o kontrolu spomalene nacitavanie webu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

prosim o kontrolu spomalene nacitavanie webu

#1 Příspěvek od radoslav »

Logfile of random's system information tool 1.10 (written by random/random)
Run by 05667 at 2016-01-13 08:29:14
Microsoft Windows 8.1
System drive C: has 357 GB (78%) free of 455 GB
Total RAM: 3982 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:29:16, on 13.1.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\05667.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [ProductUpdater] C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE /FU "C:\WINDOWS\TEMP\E_SE588.tmp" /EF "HKCU"
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAH\FAHConsole.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9119 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {8221c6c7-2f5c-4a46-bf66c6ed54d31bc5}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
taskhostex.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
KBFiltr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3536.0.1283313124\1153970486" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/AllExceptAsyncScripts_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3536.2.1827242812\765778402" --font-cache-shared-handle=2236 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/AllExceptAsyncScripts_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3536.4.1793777841\528195941" --font-cache-shared-handle=4236 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/AllExceptAsyncScripts_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3536.6.610589255\372460280" --font-cache-shared-handle=5112 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/AllExceptAsyncScripts_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3536.8.781849225\841448896" --font-cache-shared-handle=5028 /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/AllExceptAsyncScripts_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/*SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3536.10.836879549\1973578299" --font-cache-shared-handle=5564 /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Users\05667\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Epson Printer Software Downloader.job - C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-23 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-23 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-13 12936848]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-09-11 107192]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX110 Series"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [2008-09-27 223232]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"EEventManager"=C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [2009-04-07 673616]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-10 3890208]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"ProductUpdater"=C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [2015-12-16 73216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAH\FAHConsole.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-01-04 18:54:42 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-20 20:58:27 ----D---- C:\ProgramData\Freemake
2015-12-20 20:58:05 ----D---- C:\Program Files (x86)\Freemake
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2015-12-20 20:44:24 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx10.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2015-12-20 20:41:18 ----HD---- C:\WINDOWS\msdownld.tmp
2015-12-20 20:41:06 ----D---- C:\WINDOWS\SYSWOW64\directx
2015-12-20 20:35:19 ----D---- C:\Program Files (x86)\Free WMA to MP3 Converter

======List of files/folders modified in the last 1 month======

2016-01-13 08:29:16 ----D---- C:\Program Files\trend micro
2016-01-13 08:17:13 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-01-13 08:15:27 ----D---- C:\WINDOWS\Temp
2016-01-13 08:12:59 ----D---- C:\Program Files (x86)\FastShare
2016-01-13 08:10:39 ----D---- C:\WINDOWS\Prefetch
2016-01-13 00:00:00 ----D---- C:\WINDOWS\system32\sru
2016-01-12 23:23:45 ----D---- C:\Users\05667\AppData\Roaming\vlc
2016-01-12 18:42:39 ----D---- C:\Users\05667\AppData\Roaming\Skype
2016-01-12 13:25:01 ----SHD---- C:\System Volume Information
2016-01-12 13:20:02 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-12 13:18:31 ----D---- C:\WINDOWS\AppReadiness
2016-01-12 13:18:30 ----HD---- C:\Program Files\WindowsApps
2016-01-11 06:23:51 ----RD---- C:\WINDOWS\System32
2016-01-11 06:23:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-11 06:23:50 ----D---- C:\WINDOWS\Inf
2016-01-09 10:25:59 ----D---- C:\WINDOWS\system32\catroot2
2016-01-04 18:54:58 ----D---- C:\Windows
2016-01-04 18:52:06 ----D---- C:\WINDOWS\system32\NDF
2016-01-04 11:17:14 ----D---- C:\WINDOWS\SoftwareDistribution
2016-01-04 10:48:58 ----D---- C:\Program Files (x86)\Opera
2016-01-04 10:48:54 ----D---- C:\Users\05667\AppData\Roaming\Opera Software
2016-01-04 10:48:45 ----D---- C:\WINDOWS\system32\Tasks
2016-01-04 10:09:10 ----D---- C:\WINDOWS\Logs
2015-12-27 21:35:49 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-20 20:58:27 ----HD---- C:\ProgramData
2015-12-20 20:58:27 ----D---- C:\Program Files (x86)\Common Files
2015-12-20 20:58:05 ----RD---- C:\Program Files (x86)
2015-12-20 20:48:30 ----D---- C:\WINDOWS\system32\config
2015-12-20 20:44:33 ----D---- C:\WINDOWS\SysWOW64

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-23 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-23 208416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-24 645952]
R0 SCMNdisP;@oem103.inf,%SCMNDISP_Desc%;General NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\scmndisp.sys [2007-01-19 25312]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-23 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-05-17 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-05-17 423240]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-23 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-05-17 85328]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\WINDOWS\system32\DRIVERS\RMCAST.sys [2013-08-22 144384]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 ATP;@oem7.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-12-12 70928]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 HIDSwitch;@oem6.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-07-17 4094608]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem27.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-22 26008]
R3 kbfiltr;@oem5.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem19.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 RSBASTOR;@oem3.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-07-03 295056]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-04-23 29208]
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\C:\eSupport\eDriver\I386\AsPrOb64.sys [2010-05-26 12416]
S3 BCMH43XX;@oem23.inf,%BCMH43XX_Service_DispName%;Broadcom 802.11 USB Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwlhigh664.sys [2015-02-10 1255672]
S3 bthav;@oem10.inf,%AVFilter.SvcDesc%;Bluetooth AV Profile; C:\WINDOWS\system32\drivers\bthav.sys [2008-07-10 40448]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-03 1200640]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-07-03 81920]
S3 dc3d;@oem9.inf,%dc3d.SvcDesc%;MS Hardware Device Detection Driver (USB); C:\WINDOWS\System32\drivers\dc3d.sys [2011-05-18 47616]
S3 dg_ssudbus;@oem101.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem26.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-22 39320]
S3 NPF;Netgroup Packet Filter; C:\WINDOWS\system32\DRIVERS\npf.sys []
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-06-27 167424]
S3 RtkBtFilter;@oem28.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-07-29 47320]
S3 ssudmdm;@oem75.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 USBAAPL64;@oem73.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-12-13 121088]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\WINDOWS\System32\drivers\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-06 110976]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-13 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-07-22 625632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#3 Příspěvek od radoslav »

# AdwCleaner v5.029 - Logfile created 13/01/2016 at 21:37:04
# Updated 11/01/2016 by Xplode
# Database : 2016-01-12.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : 05667 - RADOSLAVSR
# Running from : C:\Users\05667\Desktop\adwcleaner_5.029.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\myfree codec
[-] Folder Deleted : C:\Users\05667\AppData\Roaming\OpenCandy

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [778 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#5 Příspěvek od radoslav »

Logfile of random's system information tool 1.10 (written by random/random)
Run by 05667 at 2016-01-14 08:17:07
Microsoft Windows 8.1
System drive C: has 358 GB (79%) free of 455 GB
Total RAM: 3982 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:17:09, on 14.1.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\05667.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [ProductUpdater] C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE /FU "C:\WINDOWS\TEMP\E_SE588.tmp" /EF "HKCU"
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAH\FAHConsole.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9058 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {2d79df26-a9c9-4b60-a322b89d1b99d8ad}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
taskeng.exe {F828C46C-DC88-48AC-803D-138C9587C26A}
taskhostex.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
KBFiltr.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="884.0.1225974908\2064239629" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="884.1.1785866348\1719276847" --font-cache-shared-handle=1912 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="884.2.334131076\955565886" --font-cache-shared-handle=2128 /prefetch:673131151
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="884.4.1903416345\707549764" --font-cache-shared-handle=4112 /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/*SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="884.9.2103263651\1276610446" --font-cache-shared-handle=5532 /prefetch:673131151
"C:\Windows\System32\SettingSyncHost.exe" -Embedding


"C:\Users\05667\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Epson Printer Software Downloader.job - C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-23 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-23 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-13 12936848]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-09-11 107192]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX110 Series"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [2008-09-27 223232]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"EEventManager"=C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [2009-04-07 673616]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-10 3890208]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"ProductUpdater"=C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [2015-12-16 73216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAH\FAHConsole.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-01-13 15:45:38 ----D---- C:\Program Files (x86)\Visible Body Muscle Premium_DVT
2016-01-04 18:54:42 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-20 20:58:27 ----D---- C:\ProgramData\Freemake
2015-12-20 20:58:05 ----D---- C:\Program Files (x86)\Freemake
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2015-12-20 20:44:24 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx10.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2015-12-20 20:41:18 ----HD---- C:\WINDOWS\msdownld.tmp
2015-12-20 20:41:06 ----D---- C:\WINDOWS\SYSWOW64\directx
2015-12-20 20:35:19 ----D---- C:\Program Files (x86)\Free WMA to MP3 Converter

======List of files/folders modified in the last 1 month======

2016-01-14 08:17:09 ----D---- C:\Program Files\trend micro
2016-01-14 08:13:57 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-01-14 08:13:29 ----D---- C:\WINDOWS\Temp
2016-01-13 23:02:00 ----D---- C:\WINDOWS\system32\sru
2016-01-13 21:37:28 ----D---- C:\WINDOWS\Inf
2016-01-13 21:37:18 ----D---- C:\WINDOWS\Prefetch
2016-01-13 21:37:05 ----RD---- C:\Program Files (x86)
2016-01-13 21:37:05 ----D---- C:\AdwCleaner
2016-01-13 18:22:33 ----RD---- C:\WINDOWS\System32
2016-01-13 18:22:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-13 08:12:59 ----D---- C:\Program Files (x86)\FastShare
2016-01-12 23:23:45 ----D---- C:\Users\05667\AppData\Roaming\vlc
2016-01-12 18:42:39 ----D---- C:\Users\05667\AppData\Roaming\Skype
2016-01-12 13:25:01 ----SHD---- C:\System Volume Information
2016-01-12 13:20:02 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-12 13:18:31 ----D---- C:\WINDOWS\AppReadiness
2016-01-12 13:18:30 ----HD---- C:\Program Files\WindowsApps
2016-01-09 10:25:59 ----D---- C:\WINDOWS\system32\catroot2
2016-01-04 18:54:58 ----D---- C:\Windows
2016-01-04 18:52:06 ----D---- C:\WINDOWS\system32\NDF
2016-01-04 11:17:14 ----D---- C:\WINDOWS\SoftwareDistribution
2016-01-04 10:48:58 ----D---- C:\Program Files (x86)\Opera
2016-01-04 10:48:54 ----D---- C:\Users\05667\AppData\Roaming\Opera Software
2016-01-04 10:48:45 ----D---- C:\WINDOWS\system32\Tasks
2016-01-04 10:09:10 ----D---- C:\WINDOWS\Logs
2015-12-27 21:35:49 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-20 20:58:27 ----HD---- C:\ProgramData
2015-12-20 20:58:27 ----D---- C:\Program Files (x86)\Common Files
2015-12-20 20:48:30 ----D---- C:\WINDOWS\system32\config
2015-12-20 20:44:33 ----D---- C:\WINDOWS\SysWOW64

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-23 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-23 208416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-24 645952]
R0 SCMNdisP;@oem103.inf,%SCMNDISP_Desc%;General NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\scmndisp.sys [2007-01-19 25312]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-23 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-05-17 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-05-17 423240]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-23 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-05-17 85328]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\WINDOWS\system32\DRIVERS\RMCAST.sys [2013-08-22 144384]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 ATP;@oem7.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-12-12 70928]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 HIDSwitch;@oem6.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-07-17 4094608]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem27.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-22 26008]
R3 kbfiltr;@oem5.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem19.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 RSBASTOR;@oem3.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-07-03 295056]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-04-23 29208]
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\C:\eSupport\eDriver\I386\AsPrOb64.sys [2010-05-26 12416]
S3 BCMH43XX;@oem23.inf,%BCMH43XX_Service_DispName%;Broadcom 802.11 USB Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwlhigh664.sys [2015-02-10 1255672]
S3 bthav;@oem10.inf,%AVFilter.SvcDesc%;Bluetooth AV Profile; C:\WINDOWS\system32\drivers\bthav.sys [2008-07-10 40448]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-03 1200640]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-07-03 81920]
S3 dc3d;@oem9.inf,%dc3d.SvcDesc%;MS Hardware Device Detection Driver (USB); C:\WINDOWS\System32\drivers\dc3d.sys [2011-05-18 47616]
S3 dg_ssudbus;@oem101.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem26.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-22 39320]
S3 NPF;Netgroup Packet Filter; C:\WINDOWS\system32\DRIVERS\npf.sys []
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-06-27 167424]
S3 RtkBtFilter;@oem28.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-07-29 47320]
S3 ssudmdm;@oem75.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 USBAAPL64;@oem73.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-12-13 121088]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\WINDOWS\System32\drivers\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-06 110976]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-13 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-07-22 625632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

-----------------EOF-----------------

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#6 Příspěvek od radoslav »

katastrofa sluzieb je aktivnych.....co s tym?

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#7 Příspěvek od Rudy »

Služeb tam máte tolik, kolik aplikací je využívá. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]/64

:services
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#8 Příspěvek od radoslav »

All processes killed
========== FILES ==========
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ deleted successfully.
========== SERVICES/DRIVERS ==========
Service Bonjour Service stopped successfully!
Service Bonjour Service deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: 05667
->Temp folder emptied: 145992572 bytes
->Temporary Internet Files folder emptied: 4813383 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 435531258 bytes
->Flash cache emptied: 746 bytes

User: All Users

User: Default

User: Default User

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 46901697 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 145155323 bytes

Total Files Cleaned = 742,00 mb


[EMPTYFLASH]

User: 05667
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 01142016_182731

Files moved on Reboot...
C:\Users\05667\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\05667\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#9 Příspěvek od radoslav »

Logfile of random's system information tool 1.10 (written by random/random)
Run by 05667 at 2016-01-14 18:33:38
Microsoft Windows 8.1
System drive C: has 358 GB (79%) free of 455 GB
Total RAM: 3982 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:33:41, on 14.1.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\05667.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [ProductUpdater] C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE /FU "C:\WINDOWS\TEMP\E_SE588.tmp" /EF "HKCU"
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAH\FAHConsole.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8969 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
dashost.exe {3baa931a-28b9-471e-98df4e00012aa823}
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
taskeng.exe {C43FC89F-E291-4E50-AECB-075743FCD2DE}
taskhostex.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
KBFiltr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\notepad.exe" C:\_OTM\MovedFiles\01142016_182731.log
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3312.0.1226592395\718718114" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3312.2.1695999715\1258098464" --font-cache-shared-handle=2168 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3312.5.354386554\483756484" --font-cache-shared-handle=3248 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3312.6.1545515073\1541963351" --font-cache-shared-handle=4552 /prefetch:673131151
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/EnabledFull/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterSbTypes/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="3312.14.1127046162\461644124" --font-cache-shared-handle=5520 /prefetch:673131151
"C:\Users\05667\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Epson Printer Software Downloader.job - C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-23 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-23 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-13 12936848]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-09-11 107192]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX110 Series"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [2008-09-27 223232]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"EEventManager"=C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [2009-04-07 673616]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-10 3890208]
"NBAgent"=C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"ProductUpdater"=C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [2015-12-16 73216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAH\FAHConsole.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-01-14 18:27:31 ----D---- C:\_OTM
2016-01-13 15:45:38 ----D---- C:\Program Files (x86)\Visible Body Muscle Premium_DVT
2016-01-04 18:54:42 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-20 20:58:27 ----D---- C:\ProgramData\Freemake
2015-12-20 20:58:05 ----D---- C:\Program Files (x86)\Freemake
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2015-12-20 20:44:33 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2015-12-20 20:44:32 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2015-12-20 20:44:31 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2015-12-20 20:44:30 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2015-12-20 20:44:29 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2015-12-20 20:44:28 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2015-12-20 20:44:27 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2015-12-20 20:44:26 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2015-12-20 20:44:25 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2015-12-20 20:44:24 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2015-12-20 20:44:23 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2015-12-20 20:44:22 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2015-12-20 20:44:21 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2015-12-20 20:44:20 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-12-20 20:44:18 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2015-12-20 20:44:17 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2015-12-20 20:44:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2015-12-20 20:44:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2015-12-20 20:44:14 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2015-12-20 20:44:13 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2015-12-20 20:44:12 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2015-12-20 20:44:11 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2015-12-20 20:44:10 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2015-12-20 20:44:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2015-12-20 20:44:08 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2015-12-20 20:44:07 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2015-12-20 20:44:06 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2015-12-20 20:44:05 ----A---- C:\WINDOWS\system32\d3dx10.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2015-12-20 20:44:04 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2015-12-20 20:44:03 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2015-12-20 20:44:02 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2015-12-20 20:41:06 ----D---- C:\WINDOWS\SYSWOW64\directx
2015-12-20 20:35:19 ----D---- C:\Program Files (x86)\Free WMA to MP3 Converter

======List of files/folders modified in the last 1 month======

2016-01-14 18:33:41 ----D---- C:\Program Files\trend micro
2016-01-14 18:31:12 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-01-14 18:29:20 ----D---- C:\WINDOWS\Temp
2016-01-14 18:28:12 ----D---- C:\Windows
2016-01-14 18:27:31 ----D---- C:\WINDOWS\Tasks
2016-01-14 18:25:13 ----D---- C:\WINDOWS\Prefetch
2016-01-14 18:00:00 ----D---- C:\WINDOWS\system32\sru
2016-01-14 09:40:41 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-14 08:42:33 ----D---- C:\WINDOWS\system32\config
2016-01-13 21:37:28 ----D---- C:\WINDOWS\Inf
2016-01-13 21:37:05 ----RD---- C:\Program Files (x86)
2016-01-13 21:37:05 ----D---- C:\AdwCleaner
2016-01-13 18:22:33 ----RD---- C:\WINDOWS\System32
2016-01-13 18:22:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-13 08:12:59 ----D---- C:\Program Files (x86)\FastShare
2016-01-12 23:23:45 ----D---- C:\Users\05667\AppData\Roaming\vlc
2016-01-12 18:42:39 ----D---- C:\Users\05667\AppData\Roaming\Skype
2016-01-12 13:25:01 ----SHD---- C:\System Volume Information
2016-01-12 13:18:31 ----D---- C:\WINDOWS\AppReadiness
2016-01-12 13:18:30 ----HD---- C:\Program Files\WindowsApps
2016-01-09 10:25:59 ----D---- C:\WINDOWS\system32\catroot2
2016-01-04 18:52:06 ----D---- C:\WINDOWS\system32\NDF
2016-01-04 11:17:14 ----D---- C:\WINDOWS\SoftwareDistribution
2016-01-04 10:48:58 ----D---- C:\Program Files (x86)\Opera
2016-01-04 10:48:54 ----D---- C:\Users\05667\AppData\Roaming\Opera Software
2016-01-04 10:48:45 ----D---- C:\WINDOWS\system32\Tasks
2016-01-04 10:09:10 ----D---- C:\WINDOWS\Logs
2015-12-27 21:35:49 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-20 20:58:27 ----HD---- C:\ProgramData
2015-12-20 20:58:27 ----D---- C:\Program Files (x86)\Common Files
2015-12-20 20:44:33 ----D---- C:\WINDOWS\SysWOW64

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-23 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-23 208416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-24 645952]
R0 SCMNdisP;@oem103.inf,%SCMNDISP_Desc%;General NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\scmndisp.sys [2007-01-19 25312]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-23 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-05-17 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-05-17 423240]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-23 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-05-17 85328]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\WINDOWS\system32\DRIVERS\RMCAST.sys [2013-08-22 144384]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 ATP;@oem7.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-12-12 70928]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 HIDSwitch;@oem6.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-07-17 4094608]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem27.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-22 26008]
R3 kbfiltr;@oem5.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem19.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 RSBASTOR;@oem3.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-07-03 295056]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-04-23 29208]
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\C:\eSupport\eDriver\I386\AsPrOb64.sys [2010-05-26 12416]
S3 BCMH43XX;@oem23.inf,%BCMH43XX_Service_DispName%;Broadcom 802.11 USB Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwlhigh664.sys [2015-02-10 1255672]
S3 bthav;@oem10.inf,%AVFilter.SvcDesc%;Bluetooth AV Profile; C:\WINDOWS\system32\drivers\bthav.sys [2008-07-10 40448]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-03 1200640]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-07-03 81920]
S3 dc3d;@oem9.inf,%dc3d.SvcDesc%;MS Hardware Device Detection Driver (USB); C:\WINDOWS\System32\drivers\dc3d.sys [2011-05-18 47616]
S3 dg_ssudbus;@oem101.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem26.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-22 39320]
S3 NPF;Netgroup Packet Filter; C:\WINDOWS\system32\DRIVERS\npf.sys []
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-06-27 167424]
S3 RtkBtFilter;@oem28.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-07-29 47320]
S3 ssudmdm;@oem75.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 USBAAPL64;@oem73.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-12-13 121088]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\WINDOWS\System32\drivers\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-06 110976]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-23 50344]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-13 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-07-22 625632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#10 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#11 Příspěvek od radoslav »

no nenastala,nacitavanie je niekedy enormne dlhe.....

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#12 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#13 Příspěvek od radoslav »

nasiel 21 poloziek,ale neviem ako vytvorit z toho log

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu spomalene nacitavanie webu

#14 Příspěvek od Rudy »

Měl by se otevřít sám v notepadu. Návod najdete tady: http://forum.viry.cz/viewtopic.php?f=29&t=144868 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

radoslav
Návštěvník
Návštěvník
Příspěvky: 188
Registrován: 21 bře 2005 21:51
Bydliště: Slovensko

Re: prosim o kontrolu spomalene nacitavanie webu

#15 Příspěvek od radoslav »

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 16.1.2016
Scan Time: 9:05
Logfile: log.txt
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.01.16.02
Rootkit Database: v2016.01.09.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: 05667

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 339231
Time Elapsed: 21 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 2
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\bitstreams, , [9ab825156f2a4beb4ec003918082bd43],

Files: 19
PUP.Optional.MagicalFind, C:\Users\05667\AppData\Roaming\How Inc\B18D594AB89A4AF2922971D86B7A1FB0\setup.exe, , [232f8fabcccdc274a3b3bc8c54ad6a96],
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncpavr.exe, , [58fa6cced1c896a00c5bb76d847eaf51],
Trojan.BitCoinMiner, C:\Windows\SysWOW64\dcgmncpavr.exe, , [87cbf04a2574dc5ac0c9d74d22e0a858],
Trojan.Agent.BCM, C:\Windows\SysWOW64\lcpmncpavr.exe, , [f65caf8bcecb48eeb59a4665946cc23e],
Trojan.Agent.SCR, C:\Windows\Inf\msstp.vbe, , [66ecc278a8f150e639676e79b9491be5],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\diablo130302.cl, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\diakgcn121016.cl, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\libcurl-4.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\libeay32.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\libidn-11.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\librtmp.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\libssh2.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\mncxfeaxp.exe, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\phatk121016.cl, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\poclbm130302.cl, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\scrypt130511.cl, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\ssleay32.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\zlib1.dll, , [9ab825156f2a4beb4ec003918082bd43],
Trojan.Agent.BCM, C:\Windows\Inf\mncxfeaxp\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [9ab825156f2a4beb4ec003918082bd43],

Physical Sectors: 0
(No malicious items detected)


(end)

Odpovědět