Vypínání hry po 30ti minutách (notebook)

[keyfor4]

Vypadá to takto:

[Márty84]

No jo, disk pomalu odchazi. I to muze byt pricina potizi.


Dejte novy log z RSIT

[keyfor4]

f random's system information tool 1.10 (written by random/random)
Run by Keyfor at 2014-06-18 18:27:381
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 56 GB (52%) free of 109 GB
Total RAM: 4095 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:27:45, on 18.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Keyfor\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files\trend micro\Keyfor.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - Startup: Dropbox.lnk = C:\Users\Keyfor\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7538 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
C:\Windows\Explorer.EXE
\??\C:\Windows\system32\conhost.exe "2037433673-496281769-4903620221314852302-16861568924858328702006334752646977966
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
WLIDSvcM.exe 2040
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Users\Keyfor\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\wuauclt.exe"
C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2924.17221ef0.615715480 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2924 "\\.\pipe\gecko-crash-server-pipe.2924" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash4424.6832A378.6036 --host-broker-channel=Flash4424.6832A378.13160 --host-pid=4424 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=3648.002DF554.725213232 --proxy-stub-channel=Flash4424.6832A378.6036 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
"C:\Users\Keyfor\Downloads\RSITx64(1).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Keyfor\AppData\Roaming\Mozilla\Firefox\Profiles\nuui4pco.default

prefs.js - "browser.startup.homepage" - "about:home"
prefs.js - "keyword.URL" - "http://www.bing.com/search?FORM=UP97DF&PC=UP97&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-05-01 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-05-01 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-02-05 1179576]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-02-05 2234144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AceStream]
C:\Users\Keyfor\AppData\Roaming\ACEStream\engine\ace_engine.exe [2014-04-10 27904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IJNetworkScannerSelectorEX]
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncqtveySrv]
C:\Windows\system32\mncqtvey.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2uvc]
C:\Windows\vsnp2uvc.exe [2010-01-21 909824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk]
C:\PROGRA~2\ArcSoft\TOTALM~1.5\TMMONI~1.EXE [2009-06-26 258048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Keyfor^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Keyfor\AppData\Roaming\Dropbox\bin\Dropbox.exe [2014-05-20 33322312]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-06 3890208]

C:\Users\Keyfor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Keyfor\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-06-12 01:38:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-06-11 21:58:45 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-06-11 21:58:45 ----A---- C:\Windows\system32\usp10.dll
2014-06-11 21:58:43 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-11 21:58:43 ----A---- C:\Windows\system32\msxml6.dll
2014-06-11 21:58:43 ----A---- C:\Windows\system32\msxml3.dll
2014-06-11 21:58:42 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-11 21:58:42 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-11 21:58:42 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-11 21:58:42 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-11 21:58:42 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-11 21:58:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-06-11 21:58:35 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-06-11 21:58:35 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-06-11 21:58:34 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-06-11 21:58:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-06-11 21:58:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-06-11 21:58:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 21:58:34 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-11 21:58:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-06-11 21:58:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-06-11 21:58:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-06-11 21:58:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-06-11 21:58:29 ----A---- C:\Windows\system32\urlmon.dll
2014-06-11 21:58:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-06-11 21:58:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-06-11 21:58:28 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 21:58:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-06-11 21:58:27 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-06-11 21:58:27 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-11 21:58:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-11 21:58:27 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-11 21:58:26 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-06-11 21:58:25 ----A---- C:\Windows\system32\iesetup.dll
2014-06-11 21:58:25 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-11 21:58:24 ----A---- C:\Windows\system32\iertutil.dll
2014-06-11 21:58:23 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-06-11 21:58:22 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-06-11 21:58:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-06-11 21:58:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-06-11 21:58:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-06-11 21:58:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-06-11 21:58:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-06-11 21:58:21 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-11 21:58:21 ----A---- C:\Windows\system32\iernonce.dll
2014-06-11 21:58:20 ----A---- C:\Windows\system32\ieui.dll
2014-06-11 21:58:20 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-11 21:58:19 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-11 21:58:19 ----A---- C:\Windows\system32\ieframe.dll
2014-06-11 21:58:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-11 21:58:18 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-11 21:58:18 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-11 21:58:17 ----A---- C:\Windows\system32\wininet.dll
2014-06-11 21:58:17 ----A---- C:\Windows\system32\vbscript.dll
2014-06-11 21:58:17 ----A---- C:\Windows\system32\jscript9.dll
2014-06-11 21:58:17 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-11 21:58:16 ----A---- C:\Windows\system32\msrating.dll
2014-06-11 21:58:15 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 21:58:14 ----A---- C:\Windows\system32\mshtml.dll
2014-06-10 23:43:19 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-10 23:43:19 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-09 22:09:11 ----D---- C:\Program Files (x86)\HD Tune
2014-06-08 23:00:57 ----D---- C:\ProgramData\RogueKiller
2014-06-05 22:22:41 ----A---- C:\ComboFix.txt
2014-06-05 22:19:16 ----D---- C:\$RECYCLE.BIN
2014-06-03 18:38:39 ----A---- C:\Windows\SWREG.exe
2014-06-03 18:38:39 ----A---- C:\Windows\PEV.exe
2014-06-03 18:38:39 ----A---- C:\Windows\NIRCMD.exe
2014-06-03 18:38:39 ----A---- C:\Windows\MBR.exe
2014-06-03 18:38:38 ----A---- C:\Windows\zip.exe
2014-06-03 18:38:38 ----A---- C:\Windows\SWSC.exe
2014-06-03 18:38:38 ----A---- C:\Windows\sed.exe
2014-06-03 18:38:38 ----A---- C:\Windows\grep.exe
2014-06-03 18:37:23 ----D---- C:\Windows\erdnt
2014-06-03 18:28:00 ----D---- C:\Windows\pss
2014-06-01 22:36:20 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-06-01 22:36:03 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-06-01 22:36:03 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-06-01 22:36:03 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-01 22:36:02 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-01 22:32:15 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-06-01 22:29:36 ----D---- C:\AdwCleaner
2014-05-31 23:21:50 ----D---- C:\rsit
2014-05-31 23:21:50 ----D---- C:\Program Files\trend micro
2014-05-30 23:08:52 ----D---- C:\Program Files\CCleaner
2014-05-30 23:08:27 ----D---- C:\Program Files (x86)\Trend Micro
2014-05-29 21:16:36 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-05-29 21:16:36 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-05-29 21:16:35 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-05-29 21:16:35 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-05-29 21:16:34 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-05-29 21:16:34 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-05-29 21:16:34 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-05-29 21:16:34 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-05-29 21:16:34 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-05-29 21:16:34 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-05-29 21:16:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-05-29 21:16:33 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-05-29 21:16:31 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-05-29 21:16:31 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-05-29 21:16:30 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-05-29 21:16:30 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-05-29 21:16:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-05-29 21:16:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-05-29 21:16:28 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-05-29 21:16:28 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-05-29 21:16:28 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-05-29 21:16:28 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-05-29 21:16:27 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-05-29 21:16:27 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-05-29 21:16:27 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-05-29 21:16:26 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-05-29 21:16:25 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-05-29 21:16:25 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-05-29 21:16:24 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-05-29 21:16:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-05-29 21:16:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-05-29 21:16:24 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-05-29 21:16:23 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-05-29 21:16:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-05-29 21:16:23 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-05-29 21:16:23 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-05-29 21:16:22 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-05-29 21:16:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-05-29 21:16:22 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-05-29 21:16:22 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-05-29 21:16:21 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-05-29 21:16:21 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-05-29 21:16:20 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-05-29 21:16:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-05-29 21:16:20 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-05-29 21:16:20 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-05-29 21:16:19 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-05-29 21:16:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-05-29 21:16:19 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-05-29 21:16:19 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-05-29 21:16:18 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-05-29 21:16:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-05-29 21:16:18 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-05-29 21:16:18 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-05-29 21:16:17 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-05-29 21:16:17 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-05-29 21:16:16 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-05-29 21:16:16 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-05-29 21:16:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-05-29 21:16:16 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-05-29 21:16:16 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-05-29 21:16:16 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-05-29 21:16:15 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-05-29 21:16:15 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-05-29 21:16:15 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-05-29 21:16:15 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-05-29 21:16:14 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-05-29 21:16:14 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-05-29 21:16:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-05-29 21:16:13 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-05-29 21:16:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-05-29 21:16:13 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-05-29 21:16:13 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-05-29 21:16:13 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-05-29 21:16:11 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-05-29 21:16:11 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-05-29 21:16:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-05-29 21:16:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-05-29 21:16:10 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-05-29 21:16:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-05-29 21:16:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-05-29 21:16:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-05-29 21:16:09 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-05-29 21:16:09 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-05-29 21:16:08 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-05-29 21:16:08 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-05-29 21:16:07 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-05-29 21:16:07 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-05-29 21:16:06 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-05-29 21:16:06 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-05-29 21:16:05 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-05-29 21:16:05 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-05-29 21:16:05 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-05-29 21:16:05 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-05-29 21:16:04 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-05-29 21:16:04 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-05-29 21:16:03 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-05-29 21:16:03 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-05-29 21:16:02 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-05-29 21:16:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-05-29 21:16:02 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-05-29 21:16:02 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-05-29 21:16:01 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-05-29 21:16:01 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-05-29 21:15:59 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-05-29 21:15:59 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-05-29 21:15:59 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-05-29 21:15:59 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-05-29 21:15:58 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-05-29 21:15:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-05-29 21:15:58 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-05-29 21:15:58 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-05-29 21:15:57 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-05-29 21:15:57 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-05-29 21:15:57 ----A---- C:\Windows\system32\xinput1_3.dll
2014-05-29 21:15:57 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-05-29 21:15:56 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-05-29 21:15:56 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-05-29 21:15:55 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-05-29 21:15:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-05-29 21:15:55 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-05-29 21:15:55 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-05-29 21:15:54 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-05-29 21:15:54 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-05-29 21:15:53 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-05-29 21:15:53 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-05-29 21:15:51 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-05-29 21:15:51 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-05-29 21:15:51 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-05-29 21:15:51 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-05-29 21:15:50 ----A---- C:\Windows\system32\d3dx10.dll
2014-05-29 21:13:33 ----D---- C:\Windows\SYSWOW64\directx
2014-05-29 21:05:18 ----D---- C:\Program Files (x86)\VS Revo Group
2014-05-29 20:40:10 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-05-29 20:40:08 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-05-29 20:40:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-05-29 20:40:07 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-05-29 20:40:07 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-05-29 20:40:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-05-29 20:40:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-05-29 20:40:06 ----A---- C:\Windows\system32\xinput1_2.dll
2014-05-29 20:40:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-05-29 20:40:05 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-05-29 20:40:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-05-29 20:40:05 ----A---- C:\Windows\system32\xinput1_1.dll
2014-05-29 20:40:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-05-29 20:40:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-05-29 20:40:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-05-29 20:39:52 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-05-29 20:39:52 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-05-29 20:39:51 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-05-29 20:39:51 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-05-29 20:39:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-05-29 20:39:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-05-29 20:39:50 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-05-29 20:39:50 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-05-29 20:39:47 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-05-29 20:39:47 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-05-29 20:39:46 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-05-29 20:39:46 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-05-29 20:39:45 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-05-29 20:39:45 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-05-29 20:39:44 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-05-29 20:39:44 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-05-29 20:39:41 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-05-29 20:39:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-05-29 20:24:25 ----D---- C:\ProgramData\Razer
2014-05-29 20:24:25 ----D---- C:\Program Files (x86)\Razer
2014-05-29 20:19:02 ----D---- C:\ProgramData\Malwarebytes
2014-05-29 19:59:08 ----D---- C:\Users\Keyfor\AppData\Roaming\InstallShield
2014-05-25 22:08:50 ----D---- C:\ProgramData\ArcSoft
2014-05-25 22:08:40 ----D---- C:\Users\Keyfor\AppData\Roaming\ArcSoft
2014-05-25 22:08:35 ----A---- C:\Windows\SYSWOW64\drivers\afc.sys
2014-05-25 22:07:44 ----D---- C:\Program Files (x86)\ArcSoft
2014-05-25 22:07:44 ----A---- C:\Windows\SYSWOW64\unicows.dll
2014-05-25 22:07:44 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2014-05-25 22:07:43 ----RA---- C:\Windows\SYSWOW64\msvcp71.dll
2014-05-25 22:07:43 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-05-25 21:56:40 ----A---- C:\Windows\system32\drivers\IT9135BDA.sys
2014-05-23 20:40:08 ----D---- C:\Users\Keyfor\AppData\Roaming\Skype
2014-05-23 20:39:57 ----RD---- C:\Program Files (x86)\Skype
2014-05-23 20:39:52 ----D---- C:\ProgramData\Skype

======List of files/folders modified in the last 1 month======

2014-06-18 18:27:45 ----D---- C:\Windows\Prefetch
2014-06-18 18:27:43 ----D---- C:\Windows\Temp
2014-06-18 17:00:35 ----D---- C:\Users\Keyfor\AppData\Roaming\Dropbox
2014-06-18 15:57:33 ----D---- C:\Windows\System32
2014-06-18 15:57:33 ----D---- C:\Windows\inf
2014-06-18 15:57:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-18 15:54:03 ----D---- C:\Users\Keyfor\AppData\Roaming\DropboxMaster
2014-06-18 15:53:01 ----D---- C:\ProgramData\NVIDIA
2014-06-18 15:52:09 ----D---- C:\Windows\system32\config
2014-06-18 12:45:30 ----D---- C:\Windows\SysWOW64
2014-06-17 01:12:48 ----D---- C:\Users\Keyfor\AppData\Roaming\vlc
2014-06-17 00:07:28 ----D---- C:\Users\Keyfor\AppData\Roaming\uTorrent
2014-06-16 19:09:38 ----D---- C:\Windows\rescache
2014-06-14 23:33:20 ----D---- C:\Windows\system32\wdi
2014-06-13 22:50:25 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-12 22:37:41 ----RD---- C:\Program Files (x86)
2014-06-12 21:00:22 ----D---- C:\Windows\winsxs
2014-06-12 20:57:53 ----D---- C:\Program Files\Internet Explorer
2014-06-12 20:57:52 ----D---- C:\Windows\SYSWOW64\en-US
2014-06-12 20:57:48 ----D---- C:\Windows\system32\en-US
2014-06-12 20:57:42 ----D---- C:\Program Files (x86)\Internet Explorer
2014-06-12 20:57:38 ----D---- C:\Windows\system32\DriverStore
2014-06-12 01:43:57 ----D---- C:\Windows\system32\MRT
2014-06-12 01:42:11 ----D---- C:\Windows\debug
2014-06-12 01:42:08 ----A---- C:\Windows\system32\MRT.exe
2014-06-12 01:41:22 ----SHD---- C:\Windows\Installer
2014-06-12 01:41:22 ----D---- C:\Config.Msi
2014-06-12 01:40:14 ----SHD---- C:\System Volume Information
2014-06-11 22:37:50 ----D---- C:\Windows\system32\drivers
2014-06-11 21:57:37 ----D---- C:\Windows\system32\catroot
2014-06-11 21:56:44 ----D---- C:\Windows\system32\catroot2
2014-06-08 23:00:57 ----D---- C:\ProgramData
2014-06-05 22:22:45 ----D---- C:\Qoobox
2014-06-05 22:19:25 ----D---- C:\Windows
2014-06-05 22:19:25 ----A---- C:\Windows\system.ini
2014-06-05 22:19:13 ----D---- C:\Windows\system32\drivers\etc
2014-06-05 22:14:14 ----D---- C:\Windows\SYSWOW64\drivers
2014-06-05 22:14:14 ----D---- C:\Windows\AppPatch
2014-06-05 22:14:12 ----D---- C:\Program Files (x86)\Common Files
2014-05-31 23:24:45 ----SD---- C:\Users\Keyfor\AppData\Roaming\Microsoft
2014-05-31 23:21:50 ----RD---- C:\Program Files
2014-05-30 23:17:12 ----D---- C:\Users\Keyfor\AppData\Roaming\DAEMON Tools Lite
2014-05-30 23:17:10 ----D---- C:\Program Files (x86)\PDFCreator
2014-05-30 23:16:16 ----D---- C:\Windows\Panther
2014-05-30 23:16:13 ----D---- C:\Windows\Minidump
2014-05-30 23:16:13 ----D---- C:\Windows\Logs
2014-05-30 23:08:58 ----D---- C:\Windows\system32\Tasks
2014-05-30 22:41:39 ----D---- C:\Users\Keyfor\AppData\Roaming\Seznam.cz
2014-05-29 22:09:42 ----D---- C:\ProgramData\BlazeVideo
2014-05-29 21:13:33 ----D---- C:\temp
2014-05-29 20:54:14 ----D---- C:\ProgramData\DriverGenius
2014-05-29 20:46:09 ----D---- C:\Windows\PolicyDefinitions
2014-05-29 20:40:04 ----RSD---- C:\Windows\assembly
2014-05-29 20:39:54 ----D---- C:\Windows\Microsoft.NET
2014-05-29 20:11:51 ----D---- C:\Users\Keyfor\AppData\Roaming\.ACEStream
2014-05-19 23:06:29 ----D---- C:\Users\Keyfor\AppData\Roaming\Audacity
2014-05-19 22:07:33 ----D---- C:\Windows\IME

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-05-01 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-05-01 208416]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-05-01 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-05-15 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-05-15 423240]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-04-22 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-05-01 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-05-01 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-05-15 85328]
R3 Afc;PPdus ASPI Shell; C:\Windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2007-08-09 13680]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-27 39200]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2010-09-07 1800832]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2014-03-31 58056]
S3 IT9135BDA;IT9135 BDA Devices; C:\Windows\System32\Drivers\IT9135BDA.sys [2014-05-25 165504]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys []
S3 WinUsb;WinUsb Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WSDPrintDevice;WSD Print Support via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 WSDScan;WSD Scan Support via UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-05-01 50344]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 16941856]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2013-11-22 105448]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-21 116648]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-21 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-12 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-22 1255736]
S3 WMZuneComm;Zune Windows Mobile Connectivity Service; C:\Program Files\Zune\WMZuneComm.exe [2011-08-05 306400]
S3 ZuneNetworkSvc;Zune Network Sharing Service; C:\Program Files\Zune\ZuneNss.exe [2011-08-05 8277728]
S3 ZuneWlanCfgSvc;Zune Wireless Configuration Service; C:\Program Files\Zune\ZuneWlanCfgSvc.exe [2011-08-05 467680]
S4 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service; C:\Program Files (x86)\ABBYY FineReader 9.0\NetworkLicenseServer.exe [2007-09-24 566560]
S4 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [2014-01-23 1335344]
S4 PDF Architect Service;PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [2014-01-23 856112]

-----------------EOF-----------------

[Márty84]

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).




5.7. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975