Win64/Patched.A

Zpráva

rumik001 · #1 Příspěvek od **rumik001** » 27 Kvě 2013 00:00

Ahoj, posilam log, diky za pomoc:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Kenny at 2013-05-27 00:53:51
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 5 GB (12%) free of 40 GB
Total RAM: 4095 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:53:57, on 27.5.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
D:\Program Files (x86)\iTunes\iTunesHelper.exe
d:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
D:\Downloads\mssstool64.exe
d:\c67b6f16a737086a44c7c7378bec66\x86\mssswizard.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kenny.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9014 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=074eed6e-5197-446f-8842-826baac5186c /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\4b0d7360-8631-4753-b1ec-17698594e02d-134-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"nvtray.exe" -user_has_logged_in 1
"D:\Program Files (x86)\iTunes\iTunesHelper.exe"
"D:\totalcmd\TOTALCMD64.EXE"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
taskeng.exe {DBEFFB23-4742-450A-A94B-ED67C331BFF0}
"d:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe" -b
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2376.0.109021594\548486703" --supports-dual-gpus=false --gpu-vendor-id=0x10de --gpu-device-id=0x0614 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.1106 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.2.749968813\2043877892" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.3.1258972787\1559447893" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.4.277246361\1488929676" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2376.5.162493859\1904670961" --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.6.259533948\198186231" /prefetch:673131151
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.8.266704459\1163226208" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.10.1804054696\791768534" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.11.212764704\495518493" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.12.638959928\1913897324" /prefetch:673131151
"D:\Downloads\mssstool64.exe"
d:\c67b6f16a737086a44c7c7378bec66\x86\mssswizard.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.14.861802278\1466110690" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.19.848613652\1509015931" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/5/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_07/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2376.20.1701669889\475006238" /prefetch:673131151
"D:\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"DAEMON Tools Lite"=D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2012-12-11 3147384]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"iTunesHelper"=D:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-05-15 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-05-27 01:23:26 ----SHD---- C:\$$PendingFiles
2013-05-27 00:53:52 ----D---- C:\Program Files\trend micro
2013-05-27 00:53:51 ----D---- C:\rsit
2013-05-27 00:31:20 ----D---- C:\Users\Kenny\AppData\Roaming\ParetoLogic
2013-05-27 00:31:20 ----D---- C:\Users\Kenny\AppData\Roaming\DriverCure
2013-05-27 00:31:12 ----D---- C:\ProgramData\ParetoLogic
2013-05-26 23:52:11 ----A---- C:\Windows\ntbtlog.txt
2013-05-26 22:35:34 ----D---- C:\Program Files (x86)\x264 Video Codec
2013-05-23 21:11:47 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 21:11:47 ----D---- C:\Program Files\iTunes
2013-05-23 21:11:47 ----D---- C:\Program Files\iPod
2013-05-23 21:09:03 ----SHD---- C:\Config.Msi
2013-05-15 03:02:17 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-15 03:02:17 ----A---- C:\Windows\system32\ieui.dll
2013-05-15 03:02:16 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-15 03:02:15 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-15 03:02:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-15 03:02:15 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-05-15 03:02:15 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-05-15 03:02:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-05-15 03:02:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-15 03:02:15 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-15 03:02:15 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-15 03:02:15 ----A---- C:\Windows\system32\iesetup.dll
2013-05-15 03:02:15 ----A---- C:\Windows\system32\iernonce.dll
2013-05-15 03:02:14 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-15 03:02:14 ----A---- C:\Windows\system32\iertutil.dll
2013-05-15 03:02:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-15 03:02:13 ----A---- C:\Windows\system32\urlmon.dll
2013-05-15 03:02:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-15 03:02:12 ----A---- C:\Windows\system32\jscript.dll
2013-05-15 03:02:11 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-05-15 03:02:11 ----A---- C:\Windows\system32\jscript9.dll
2013-05-15 03:02:10 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-15 03:02:10 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-15 03:02:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-15 03:02:09 ----A---- C:\Windows\system32\wininet.dll
2013-05-15 03:02:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-15 03:02:04 ----A---- C:\Windows\system32\mshtml.dll
2013-05-15 03:02:02 ----A---- C:\Windows\system32\ieframe.dll
2013-05-15 03:02:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-14 22:37:47 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-14 22:37:46 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-14 22:37:46 ----A---- C:\Windows\system32\cdd.dll
2013-05-14 22:37:39 ----A---- C:\Windows\system32\shell32.dll
2013-05-14 22:37:39 ----A---- C:\Windows\system32\authui.dll
2013-05-14 22:37:38 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-14 22:37:38 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-14 22:37:38 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-14 22:37:38 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-14 22:37:38 ----A---- C:\Windows\system32\consent.exe
2013-05-14 22:37:38 ----A---- C:\Windows\system32\appinfo.dll
2013-05-14 22:37:33 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-14 22:37:33 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-14 22:37:33 ----A---- C:\Windows\system32\win32k.sys
2013-05-11 12:31:03 ----D---- C:\Users\Kenny\AppData\Roaming\Nero
2013-05-11 12:19:41 ----D---- C:\Program Files (x86)\Nero
2013-05-11 12:19:33 ----D---- C:\ProgramData\Nero
2013-05-11 10:33:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-05-11 10:31:14 ----D---- C:\ProgramData\Electronic Arts
2013-05-11 09:28:54 ----D---- C:\Users\Kenny\AppData\Roaming\WinRAR
2013-04-30 07:42:37 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-04-30 07:42:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-04-30 07:42:37 ----A---- C:\Windows\system32\elshyph.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-04-30 07:42:36 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-04-30 07:42:35 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\url.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-04-30 07:42:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\url.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\msrating.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\msls31.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\ieapfltr.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\icardie.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\dxtrans.dll
2013-04-30 07:42:33 ----A---- C:\Windows\system32\dxtmsft.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\wextract.exe
2013-04-30 07:42:32 ----A---- C:\Windows\system32\webcheck.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\vbscript.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\mshtmled.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\licmgr10.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\inseng.dll
2013-04-30 07:42:32 ----A---- C:\Windows\system32\iexpress.exe
2013-04-30 07:42:32 ----A---- C:\Windows\system32\iedkcs32.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-04-30 07:42:31 ----A---- C:\Windows\system32\pngfilt.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\occache.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\mshtmler.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\mshta.exe
2013-04-30 07:42:31 ----A---- C:\Windows\system32\msfeedssync.exe
2013-04-30 07:42:31 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\imgutil.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\ieUnatt.exe
2013-04-30 07:42:31 ----A---- C:\Windows\system32\iepeers.dll
2013-04-30 07:42:31 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-04-30 07:41:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 07:41:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 07:41:17 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 07:41:17 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-04-30 07:41:17 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-04-30 07:41:17 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-04-30 07:41:17 ----A---- C:\Windows\system32\XpsPrint.dll
2013-04-30 07:41:17 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-04-30 07:41:17 ----A---- C:\Windows\system32\WMPhoto.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-04-30 07:41:16 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\FntCache.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\dxgi.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\DWrite.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\d3d11.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\d3d10core.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\d3d10.dll
2013-04-30 07:41:16 ----A---- C:\Windows\system32\d2d1.dll
2013-04-30 07:41:15 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-04-30 07:41:15 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-30 07:41:15 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-30 07:41:15 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-04-30 07:41:15 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-30 07:41:15 ----A---- C:\Windows\system32\UIAnimation.dll
2013-04-30 07:41:15 ----A---- C:\Windows\system32\d3d10level9.dll
2013-04-30 07:41:15 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-04-30 07:41:15 ----A---- C:\Windows\system32\d3d10_1.dll

======List of files/folders modified in the last 1 months======

2013-05-27 01:21:28 ----D---- C:\Windows\System32
2013-05-27 01:17:07 ----D---- C:\Windows\system32\LogFiles
2013-05-27 00:53:57 ----D---- C:\Windows\Prefetch
2013-05-27 00:53:52 ----RD---- C:\Program Files
2013-05-27 00:46:35 ----SHD---- C:\Windows\Installer
2013-05-27 00:43:47 ----D---- C:\Windows\system32\Tasks
2013-05-27 00:43:46 ----D---- C:\Windows\Tasks
2013-05-27 00:43:46 ----D---- C:\Program Files (x86)\Common Files
2013-05-27 00:43:44 ----RD---- C:\Program Files (x86)
2013-05-27 00:42:58 ----SD---- C:\ProgramData\Microsoft
2013-05-27 00:36:12 ----D---- C:\Windows\Temp
2013-05-27 00:31:12 ----HD---- C:\ProgramData
2013-05-26 23:52:11 ----D---- C:\Windows
2013-05-26 23:08:11 ----D---- C:\Windows\inf
2013-05-26 23:08:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-26 22:47:59 ----D---- C:\Users\Kenny\AppData\Roaming\uTorrent
2013-05-26 22:38:44 ----D---- C:\ProgramData\MFAData
2013-05-26 14:41:59 ----SHD---- C:\System Volume Information
2013-05-26 11:12:23 ----D---- C:\Windows\system32\NDF
2013-05-26 11:01:47 ----D---- C:\Windows\system32\config
2013-05-23 21:12:19 ----D---- C:\Windows\SysWOW64
2013-05-19 22:46:57 ----D---- C:\Windows\SYSWOW64\drivers
2013-05-15 03:44:30 ----D---- C:\Windows\Microsoft.NET
2013-05-15 03:44:07 ----RSD---- C:\Windows\assembly
2013-05-15 03:31:42 ----D---- C:\Windows\winsxs
2013-05-15 03:27:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-15 03:27:57 ----D---- C:\Windows\system32\drivers
2013-05-15 03:27:57 ----D---- C:\Windows\system32\cs-CZ
2013-05-15 03:27:57 ----D---- C:\Windows\AppPatch
2013-05-15 03:27:57 ----D---- C:\Program Files\Internet Explorer
2013-05-15 03:27:57 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-15 03:10:11 ----D---- C:\ProgramData\Microsoft Help
2013-05-15 03:08:17 ----A---- C:\Windows\system32\MRT.exe
2013-05-15 03:02:41 ----D---- C:\Windows\system32\catroot2
2013-05-15 03:02:41 ----D---- C:\Windows\system32\catroot
2013-05-11 12:11:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-05-08 06:06:36 ----D---- C:\Users\Kenny\AppData\Roaming\GHISLER
2013-05-01 01:03:14 ----D---- C:\Windows\system32\DriverStore
2013-05-01 01:02:58 ----D---- C:\ProgramData\Western Digital
2013-04-30 07:48:23 ----D---- C:\Windows\SYSWOW64\migration
2013-04-30 07:48:23 ----D---- C:\Windows\SYSWOW64\en-US
2013-04-30 07:48:22 ----D---- C:\Windows\system32\migration
2013-04-30 07:48:22 ----D---- C:\Windows\system32\en-US
2013-04-30 07:48:22 ----D---- C:\Windows\PolicyDefinitions
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\it-IT
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\es-ES
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\el-GR
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\de-DE
2013-04-30 07:48:21 ----D---- C:\Windows\SYSWOW64\da-DK
2013-04-30 07:48:21 ----D---- C:\Windows\system32\zh-TW
2013-04-30 07:48:21 ----D---- C:\Windows\system32\zh-HK
2013-04-30 07:48:21 ----D---- C:\Windows\system32\zh-CN
2013-04-30 07:48:21 ----D---- C:\Windows\system32\tr-TR
2013-04-30 07:48:21 ----D---- C:\Windows\system32\sv-SE
2013-04-30 07:48:21 ----D---- C:\Windows\system32\ru-RU
2013-04-30 07:48:21 ----D---- C:\Windows\system32\pt-PT
2013-04-30 07:48:21 ----D---- C:\Windows\system32\pt-BR
2013-04-30 07:48:21 ----D---- C:\Windows\system32\pl-PL
2013-04-30 07:48:21 ----D---- C:\Windows\system32\nl-NL
2013-04-30 07:48:21 ----D---- C:\Windows\system32\nb-NO
2013-04-30 07:48:21 ----D---- C:\Windows\system32\ko-KR
2013-04-30 07:48:21 ----D---- C:\Windows\system32\ja-JP
2013-04-30 07:48:21 ----D---- C:\Windows\system32\it-IT
2013-04-30 07:48:21 ----D---- C:\Windows\system32\hu-HU
2013-04-30 07:48:21 ----D---- C:\Windows\system32\fr-FR
2013-04-30 07:48:21 ----D---- C:\Windows\system32\fi-FI
2013-04-30 07:48:21 ----D---- C:\Windows\system32\es-ES
2013-04-30 07:48:21 ----D---- C:\Windows\system32\el-GR
2013-04-30 07:48:21 ----D---- C:\Windows\system32\de-DE
2013-04-30 07:48:21 ----D---- C:\Windows\system32\da-DK
2013-04-30 07:47:07 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2012-11-16 111968]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-05-19 564824]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 3xHybr64;Philips SAA713x PCI Card; C:\Windows\system32\DRIVERS\3xHybr64.sys [2006-11-22 1413592]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20); C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-20 54272]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 netr28x;Airlive 802.11n Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2009-10-07 737792]
S3 a2btydzx;a2btydzx; C:\Windows\system32\drivers\a2btydzx.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-12-28 96896]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-16 5814904]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-29 884152]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-15 641352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-29 1260472]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 116648]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-23 1255736]

-----------------EOF-----------------

#2 Příspěvek od **stell** » 27 Kvě 2013 07:40

Zdravim.
Pravdepodobne mas infikovany systemovy subor services.exe,uvidime co vsetko tam mas, dodrz postup a navody.
1:spust podla navodu ADWcleanet>>Moznost>>DELETE
http://www.viruskasino.com/2012/09/adwcleaner.html
Log Vloz sem.

2:Spust ako Spravca JunkwareRemovalool.
http://www.viruskasino.com/2010/12/prog ... moval-tool
Log Vloz sem.

3:Stiahni na plochu combofix a spust, log vloz sem
http://www.bleepingcomputer.com/combofi ... t-combofix

POZNÁMKA: Ak narazis na chybu "pokus o neplatnu operaciu na kluc databazy Registra, ktory bol oznaceny na odstranenie" >> Treba len restartovat pocitac a tato chyba sa odstrani.

rumik001 · #3 Příspěvek od **rumik001** » 27 Kvě 2013 19:37

Díky, posílám logy. Jenom u combofixu mi hlasil, ze mam zapnuty ACG stit, coz jsem nemel (mam odinstalovany AVG a ani v procesech nic nebylo), tak jsem to musel 2x odkliknout, snad je to ok.

1 ADW Cleaner:

# AdwCleaner v2.301 - Log vytvooen 27/05/2013 v 19:46:46
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Kenny - SOUTHPARK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Kenny\Desktop\adwcleaner.exe
# Volba [Vymazat]

***** [Služby] *****

***** [Soubory / Složky] *****

Složka Vymazáno : C:\ProgramData\ParetoLogic
Složka Vymazáno : C:\Users\Kenny\AppData\Roaming\ParetoLogic

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\PIP
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKLM\Software\AVG Secure Search
Klíe Vymazáno : HKLM\Software\PIP

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16576

[OK] Registry jsou eisté.

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Users\Kenny\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[S1].txt - [1020 octets] - [27/05/2013 19:46:46]

########## EOF - C:\AdwCleaner[S1].txt - [1080 octets] ##########

2 - JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Kenny on po 27.05.2013 at 20:02:29,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\Kenny\AppData\Roaming\drivercure"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 27.05.2013 at 20:08:29,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 - Combofix

ComboFix 13-05-27.02 - Kenny 27.05.2013 20:20:30.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.3025 [GMT 2:00]
Spuštěný z: c:\users\Kenny\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-27 do 2013-05-27 )))))))))))))))))))))))))))))))
.
.
2013-05-27 18:02 . 2013-05-27 18:02 -------- d-----w- c:\windows\ERUNT
2013-05-27 18:02 . 2013-05-27 18:02 -------- d-----w- C:\JRT
2013-05-26 23:23 . 2013-05-26 23:23 -------- d-sh--w- C:\$$PendingFiles
2013-05-26 23:13 . 2013-05-09 08:59 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-26 23:13 . 2013-05-09 08:59 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-26 23:13 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-26 23:13 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-26 23:13 . 2013-05-09 08:59 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-26 23:13 . 2013-05-09 08:59 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-26 23:13 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-26 23:12 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-26 23:12 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-26 23:12 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-05-26 23:11 . 2013-05-26 23:12 -------- d-----w- c:\programdata\AVAST Software
2013-05-26 23:10 . 2013-05-26 23:10 -------- d-----w- c:\users\Kenny\AppData\Local\Avg2013
2013-05-26 22:53 . 2013-05-26 22:53 -------- d-----w- c:\program files\trend micro
2013-05-26 22:53 . 2013-05-26 22:53 -------- d-----w- C:\rsit
2013-05-26 20:35 . 2013-05-26 20:35 225280 ----a-w- c:\programdata\Microsoft\Media Tools\MediaIconsOverlays.dll
2013-05-23 19:11 . 2013-05-23 19:12 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 19:11 . 2013-05-23 19:12 -------- d-----w- c:\program files\iTunes
2013-05-23 19:11 . 2013-05-23 19:11 -------- d-----w- c:\program files\iPod
2013-05-14 20:37 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-05-11 10:31 . 2013-05-11 10:31 -------- d-----w- c:\users\Kenny\AppData\Roaming\Nero
2013-05-11 10:19 . 2013-05-11 10:20 -------- d-----w- c:\program files (x86)\Common Files\Nero
2013-05-11 10:19 . 2013-05-11 10:20 -------- d-----w- c:\program files (x86)\Nero
2013-05-11 10:19 . 2013-05-11 10:28 -------- d-----w- c:\programdata\Nero
2013-05-11 08:33 . 2010-02-04 08:01 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_7.dll
2013-05-11 08:31 . 2013-05-11 08:31 -------- d-----w- c:\programdata\Electronic Arts
2013-04-30 05:41 . 2013-04-30 05:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-19 20:46 . 2012-10-21 11:29 564824 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-05-15 01:08 . 2012-10-23 02:43 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-04-28 06:01 . 2012-10-21 11:30 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-04-28 06:01 . 2012-10-21 11:30 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-04-13 05:49 . 2013-05-14 20:37 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-14 20:37 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-14 20:37 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-14 20:37 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-14 20:37 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-14 20:37 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 02:24 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-03-19 06:04 . 2013-04-12 21:10 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-12 21:10 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-12 21:10 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-12 21:10 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-12 21:10 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-12 21:10 112640 ----a-w- c:\windows\system32\smss.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="d:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"iTunesHelper"="d:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392]
"avast"="d:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-23 1255736]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-12-28 96896]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
S3 3xHybr64;Philips SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybr64.sys [2006-11-22 1413592]
S3 netr28x;Airlive 802.11n Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr28x.sys [2009-10-07 737792]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-05-24 09:58 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.94\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 11:07]
.
2013-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-21 11:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- d:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - d:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1 8.8.4.4
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{1EC23CFF-4C58-458f-924C-8519AEF61B32} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
d:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
d:\program files (x86)\ASUS\EPU-6 Engine\SixEngine.exe
.
**************************************************************************
.
Celkový čas: 2013-05-27 20:32:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-27 18:32
.
Před spuštěním: 4 718 657 536
Po spuštění: 1 270 104 064
.
- - End Of File - - F17FBA833AC64D72C0C51499A3AA0EF9

#4 Příspěvek od **stell** » 27 Kvě 2013 20:30

Combofix , ok
mas tam dajaky bordel, mas tam AVG a AVAST>>"avast"="d:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]

AVG ODINSTALUJ, a odinstaluj aj AVAST, po skonceni nainstalujes Free AVAST, ok?
Pouzi aj odinstalator.
www.viruskasino.com/2011/01/odinstalatory.html

Potom pokracuj takto:
1:Stiahni priamo na USB-kluc podla systemu 32 alebo 64 bites.
Farbar Recovery Scan Tool
http://www.bleepingcomputer.com/downloa ... scan-tool/
Zapojte flash disku do infikovaného počítača.
2:Usb kluc nechaj pripojene.
3:Reštartuje počítač, pri reštartovaní počítača stlačte kláves F8 a podržte ho stlačený.
Kláves F8 musíte stlačiť predtým, než sa zobrazí logo systému Windows.

Možnosti obnovy systému zo zoznamu Rozšírené možnosti spustenia:

4:Pomocou klávesov so šípkami vyberte možnosť Opraviť tento počítač .
Vyberte nastavenie jazyka klávesnice , a potom kliknite na tlačidlo Ďalej.
Vyberte operačný systém, ktorý chcete opraviť, a potom kliknite na tlačidlo Ďalej.
Vyberte svoj užívateľský účet za tlačidlo Ďalej

V ponuke Možnosti obnovenia systému budete mať nasledujúce možnosti:

oprava spustenia
obnovenie systému
Windows Complete PC Restore
Windows Memory Diagnostic Tool
príkazový riadok

Vyber Príkazový riadok

5;Spust prikazovy riadok
a napis prikaz notepad [enter]
kliknu subor>>otvorit>.najdi tento pocitac a otvor USB kluc, kde mas ulozeny FRST
Pozri sa ze ake pismenko ma USB, a ak napriklad ma F:/
Tak zatvor notepad a do prikazoveho riadku zadaj prikaz
F:\FRST.exe alebo F:\FRST64 a stlac enter, a stlac Scan>>o chvilku sa ti na USB sa ulozi log s nazvom FRST.txt>.obsah vloz sem.

Možnosti obnovy systému pomocou inštalačného disku systému Windows:
Vložte inštalačný disk.
Reštartujte počítač.
Ak sa zobrazí výzva, stlačte ľubovoľný kláves pre spustenie systému Windows z inštalačného disku.
Ak váš počítač nie je nakonfigurovaný pre spustenie z disku CD alebo DVD, skontrolujte nastavenia systému BIOS.
Kliknite na tlačidlo Opraviť tento počítač.
Vyberte nastavenie jazyka a kliknite na tlačidlo Ďalej.
Vyberte operačný systém, ktorý chcete opraviť, a potom kliknite na tlačidlo Ďalej.
Vyberte svoj užívateľský účet je kliknite na tlačidlo Ďalej.

V ponuke Možnosti obnovenia systému budete mať nasledujúce možnosti:

oprava spustenia
obnovenie systému
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Príkazový riadok

Vyber Príkazový riadok

5;Spust prikazovy riadok
a napis prikaz notepad [enter]
kliknu subor>>otvorit>.najdi tento pocitac a otvor USB kluc, kde mas ulozeny FRST
Pozri sa ze ake pismenko ma USB, a ak napriklad ma F:/
Tak zatvor notepad a do prikazoveho riadku zadaj prikaz
32 bites F:\FRST.exe alebo pri 64 bites F:\FRST64 a stlac enter, a stlac Scan>>o chvilku sa ti na USB sa ulozi log s nazvom FRST.txt>.obsah vloz sem.
Poznamka:
Umiestnite začiarknutie aj vedľa Ovládače MD5 .

rumik001 · #5 Příspěvek od **rumik001** » 27 Kvě 2013 21:31

Posilam log. Uz muzu nainstalovat Avast Free? Cejtim se nejakej nahatej bez antiviru

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-05-2013
Ran by SYSTEM on 27-05-2013 22:22:05
Running from H:\
Windows 7 Home Premium (X64) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] "D:\Program Files (x86)\iTunes\iTunesHelper.exe" [x]
HKU\Kenny\...\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]

==================== Services (Whitelisted) =================

S2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
S2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625816 2012-06-22] (Pandora.TV)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] ()

==================== Drivers (Whitelisted) ====================

S3 3xHybr64; C:\Windows\System32\DRIVERS\3xHybr64.sys [1413592 2006-11-22] (Philips Semiconductors GmbH)
S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-05-19] (Duplex Secure Ltd.)

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\3xHybr64.sys 975474B3739A876B21BC85B6A9A872C4
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\AsIO.sys A82C01606DC27D05D9D3BFB6BB807E32
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bridge.sys 5C2F352A4E961D72518261257AAE204B
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys AAFCB52FE0037207FB6FBEA070D25EFE
C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys AF2E16242AA723F68F461B6EAE2EAD3D
C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\system32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
C:\Windows\System32\Drivers\ksecpkg.sys 7EFB9333E4ECCE6AE4AE9D777D9E553E
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\L1E62x64.sys 2AC603C3188C704CFCE353659AA7AD71
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ASACPI.sys 19B006B181E3875FD254F7B67ACF1E7C
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netr28x.sys D9A089E17112F04F452D22254B959D87
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nvlddmkm.sys FCBA1C22727939E7CFF9EB08FE9692AB
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\sptd.sys D6AB7C13FCDD2E4CAC35244D2C172D9A
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\DRIVERS\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\tsusbflt.sys 17C6B51CBCCDED95B3CC14E22791F85E
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\Drivers\usbaapl64.sys C9E9D59C0099A9FF51697E9306A44240
C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys C025055FE7B87701EB042095DF1A2D7B
C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24
C:\Windows\system32\drivers\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31
C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\System32\DRIVERS\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-05-27 22:17 - 2013-05-27 22:17 - 00000000 ____D C:\FRST
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\Users\Kenny\Desktop\combofix.txt
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\ComboFix.txt
2013-05-27 19:18 - 2011-06-26 07:45 - 00256000 ____A C:\Windows\PEV.exe
2013-05-27 19:18 - 2010-11-07 18:20 - 00208896 ____A C:\Windows\MBR.exe
2013-05-27 19:18 - 2009-04-20 05:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00098816 ____A C:\Windows\sed.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00080412 ____A C:\Windows\grep.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00068096 ____A C:\Windows\zip.exe
2013-05-27 19:16 - 2013-05-27 19:32 - 00000000 ____D C:\Qoobox
2013-05-27 19:16 - 2013-05-27 19:31 - 00000000 ____D C:\Windows\erdnt
2013-05-27 19:15 - 2013-05-27 19:14 - 05073915 ____R (Swearware) C:\Users\Kenny\Desktop\ComboFix.exe
2013-05-27 19:08 - 2013-05-27 19:11 - 00000709 ____A C:\Users\Kenny\Desktop\JRT.txt
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\Windows\ERUNT
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\JRT
2013-05-27 19:01 - 2013-05-27 19:01 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Kenny\Desktop\JRT.exe
2013-05-27 19:01 - 2013-05-27 19:01 - 00001149 ____A C:\Users\Kenny\Desktop\AdwCleaner[S1].txt
2013-05-27 18:46 - 2013-05-27 18:47 - 00001149 ____A C:\AdwCleaner[S1].txt
2013-05-27 18:45 - 2013-05-27 18:45 - 00632031 ____A C:\Users\Kenny\Desktop\adwcleaner.exe
2013-05-27 00:23 - 2013-05-27 00:23 - 00000000 __SHD C:\$$PendingFiles
2013-05-27 00:15 - 2013-05-27 00:15 - 00000000 ____D C:\Users\Kenny\AppData\LocalGoogle
2013-05-27 00:12 - 2013-05-27 20:57 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-05-27 00:11 - 2013-05-27 20:57 - 00000000 ____D C:\ProgramData\AVAST Software
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\rsit
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\Program Files\trend micro
2013-05-23 20:11 - 2013-05-23 20:12 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 20:11 - 2013-05-23 20:12 - 00000000 ____D C:\Program Files\iTunes
2013-05-23 20:11 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iPod
2013-05-19 21:47 - 2013-05-19 21:47 - 00000853 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-05-15 02:02 - 2013-04-05 07:52 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-15 02:02 - 2013-04-05 07:52 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-15 02:02 - 2013-04-05 07:52 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-15 02:02 - 2013-04-05 07:50 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-15 02:02 - 2013-04-05 06:28 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-15 02:02 - 2013-04-05 06:28 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-15 02:02 - 2013-04-05 05:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-15 02:02 - 2013-04-05 05:29 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-15 02:02 - 2013-04-05 04:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-15 02:02 - 2013-04-05 04:38 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-05-14 21:37 - 2013-04-10 07:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-14 21:37 - 2013-04-10 07:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-14 21:37 - 2013-04-10 04:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-14 21:37 - 2013-03-19 06:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-14 21:37 - 2013-03-19 06:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-14 21:37 - 2013-02-27 07:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-14 21:37 - 2013-02-27 06:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-14 21:37 - 2013-02-27 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-14 21:37 - 2013-02-27 06:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-14 21:37 - 2013-02-27 06:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-14 21:37 - 2013-02-27 05:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-14 21:37 - 2013-02-27 05:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-14 21:37 - 2013-02-27 05:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-14 21:37 - 2011-02-03 12:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-11 11:31 - 2013-05-11 11:31 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\Nero
2013-05-11 11:19 - 2013-05-11 11:28 - 00000000 ____D C:\ProgramData\Nero
2013-05-11 11:19 - 2013-05-11 11:20 - 00000000 ____D C:\Program Files (x86)\Nero
2013-05-11 11:19 - 2013-05-11 11:19 - 00002843 ____A C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2013-05-11 09:33 - 2010-02-04 09:01 - 00022360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-05-11 09:31 - 2013-05-11 09:31 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-05-11 08:28 - 2013-05-11 08:28 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\WinRAR
2013-05-01 00:24 - 2013-05-01 00:24 - 00007605 ____A C:\Users\Kenny\AppData\Local\Resmon.ResmonCfg
2013-04-30 06:42 - 2013-04-30 06:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-04-30 06:41 - 2013-04-30 06:41 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:38 - 2013-04-30 06:47 - 00010360 ____A C:\Windows\IE10_main.log

==================== One Month Modified Files and Folders =======

2013-05-27 22:17 - 2013-05-27 22:17 - 00000000 ____D C:\FRST
2013-05-27 21:07 - 2012-10-21 11:41 - 01953098 ____A C:\Windows\WindowsUpdate.log
2013-05-27 21:06 - 2009-07-14 05:45 - 00013776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-05-27 21:06 - 2009-07-14 05:45 - 00013776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-05-27 21:03 - 2009-07-14 16:18 - 00634308 ____A C:\Windows\System32\perfh005.dat
2013-05-27 21:03 - 2009-07-14 16:18 - 00122898 ____A C:\Windows\System32\perfc005.dat
2013-05-27 21:03 - 2009-07-14 06:13 - 01478586 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-27 20:59 - 2012-10-21 12:07 - 00000946 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-27 20:59 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-05-27 20:58 - 2013-04-21 18:33 - 00004220 ____A C:\Windows\setupact.log
2013-05-27 20:57 - 2013-05-27 00:12 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-05-27 20:57 - 2013-05-27 00:11 - 00000000 ____D C:\ProgramData\AVAST Software
2013-05-27 20:51 - 2012-10-21 12:41 - 00045050 ____A C:\Windows\PFRO.log
2013-05-27 20:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-05-27 19:57 - 2012-10-21 12:07 - 00000950 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\Users\Kenny\Desktop\combofix.txt
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\ComboFix.txt
2013-05-27 19:32 - 2013-05-27 19:16 - 00000000 ____D C:\Qoobox
2013-05-27 19:32 - 2009-07-14 04:20 - 00000000 __RHD C:\users\Default
2013-05-27 19:31 - 2013-05-27 19:16 - 00000000 ____D C:\Windows\erdnt
2013-05-27 19:29 - 2009-07-14 03:34 - 00000215 ____A C:\Windows\system.ini
2013-05-27 19:14 - 2013-05-27 19:15 - 05073915 ____R (Swearware) C:\Users\Kenny\Desktop\ComboFix.exe
2013-05-27 19:11 - 2013-05-27 19:08 - 00000709 ____A C:\Users\Kenny\Desktop\JRT.txt
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\Windows\ERUNT
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\JRT
2013-05-27 19:01 - 2013-05-27 19:01 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Kenny\Desktop\JRT.exe
2013-05-27 19:01 - 2013-05-27 19:01 - 00001149 ____A C:\Users\Kenny\Desktop\AdwCleaner[S1].txt
2013-05-27 18:47 - 2013-05-27 18:46 - 00001149 ____A C:\AdwCleaner[S1].txt
2013-05-27 18:45 - 2013-05-27 18:45 - 00632031 ____A C:\Users\Kenny\Desktop\adwcleaner.exe
2013-05-27 00:23 - 2013-05-27 00:23 - 00000000 __SHD C:\$$PendingFiles
2013-05-27 00:15 - 2013-05-27 00:15 - 00000000 ____D C:\Users\Kenny\AppData\LocalGoogle
2013-05-27 00:15 - 2012-10-21 12:07 - 00000000 ____D C:\Users\Kenny\AppData\Local\Google
2013-05-27 00:15 - 2012-10-21 12:07 - 00000000 ____D C:\Program Files (x86)\Google
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\rsit
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\Program Files\trend micro
2013-05-26 21:47 - 2013-04-13 11:11 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\uTorrent
2013-05-23 20:12 - 2013-05-23 20:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 20:12 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iTunes
2013-05-23 20:12 - 2012-10-21 12:58 - 00001568 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-05-23 20:11 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iPod
2013-05-19 21:47 - 2013-05-19 21:47 - 00000853 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-05-19 21:46 - 2012-10-21 12:29 - 00564824 ____A (Duplex Secure Ltd.) C:\Windows\System32\Drivers\sptd.sys
2013-05-15 02:30 - 2009-07-14 05:45 - 00344000 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-15 02:10 - 2012-10-21 12:46 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-15 02:08 - 2012-10-23 03:43 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-11 11:31 - 2013-05-11 11:31 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\Nero
2013-05-11 11:28 - 2013-05-11 11:19 - 00000000 ____D C:\ProgramData\Nero
2013-05-11 11:20 - 2013-05-11 11:19 - 00000000 ____D C:\Program Files (x86)\Nero
2013-05-11 11:19 - 2013-05-11 11:19 - 00002843 ____A C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2013-05-11 11:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-05-11 09:31 - 2013-05-11 09:31 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-05-11 08:28 - 2013-05-11 08:28 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\WinRAR
2013-05-08 05:06 - 2012-10-21 12:15 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\GHISLER
2013-05-07 23:29 - 2009-07-14 16:36 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-05-01 00:24 - 2013-05-01 00:24 - 00007605 ____A C:\Users\Kenny\AppData\Local\Resmon.ResmonCfg
2013-05-01 00:02 - 2013-04-22 22:49 - 00000000 ____D C:\ProgramData\Western Digital
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-04-30 06:47 - 2013-04-30 06:38 - 00010360 ____A C:\Windows\IE10_main.log
2013-04-30 06:42 - 2013-04-30 06:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-04-30 06:41 - 2013-04-30 06:41 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

==================== Known DLLs (Whitelisted) ================

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 4095.05 MB
Available physical RAM: 3470.31 MB
Total Pagefile: 4093.2 MB
Available Pagefile: 3471.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:39.05 GB) (Free:1.64 GB) NTFS (Disk=1 Partition=2)
Drive d: (Archiv) (Fixed) (Total:186.3 GB) (Free:16.92 GB) NTFS (Disk=0 Partition=1)
Drive f: (GRMCHPXFRER_CS_DVD) (CDROM) (Total:2.9 GB) (Free:0 GB) UDF
Drive g: (OneTouch 4) (Fixed) (Total:931.51 GB) (Free:86.73 GB) NTFS (Disk=2 Partition=1)
Drive h: (CORSAIR) (Removable) (Total:29.01 GB) (Free:29 GB) FAT32 (Disk=3 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:426.7 GB) (Free:174.02 GB) NTFS (Disk=1 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 186 GB) (Disk ID: 02185F2C)
Partition 1: (Not Active) - (Size=186 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C52AC52A)
Partition 1: (Not Active) - (Size=39 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=427 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 932 GB) (Disk ID: 83B799E3)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 29 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=29 GB) - (Type=0C)

Last Boot: 2013-05-24 05:58

==================== End Of Log ============================

#6 Příspěvek od **stell** » 28 Kvě 2013 06:35

Uz muzu nainstalovat Avast Free

Jasne, uz mozes nainstalovat, mas este nejaky problem s pc?/

rumik001 · #7 Příspěvek od **rumik001** » 28 Kvě 2013 06:40

snad ne, diky

))

#8 Příspěvek od **stell** » 28 Kvě 2013 06:43

C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
otestuj na www.virustotal.com
C:\Program Files\Windows Defender\mpsvc.dll
Link z testu vloz sem.

rumik001 · #9 Příspěvek od **rumik001** » 28 Kvě 2013 06:54

stell napsal:C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
otestuj na http://www.virustotal.com
C:\Program Files\Windows Defender\mpsvc.dll
Link z testu vloz sem.

Bohuzel mi nejde vlozit:" Nemate pravneni k otevreni tohoto souboru"

#10 Příspěvek od **stell** » 28 Kvě 2013 07:08

ok, stiahni MpSvc.dll a skopiruj to do zlozky.
C:\Windows\SysWOW64\
http://originaldll.com/download/13416.dll

ak to budes mat pokracuj takto.
Otvor Notepad (Poznámkový blok) a zkopíruj do nehocelý tex:

Kód: Vybrat vše

start
Replace: C:\Windows\SysWOW64\MpSvc.dll C:\Program Files\Windows Defender\mpsvc.dll
end

Potom klik na Subor -> Uložiť ako.. .-> Ako je Názov souboru tak do toho riadku napiš:fixlist.txt
Typ súboru tak tam vyberies *]všetky súbory
A ulož ho flash disk, tam kde mas FRST64.

Znovu nabootuj do prikazoveho riadku, tak ako si uz robil, zistis znova pismenko flashdisku, a spustis FRST64, ale teraz kliknes na gombik,
Fix.
Na Flashdisk sa teraz sa ti ulozi log, Fixlog.txt
Restart do windows a obsah Fixlog.txt vloz sem.

rumik001 · #11 Příspěvek od **rumik001** » 28 Kvě 2013 21:12

Ahoj, posilam fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-05-2013
Ran by SYSTEM at 2013-05-28 22:06:06 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

C:\Program Files\Windows Defender\mpsvc.dll => Moved successfully.
C:\Windows\SysWOW64\MpSvc.dll copied successfully to C:\Program Files\Windows Defender\mpsvc.dll

==== End of Fixlog ====

#12 Příspěvek od **stell** » 29 Kvě 2013 06:45

Ok, zmaz z flashky Fixlog.txt a log.txt a FRST.txt
a das novy log .
Znovu nabootuj do prikazoveho riadku, tak ako si uz robil, zistis znova pismenko flashdisku, a spustis FRST64, a teraz kliknes na gombik.
SCAN
Na Flashdisk sa teraz sa ti ulozi log, FRST.txt
Restart do windows a obsah FRST.txt vloz sem.

A uvidime.

rumik001 · #13 Příspěvek od **rumik001** » 29 Kvě 2013 07:02

frst log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-05-2013
Ran by SYSTEM on 29-05-2013 07:51:44
Running from G:\
Windows 7 Home Premium (X64) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] "D:\Program Files (x86)\iTunes\iTunesHelper.exe" [x]
HKLM-x32\...\Run: [avast] "d:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [x]
HKU\Kenny\...\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]

==================== Services (Whitelisted) =================

S2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
S2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625816 2012-06-22] (Pandora.TV)
S2 avast! Antivirus; "d:\Program Files\AVAST Software\Avast\AvastSvc.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 3xHybr64; C:\Windows\System32\DRIVERS\3xHybr64.sys [1413592 2006-11-22] (Philips Semiconductors GmbH)
S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-05-19] (Duplex Secure Ltd.)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-05-28 20:52 - 2013-05-28 20:52 - 01011712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mpsvc.dll
2013-05-28 06:43 - 2013-05-28 06:43 - 00000982 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-05-28 06:43 - 2013-05-09 09:59 - 01025808 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00378432 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-05-28 06:43 - 2013-05-09 09:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-05-28 06:43 - 2013-05-09 09:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-05-28 06:42 - 2013-05-09 09:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-05-27 22:17 - 2013-05-27 22:17 - 00000000 ____D C:\FRST
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\Users\Kenny\Desktop\combofix.txt
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\ComboFix.txt
2013-05-27 19:18 - 2011-06-26 07:45 - 00256000 ____A C:\Windows\PEV.exe
2013-05-27 19:18 - 2010-11-07 18:20 - 00208896 ____A C:\Windows\MBR.exe
2013-05-27 19:18 - 2009-04-20 05:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00098816 ____A C:\Windows\sed.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00080412 ____A C:\Windows\grep.exe
2013-05-27 19:18 - 2000-08-31 01:00 - 00068096 ____A C:\Windows\zip.exe
2013-05-27 19:16 - 2013-05-27 19:32 - 00000000 ____D C:\Qoobox
2013-05-27 19:16 - 2013-05-27 19:31 - 00000000 ____D C:\Windows\erdnt
2013-05-27 19:15 - 2013-05-27 19:14 - 05073915 ____R (Swearware) C:\Users\Kenny\Desktop\ComboFix.exe
2013-05-27 19:08 - 2013-05-27 19:11 - 00000709 ____A C:\Users\Kenny\Desktop\JRT.txt
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\Windows\ERUNT
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\JRT
2013-05-27 19:01 - 2013-05-27 19:01 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Kenny\Desktop\JRT.exe
2013-05-27 19:01 - 2013-05-27 19:01 - 00001149 ____A C:\Users\Kenny\Desktop\AdwCleaner[S1].txt
2013-05-27 18:46 - 2013-05-27 18:47 - 00001149 ____A C:\AdwCleaner[S1].txt
2013-05-27 18:45 - 2013-05-27 18:45 - 00632031 ____A C:\Users\Kenny\Desktop\adwcleaner.exe
2013-05-27 00:23 - 2013-05-27 00:23 - 00000000 __SHD C:\$$PendingFiles
2013-05-27 00:15 - 2013-05-27 00:15 - 00000000 ____D C:\Users\Kenny\AppData\LocalGoogle
2013-05-27 00:12 - 2013-05-28 06:47 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-05-27 00:11 - 2013-05-28 06:42 - 00000000 ____D C:\ProgramData\AVAST Software
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\rsit
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\Program Files\trend micro
2013-05-23 20:11 - 2013-05-23 20:12 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 20:11 - 2013-05-23 20:12 - 00000000 ____D C:\Program Files\iTunes
2013-05-23 20:11 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iPod
2013-05-19 21:47 - 2013-05-19 21:47 - 00000853 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-05-15 02:02 - 2013-04-05 07:52 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-15 02:02 - 2013-04-05 07:52 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-15 02:02 - 2013-04-05 07:52 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-15 02:02 - 2013-04-05 07:50 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-15 02:02 - 2013-04-05 07:50 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-15 02:02 - 2013-04-05 06:28 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-15 02:02 - 2013-04-05 06:28 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-15 02:02 - 2013-04-05 06:26 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-15 02:02 - 2013-04-05 05:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-15 02:02 - 2013-04-05 05:29 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-15 02:02 - 2013-04-05 04:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-15 02:02 - 2013-04-05 04:38 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-05-14 21:37 - 2013-04-10 07:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-14 21:37 - 2013-04-10 07:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-14 21:37 - 2013-04-10 04:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-14 21:37 - 2013-03-19 06:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-14 21:37 - 2013-03-19 06:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-14 21:37 - 2013-02-27 07:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-14 21:37 - 2013-02-27 06:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-14 21:37 - 2013-02-27 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-14 21:37 - 2013-02-27 06:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-14 21:37 - 2013-02-27 06:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-14 21:37 - 2013-02-27 05:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-14 21:37 - 2013-02-27 05:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-14 21:37 - 2013-02-27 05:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-14 21:37 - 2011-02-03 12:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-11 11:31 - 2013-05-11 11:31 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\Nero
2013-05-11 11:19 - 2013-05-11 11:28 - 00000000 ____D C:\ProgramData\Nero
2013-05-11 11:19 - 2013-05-11 11:20 - 00000000 ____D C:\Program Files (x86)\Nero
2013-05-11 11:19 - 2013-05-11 11:19 - 00002843 ____A C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2013-05-11 09:33 - 2010-02-04 09:01 - 00022360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-05-11 09:31 - 2013-05-11 09:31 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-05-11 08:28 - 2013-05-11 08:28 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\WinRAR
2013-05-01 00:24 - 2013-05-01 00:24 - 00007605 ____A C:\Users\Kenny\AppData\Local\Resmon.ResmonCfg
2013-04-30 06:42 - 2013-04-30 06:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-04-30 06:41 - 2013-04-30 06:41 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:38 - 2013-04-30 06:47 - 00010360 ____A C:\Windows\IE10_main.log

==================== One Month Modified Files and Folders =======

2013-05-29 06:44 - 2013-04-13 11:11 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\uTorrent
2013-05-29 06:44 - 2012-10-21 11:41 - 01974647 ____A C:\Windows\WindowsUpdate.log
2013-05-29 05:57 - 2012-10-21 12:07 - 00000950 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-05-28 22:06 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-05-28 21:16 - 2009-07-14 05:45 - 00013776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-05-28 21:16 - 2009-07-14 05:45 - 00013776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-05-28 21:08 - 2013-04-21 18:33 - 00004332 ____A C:\Windows\setupact.log
2013-05-28 21:08 - 2012-10-21 12:07 - 00000946 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-28 21:08 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-05-28 20:52 - 2013-05-28 20:52 - 01011712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mpsvc.dll
2013-05-28 06:47 - 2013-05-27 00:12 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-05-28 06:43 - 2013-05-28 06:43 - 00000982 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-05-28 06:42 - 2013-05-27 00:11 - 00000000 ____D C:\ProgramData\AVAST Software
2013-05-27 22:17 - 2013-05-27 22:17 - 00000000 ____D C:\FRST
2013-05-27 21:03 - 2009-07-14 16:18 - 00634308 ____A C:\Windows\System32\perfh005.dat
2013-05-27 21:03 - 2009-07-14 16:18 - 00122898 ____A C:\Windows\System32\perfc005.dat
2013-05-27 21:03 - 2009-07-14 06:13 - 01478586 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-27 20:51 - 2012-10-21 12:41 - 00045050 ____A C:\Windows\PFRO.log
2013-05-27 20:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\Users\Kenny\Desktop\combofix.txt
2013-05-27 19:32 - 2013-05-27 19:32 - 00012347 ____A C:\ComboFix.txt
2013-05-27 19:32 - 2013-05-27 19:16 - 00000000 ____D C:\Qoobox
2013-05-27 19:32 - 2009-07-14 04:20 - 00000000 __RHD C:\users\Default
2013-05-27 19:31 - 2013-05-27 19:16 - 00000000 ____D C:\Windows\erdnt
2013-05-27 19:29 - 2009-07-14 03:34 - 00000215 ____A C:\Windows\system.ini
2013-05-27 19:14 - 2013-05-27 19:15 - 05073915 ____R (Swearware) C:\Users\Kenny\Desktop\ComboFix.exe
2013-05-27 19:11 - 2013-05-27 19:08 - 00000709 ____A C:\Users\Kenny\Desktop\JRT.txt
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\Windows\ERUNT
2013-05-27 19:02 - 2013-05-27 19:02 - 00000000 ____D C:\JRT
2013-05-27 19:01 - 2013-05-27 19:01 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Kenny\Desktop\JRT.exe
2013-05-27 19:01 - 2013-05-27 19:01 - 00001149 ____A C:\Users\Kenny\Desktop\AdwCleaner[S1].txt
2013-05-27 18:47 - 2013-05-27 18:46 - 00001149 ____A C:\AdwCleaner[S1].txt
2013-05-27 18:45 - 2013-05-27 18:45 - 00632031 ____A C:\Users\Kenny\Desktop\adwcleaner.exe
2013-05-27 00:23 - 2013-05-27 00:23 - 00000000 __SHD C:\$$PendingFiles
2013-05-27 00:15 - 2013-05-27 00:15 - 00000000 ____D C:\Users\Kenny\AppData\LocalGoogle
2013-05-27 00:15 - 2012-10-21 12:07 - 00000000 ____D C:\Users\Kenny\AppData\Local\Google
2013-05-27 00:15 - 2012-10-21 12:07 - 00000000 ____D C:\Program Files (x86)\Google
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\rsit
2013-05-26 23:53 - 2013-05-26 23:53 - 00000000 ____D C:\Program Files\trend micro
2013-05-23 20:12 - 2013-05-23 20:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-23 20:12 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iTunes
2013-05-23 20:12 - 2012-10-21 12:58 - 00001568 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-05-23 20:11 - 2013-05-23 20:11 - 00000000 ____D C:\Program Files\iPod
2013-05-19 21:47 - 2013-05-19 21:47 - 00000853 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2013-05-19 21:46 - 2012-10-21 12:29 - 00564824 ____A (Duplex Secure Ltd.) C:\Windows\System32\Drivers\sptd.sys
2013-05-15 02:30 - 2009-07-14 05:45 - 00344000 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-15 02:10 - 2012-10-21 12:46 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-15 02:08 - 2012-10-23 03:43 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-11 11:31 - 2013-05-11 11:31 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\Nero
2013-05-11 11:28 - 2013-05-11 11:19 - 00000000 ____D C:\ProgramData\Nero
2013-05-11 11:20 - 2013-05-11 11:19 - 00000000 ____D C:\Program Files (x86)\Nero
2013-05-11 11:19 - 2013-05-11 11:19 - 00002843 ____A C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2013-05-11 11:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-05-11 09:31 - 2013-05-11 09:31 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-05-11 08:28 - 2013-05-11 08:28 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\WinRAR
2013-05-09 09:59 - 2013-05-28 06:43 - 01025808 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00378432 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-05-09 09:59 - 2013-05-28 06:43 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-05-09 09:58 - 2013-05-28 06:43 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-05-09 09:58 - 2013-05-28 06:42 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-05-08 05:06 - 2012-10-21 12:15 - 00000000 ____D C:\Users\Kenny\AppData\Roaming\GHISLER
2013-05-07 23:29 - 2009-07-14 16:36 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-05-01 00:24 - 2013-05-01 00:24 - 00007605 ____A C:\Users\Kenny\AppData\Local\Resmon.ResmonCfg
2013-05-01 00:02 - 2013-04-22 22:49 - 00000000 ____D C:\ProgramData\Western Digital
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-04-30 06:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-04-30 06:47 - 2013-04-30 06:38 - 00010360 ____A C:\Windows\IE10_main.log
2013-04-30 06:42 - 2013-04-30 06:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-04-30 06:42 - 2013-04-30 06:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-04-30 06:42 - 2013-04-30 06:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-04-30 06:42 - 2013-04-30 06:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-04-30 06:42 - 2013-04-30 06:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-04-30 06:42 - 2013-04-30 06:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-04-30 06:41 - 2013-04-30 06:41 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-30 06:41 - 2013-04-30 06:41 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

==================== Known DLLs (Whitelisted) ================

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 4095.05 MB
Available physical RAM: 3463.28 MB
Total Pagefile: 4093.2 MB
Available Pagefile: 3458.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:39.05 GB) (Free:1.56 GB) NTFS (Disk=1 Partition=2)
Drive d: (Archiv) (Fixed) (Total:186.3 GB) (Free:16.92 GB) NTFS (Disk=0 Partition=1)
Drive f: (GRMCHPXFRER_CS_DVD) (CDROM) (Total:2.9 GB) (Free:0 GB) UDF
Drive g: (CORSAIR) (Removable) (Total:29.01 GB) (Free:29 GB) FAT32 (Disk=2 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:426.7 GB) (Free:173.55 GB) NTFS (Disk=1 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 186 GB) (Disk ID: 02185F2C)
Partition 1: (Not Active) - (Size=186 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C52AC52A)
Partition 1: (Not Active) - (Size=39 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=427 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 29 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=29 GB) - (Type=0C)

Last Boot: 2013-05-24 05:58

==================== End Of Log ============================

#14 Příspěvek od **stell** » 29 Kvě 2013 07:18

ok, premenuj ikonku combofixu na uninstall, klik, ok, ok, ok, combofix sa odinstaluje z pc.
A tot je vsetko.

rumik001 · #15 Příspěvek od **rumik001** » 29 Kvě 2013 12:25

Diky moc!

VIRY.CZ

Win64/Patched.A

Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A

Re: Win64/Patched.A