Prosim dostal sem vir SLOVENSKA POLICIE

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 Črv 2013 22:19

Prosim dostal sem vir SLOVENSKA POLICIE

#1 Příspěvek od Member45 »

dobry neskory vecer prajem... bratovi sa podarilo zavirit takto komp.
tak by som sa chcel spytat na pomoc.
v safe mode som a hlasenie s RSIT je:

Logfile of random's system information tool 1.09 (written by random/random)
Run by JURICA at 2013-06-12 23:17:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 178 GB (36%) free of 492 GB
Total RAM: 4094 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:18:10, on 12. 6. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Safe mode with network support

Running processes:
C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\JURICA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
R3 - URLSearchHook: (no name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - .DEFAULT User Startup: LaunchCenter.lnk = C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (User 'Default user')
O4 - Startup: msconfig.lnk = C:\Windows\System32\rundll32.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~2\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~2\PCTRAN~1\webie.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://213.160.174.141
O16 - DPF: {16741686-0571-44DA-A90B-7C2E5DB00EF7} (HEM_PLUGIN Control) - http://213.160.174.141/HEMPlugin.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Fujitsu Diagnostic Testhandler (TestHandler) - Fujitsu Technology Solutions - C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater15.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13998 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\helppane.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Users\JURICA\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup10 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/3/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --disable-webgl --disable-pepper-3d --disable-gl-multisampling --disable-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-video-decode --channel="1912.6.2026067073\1974423679" /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\JURICA\Desktop\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://isearch.avg.com/?cid={2F739CEF-9 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.911, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.3.2, engine@conduit.com:3.2.5.2, {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {9d1f059c-cada-4111-9696-41a62d64e3ba}:0.7.1, {7E77F5DF-8022-40e3-9122-F03DEBEFC43B}:1.0.25, toolbar@ask.com:3.13.1.18107, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.8"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
avg-secure-search.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
yahoo.xml
zoznam-sk.xml

C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\extensions\
plugin@yontoo.com
{62d40876-df18-411f-9d34-a9dd7a197bc5}
{7b13ec3e-999a-4b70-b9cb-2617b8323822}
{9d1f059c-cada-4111-9696-41a62d64e3ba}

C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\searchplugins\
askcom.xml
brothersoft-extreme3-customized-web-search.xml
daemon-search.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}]
AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll [2012-10-15 1393272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2012-10-15 1968248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-12-17 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll [2013-05-12 1991344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-12-17 192144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YTD Toolbar - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll [2013-05-15 1353536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-12-17 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\PROGRA~2\PCTRAN~1\webie.dll [2004-05-13 319488]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-11-29 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll [2013-05-12 1991344]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-12-17 192144]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YTD Toolbar - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll [2013-05-15 1353536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-10-06 8158240]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-09-12 357384]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-17 190472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-08-11 39408]
"BitTorrent"=C:\Program Files (x86)\BitTorrent\BitTorrent.exe [2012-06-14 6380440]
"ctfmon.exe"=C:\PROGRA~3\rundll32.exe [2013-06-12 44544]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-09-12 5048488]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2013-05-12 1226928]
"SweetIM"=C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2012-05-29 115032]
"Sweetpacks Communicator"=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2013-05-15 1298240]

C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
msconfig.lnk - C:\Windows\System32\rundll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-12 23:17:31 ----D---- C:\rsit
2013-06-12 23:17:31 ----D---- C:\Program Files\trend micro
2013-06-12 23:12:34 ----A---- C:\Windows\ntbtlog.txt
2013-06-12 14:45:52 ----A---- C:\ProgramData\as98213.txt
2013-06-12 14:45:52 ----A---- C:\ProgramData\3ocig.js
2013-06-12 14:45:52 ----A---- C:\ProgramData\3ocig.bat
2013-06-12 14:45:39 ----A---- C:\ProgramData\rundll32.exe
2013-06-12 14:45:39 ----A---- C:\ProgramData\gico3.dat
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-08 03:08:19 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-06-08 03:08:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-08 03:08:19 ----A---- C:\Windows\system32\elshyph.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-06-08 03:08:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-06-08 03:08:17 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-08 03:08:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\url.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-06-08 03:08:15 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-06-08 03:08:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-08 03:08:14 ----A---- C:\Windows\system32\wininet.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\urlmon.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\url.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\msrating.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\msls31.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iesetup.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iertutil.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\iernonce.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ieapfltr.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ieapfltr.dat
2013-06-08 03:08:14 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-08 03:08:14 ----A---- C:\Windows\system32\icardie.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\dxtrans.dll
2013-06-08 03:08:14 ----A---- C:\Windows\system32\dxtmsft.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\wextract.exe
2013-06-08 03:08:13 ----A---- C:\Windows\system32\webcheck.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\mshtmled.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\licmgr10.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\inseng.dll
2013-06-08 03:08:13 ----A---- C:\Windows\system32\iedkcs32.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\vbscript.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\pngfilt.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\occache.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\mshtml.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\mshta.exe
2013-06-08 03:08:12 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\jscript.dll
2013-06-08 03:08:12 ----A---- C:\Windows\system32\iexpress.exe
2013-06-08 03:08:12 ----A---- C:\Windows\system32\ieUnatt.exe
2013-06-08 03:08:11 ----A---- C:\Windows\system32\msfeedssync.exe
2013-06-08 03:08:11 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\imgutil.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\iepeers.dll
2013-06-08 03:08:11 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-06-08 03:08:10 ----A---- C:\Windows\system32\mshtmler.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\jscript9.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\ieui.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-08 03:08:10 ----A---- C:\Windows\system32\ieframe.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06:43 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-06-08 03:06:42 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\XpsPrint.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\WMPhoto.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-06-08 03:06:42 ----A---- C:\Windows\system32\d2d1.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-06-08 03:06:41 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\FntCache.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\dxgi.dll
2013-06-08 03:06:41 ----A---- C:\Windows\system32\d3d10warp.dll
2013-06-08 03:06:40 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-06-08 03:06:40 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-06-08 03:06:40 ----A---- C:\Windows\system32\DWrite.dll
2013-06-08 03:06:39 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-08 03:06:38 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-06-08 03:06:37 ----A---- C:\Windows\system32\d3d11.dll
2013-06-08 03:06:37 ----A---- C:\Windows\system32\d3d10core.dll
2013-06-08 03:06:36 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-06-08 03:06:36 ----A---- C:\Windows\system32\d3d10.dll
2013-06-08 03:06:35 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-06-08 03:06:35 ----A---- C:\Windows\system32\d3d10_1.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-06-08 03:06:34 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-06-08 03:06:34 ----A---- C:\Windows\system32\d3d10level9.dll
2013-06-08 03:06:33 ----A---- C:\Windows\system32\UIAnimation.dll
2013-06-06 13:56:19 ----D---- C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56:19 ----D---- C:\Program Files (x86)\Application Updater
2013-05-15 11:33:24 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 11:33:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 11:33:24 ----A---- C:\Windows\system32\cdd.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 11:33:09 ----A---- C:\Windows\system32\authui.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-15 11:33:08 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-15 11:33:08 ----A---- C:\Windows\system32\consent.exe
2013-05-15 11:33:08 ----A---- C:\Windows\system32\appinfo.dll
2013-05-15 11:33:05 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 11:33:05 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 11:33:04 ----A---- C:\Windows\system32\win32k.sys

======List of files/folders modified in the last 1 month======

2013-06-12 23:17:31 ----RD---- C:\Program Files
2013-06-12 23:12:34 ----D---- C:\Windows
2013-06-12 22:56:41 ----D---- C:\Windows\system32\config
2013-06-12 22:56:31 ----D---- C:\Windows\Temp
2013-06-12 22:54:04 ----D---- C:\Users\JURICA\AppData\Roaming\BitTorrent
2013-06-12 22:53:32 ----HD---- C:\ProgramData
2013-06-12 22:19:44 ----D---- C:\Windows\Prefetch
2013-06-12 13:33:43 ----D---- C:\Windows\SysWOW64
2013-06-12 13:33:40 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-12 13:12:48 ----D---- C:\Counter-Strike 1.6
2013-06-12 12:06:18 ----D---- C:\Windows\System32
2013-06-12 12:06:18 ----D---- C:\Windows\inf
2013-06-12 12:06:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-12 11:01:06 ----D---- C:\Windows\system32\catroot
2013-06-12 11:01:04 ----D---- C:\Windows\winsxs
2013-06-12 10:58:45 ----D---- C:\Windows\system32\catroot2
2013-06-12 10:58:03 ----D---- C:\Windows\system32\drivers\AVG
2013-06-11 10:34:15 ----D---- C:\Program Files (x86)\L4F
2013-06-08 12:12:15 ----D---- C:\Windows\Tasks
2013-06-08 12:12:15 ----D---- C:\Windows\system32\Tasks
2013-06-08 09:25:30 ----D---- C:\Windows\rescache
2013-06-08 03:28:41 ----SHD---- C:\Config.Msi
2013-06-08 03:26:45 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-06-08 03:26:45 ----D---- C:\Program Files\Internet Explorer
2013-06-08 03:26:45 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-08 03:26:44 ----D---- C:\Windows\system32\sk-SK
2013-06-08 03:26:43 ----D---- C:\Windows\SYSWOW64\migration
2013-06-08 03:26:43 ----D---- C:\Windows\SYSWOW64\en-US
2013-06-08 03:26:41 ----D---- C:\Windows\system32\migration
2013-06-08 03:26:41 ----D---- C:\Windows\system32\en-US
2013-06-08 03:26:41 ----D---- C:\Windows\PolicyDefinitions
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\it-IT
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\es-ES
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\el-GR
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\de-DE
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\da-DK
2013-06-08 03:26:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-08 03:26:39 ----D---- C:\Windows\system32\zh-HK
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pt-PT
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pt-BR
2013-06-08 03:26:39 ----D---- C:\Windows\system32\pl-PL
2013-06-08 03:26:39 ----D---- C:\Windows\system32\ko-KR
2013-06-08 03:26:39 ----D---- C:\Windows\system32\it-IT
2013-06-08 03:26:39 ----D---- C:\Windows\system32\hu-HU
2013-06-08 03:26:39 ----D---- C:\Windows\system32\el-GR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\zh-TW
2013-06-08 03:26:38 ----D---- C:\Windows\system32\zh-CN
2013-06-08 03:26:38 ----D---- C:\Windows\system32\tr-TR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\sv-SE
2013-06-08 03:26:38 ----D---- C:\Windows\system32\ru-RU
2013-06-08 03:26:38 ----D---- C:\Windows\system32\nl-NL
2013-06-08 03:26:38 ----D---- C:\Windows\system32\nb-NO
2013-06-08 03:26:38 ----D---- C:\Windows\system32\ja-JP
2013-06-08 03:26:38 ----D---- C:\Windows\system32\fr-FR
2013-06-08 03:26:38 ----D---- C:\Windows\system32\fi-FI
2013-06-08 03:26:38 ----D---- C:\Windows\system32\es-ES
2013-06-08 03:26:38 ----D---- C:\Windows\system32\de-DE
2013-06-08 03:26:38 ----D---- C:\Windows\system32\da-DK
2013-06-08 03:26:38 ----D---- C:\Windows\system32\cs-CZ
2013-06-08 03:11:16 ----D---- C:\Windows\Logs
2013-06-08 03:02:06 ----D---- C:\System Volume Information
2013-06-07 09:27:17 ----SHD---- C:\Windows\Installer
2013-06-06 16:53:57 ----D---- C:\Program Files (x86)\AVG Secure Search
2013-06-06 13:56:19 ----RD---- C:\Program Files (x86)
2013-06-04 17:09:57 ----D---- C:\ProgramData\YTD Video Downloader
2013-05-27 15:16:36 ----D---- C:\Windows\SYSWOW64\directx
2013-05-27 15:16:33 ----HD---- C:\Windows\msdownld.tmp
2013-05-27 14:02:13 ----RD---- C:\Program Files (x86)\Skype
2013-05-27 14:01:33 ----D---- C:\Program Files (x86)\Nokia
2013-05-27 14:01:32 ----D---- C:\Windows\system32\DriverStore
2013-05-27 14:01:32 ----D---- C:\Windows\system32\drivers
2013-05-27 13:52:06 ----D---- C:\Program Files (x86)\Codemasters
2013-05-27 13:48:10 ----D---- C:\Program Files (x86)\Atari
2013-05-27 13:46:43 ----D---- C:\Program Files (x86)\Common Files
2013-05-27 13:46:41 ----D---- C:\Program Files\Common Files
2013-05-27 13:44:17 ----D---- C:\Users\JURICA\AppData\Roaming\GameRanger
2013-05-27 13:43:51 ----D---- C:\Program Files (x86)\Valve
2013-05-16 03:31:35 ----D---- C:\Windows\AppPatch
2013-05-16 03:23:57 ----RSD---- C:\Windows\assembly
2013-05-16 03:23:57 ----D---- C:\Windows\Microsoft.NET
2013-05-16 03:15:33 ----D---- C:\ProgramData\Microsoft Help
2013-05-16 03:12:31 ----A---- C:\Windows\system32\MRT.exe
2013-05-15 12:00:15 ----D---- C:\ProgramData\MFAData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-06-12 240672]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-08-16 254496]
R0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251); C:\Windows\system32\DRIVERS\tdrpm251.sys [2010-08-16 1455648]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-08-16 929312]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-04-11 384800]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-05-12 45856]
R3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6264.sys [2009-05-19 339360]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-09-11 26248]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-09-11 76552]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-16 834544]
S1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-11-08 307040]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S2 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys [2010-02-24 191616]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-11-11 314016]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-11-11 43680]
S3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2010-08-16 250400]
S3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-12-10 127328]
S3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\plugins\UI\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-10-06 2009376]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2009-08-21 84512]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2010-03-15 127600]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 19568]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 161904]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 141424]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 34416]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2010-03-15 137328]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2010-03-15 158320]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 5504]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2009-10-14 11856]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-09-11 41096]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-09-11 36872]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-09-11 15880]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-09-12 891432]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-08-16 2326920]
S2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2013-05-15 806776]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-11-02 5174392]
S2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-16 135664]
S2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NMSAccess;NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 159336]
S2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-01-25 75136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 TestHandler;Fujitsu Diagnostic Testhandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2009-02-19 341264]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2009-10-30 1353544]
S2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [2013-05-12 1015984]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-16 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-25 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-12 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 TuneUp.Defrag;@C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-08-16 607048]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-08-16 1255736]

-----------------EOF-----------------
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Poprosim o log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=130781
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 Črv 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#3 Příspěvek od Member45 »

nech sa paci log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2013 04
Ran by JURICA (administrator) on 13-06-2013 09:15:59
Running from J:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\cmd.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [8158240 2009-10-06] (Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [357384 2009-09-12] (Acronis)
HKLM\...\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui [190472 2009-09-17] (Logitech Inc.)
HKCU\...\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2010-08-11] (Google Inc.)
HKCU\...\Run: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" /MINIMIZED [6380440 2012-06-14] (BitTorrent, Inc.)
HKCU\...\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00 [165888 2013-06-12] ()
MountPoints2: {20a15d66-3cc4-11e1-b5a6-001999793892} - K:\Startme.exe
MountPoints2: {857f0e0b-a948-11df-8835-001999793892} - J:\Autorun.exe
MountPoints2: {f9c083e3-43ad-11e1-a4d5-001999793892} - K:\Startme.exe
HKLM-x32\...\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5048488 2009-09-12] (Acronis)
HKLM-x32\...\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" [1226928 2013-05-12] (AVG Secure Search)
HKLM-x32\...\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728 2012-02-26] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [1298240 2013-05-15] (Spigot, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\gico3.dat ()
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
URLSearchHook: (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File
URLSearchHook: (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
URLSearchHook: (No Name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1999793892}
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F73 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {1A905A79-3E96-45A3-B69D-A31BFB268841} URL = http://websearch.ask.com/redirect?clien ... 0A16B96E70
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {91A6F567-EE61-4D67-88D7-FF5F4374B890} URL = http://search.conduit.com/ResultsExt.as ... PV=IENSP06
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F73 ... 2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {C3CCD014-A93C-4272-BD95-69DCBE26E5DD} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {D476AB60-EC88-4C55-B617-4E4468905EBA} URL =
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1999793892}
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM-x32 - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~2\PCTRAN~1\webie.dll ()
Toolbar: HKLM-x32 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {62D40876-DF18-411F-9D34-A9DD7A197BC5} - No File
DPF: HKLM-x32 {16741686-0571-44DA-A90B-7C2E5DB00EF7} http://213.160.174.141/HEMPlugin.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll (AVG Secure Search)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://isearch.avg.com/?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Yontoo - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\plugin@yontoo.com
FF Extension: BrotherSoft Extreme3 - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{62d40876-df18-411f-9d34-a9dd7a197bc5}
FF Extension: Zynga Community Toolbar - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF Extension: FoxTrick - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}
FF Extension: ytd - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7E77F5DF-8022-40e3-9122-F03DEBEFC43B}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======
CHR HomePage: hxxp://www.ask.com/?l=dis&o=APN10374cr&gct=hp
CHR RestoreOnStartup: "hxxp://www.google.sk/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\JURICA\AppData\Local\Google\Chrome\Application\27.0.1453.110\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (AVG Internet Security) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AVG Safe Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0
CHR Extension: (AVG Security Toolbar) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.2.0.5_0
CHR Extension: (Gmail) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5174392 2012-11-02] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
S2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-01-25] ()
S2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
S3 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607048 2010-08-16] (TuneUp Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1353544 2009-10-30] (TuneUp Software)
S2 vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [1015984 2013-05-12] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-11-11] ()
S3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
S3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
S1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-12] (AVG Technologies)
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir3.sys [32768 2009-08-24] (Hauppauge Computer Works, Inc.)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-11-11] ()
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-08-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2010-08-16] (Acronis)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena\plugins\UI\safedrv.sys [x]

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\system32\drivers\acedrv11.sys A3769020F7E8A70FD3E824C050F33306
C:\Windows\system32\drivers\acedrv11.sys A3769020F7E8A70FD3E824C050F33306
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\afcdp.sys 3426A6EAA09077F3AB946FB9CEB85D8E
C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\system32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\atksgt.sys FC0E8778C000291CAF60EB88C011E931
C:\Windows\System32\DRIVERS\avgidsdrivera.sys 633360E94804E7BAFE642017817C9413
C:\Windows\System32\DRIVERS\avgidsfiltera.sys 0F293406F64B48D5D2F0D3A1117F3A83
C:\Windows\System32\DRIVERS\avgidsha.sys CFFC3A4A638F462E0561CB368B9A7A3A
C:\Windows\System32\DRIVERS\avgldx64.sys BE8BC5D10ABA05D7F6E79D8296906C86
C:\Windows\System32\DRIVERS\avgmfx64.sys A6AEC362AAE5E2DDA7445E7690CB0F33
C:\Windows\System32\DRIVERS\avgrkx64.sys 645C7F0A0E39758A0024A9B1748273C0
C:\Windows\System32\DRIVERS\avgtdia.sys A441A655D6D9DDDDBA11994530F84981
C:\Windows\system32\drivers\avgtpx64.sys 3B5657B6C11CDA87F664DD6F7DD0702D
C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 9AC4F97C2D3E93367E2148EA940CD2CD
C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys AF2E16242AA723F68F461B6EAE2EAD3D
C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hamachi.sys 1E6438D4EA6E1174A3B3B1EDC4DE660B
C:\Windows\system32\drivers\hcw85cir3.sys AF84E64405113B84CEA7B57FA6368DC7
C:\Windows\system32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\System32\DRIVERS\igdkmd64.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys EE64207F2F5C20BFE5F73DB2566C4601
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ivusb.sys BD5BF20EC242E003A2F570B8754A56D1
C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
C:\Windows\System32\Drivers\ksecpkg.sys 26C43A7C2862447EC59DEDA188D1DA07
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lirsgt.sys 156AB2E56DC3CA0B582E3362E07CDED7
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys AD37248BD442D41C9A896E53EB8A85EE
C:\Windows\System32\DRIVERS\nvlddmkm.sys AAF5559039E99D0CC22E25255F3DC06E
C:\Windows\System32\DRIVERS\nvmf6264.sys 9C3024E48DB4C98E50AF7D8B72D0EF89
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\DRIVERS\nvstor64.sys EBFE363AAB0D6E4086ADBF04C41EBDF8
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\DRIVERS\pccsmcfdx64.sys BC0018C2D29F655188A0ED3FA94FDB24
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\s1039bus.sys 0031DD0C5D4446DA0A3E02617DC6D642
C:\Windows\System32\DRIVERS\s1039mdfl.sys 98C7DBE2290D8CB0235E9528F6A1A53D
C:\Windows\System32\DRIVERS\s1039mdm.sys 7EF052A067D862ECD2A2335914611074
C:\Windows\System32\DRIVERS\s1039mgmt.sys BCC3F31F1FE1E78A5BA2CD6A0E44BA64
C:\Windows\System32\DRIVERS\s1039nd5.sys A0CF11BFFA41176CCD54E701CEB68921
C:\Windows\System32\DRIVERS\s1039obex.sys BD2DA968C5DCEF51BA8014FBAC7A0B6A
C:\Windows\System32\DRIVERS\s1039unic.sys 96B4051B65C1974258A8A33A03C0B082
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\snapman.sys 446EB38CE4A6D040F548B2F547CA96FF
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\sptd.sys 602884696850C86434530790B110E8EB
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\System32\Drivers\StarOpen.sys E57B778208C783D8DEBAB320C16A1B82
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\DRIVERS\tcpip.sys B62A953F2BF3922C8764A29C34A22899
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tdrpm251.sys DF9179B7BDF0C5B71F9C3D93C016BAE5
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\timntr.sys F7546EAD58CC3000AC02CF9529B9934E
C:\Windows\System32\drivers\tpm.sys DBCC20C02E8A3E43B03C304A4E40A84F
C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys DCC94C51D27C7EC0DADECA8F64C94FCF
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys C025055FE7B87701EB042095DF1A2D7B
C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24
C:\Windows\System32\DRIVERS\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbser.sys 4ACEE387FA8FD39F83564FCD2FC234F2
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\System32\drivers\WmBEnum.sys E7F4937B613B1E4294100C9D4EFC36A9
C:\Windows\System32\drivers\WmFilter.sys 6F6F2B263002B243D3501C7E6C8FC11D
C:\Windows\System32\drivers\WmHidLo.sys 1584F8D5FDFE44C03DBA85A2106B937F
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\System32\drivers\WmVirHid.sys 52B4FCC6AFAEC0FFD80BDA63F9B140CD
C:\Windows\System32\drivers\WmXlCore.sys 395B3E7FBA81BDC4501641B3B2CF2E20
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-13 09:15 - 2013-06-13 09:15 - 00000000 ____D C:\FRST
2013-06-12 23:17 - 2013-06-12 23:18 - 00000000 ____D C:\rsit
2013-06-12 23:17 - 2013-06-12 23:18 - 00000000 ____D C:\Program Files\trend micro
2013-06-12 14:45 - 2013-06-12 22:53 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 14:45 - 2013-06-12 22:51 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
2013-06-08 03:08 - 2013-06-08 03:08 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:06 - 2013-06-08 03:06 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:03 - 2013-06-08 03:11 - 00009153 ____A C:\Windows\IE10_main.log
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-05-27 13:51 - 2013-05-27 13:51 - 00000000 ____D C:\Users\JURICA\Desktop\Fotky
2013-05-15 11:33 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-15 11:33 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-15 11:33 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-15 11:33 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-15 11:33 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-15 11:33 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-15 11:33 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-15 11:33 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-15 11:33 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-15 11:33 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-15 11:33 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-15 11:33 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-15 11:33 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-15 11:33 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 Črv 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#4 Příspěvek od Member45 »

==================== One Month Modified Files and Folders =======

2013-06-13 09:15 - 2013-06-13 09:15 - 00000000 ____D C:\FRST
2013-06-12 23:18 - 2013-06-12 23:17 - 00000000 ____D C:\rsit
2013-06-12 23:18 - 2013-06-12 23:17 - 00000000 ____D C:\Program Files\trend micro
2013-06-12 22:56 - 2010-08-16 20:08 - 00073243 ____A C:\Windows\setupact.log
2013-06-12 22:56 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-12 22:54 - 2011-10-08 10:18 - 00000000 ____D C:\Users\JURICA\AppData\Roaming\BitTorrent
2013-06-12 22:54 - 2010-08-11 19:29 - 01707303 ____A C:\Windows\WindowsUpdate.log
2013-06-12 22:54 - 2009-07-14 06:45 - 00009920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-12 22:54 - 2009-07-14 06:45 - 00009920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-12 22:53 - 2013-06-12 14:45 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 22:51 - 2013-06-12 14:45 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 22:51 - 2010-08-16 14:49 - 00000932 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-12 22:47 - 2010-08-16 14:49 - 00000936 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-12 22:46 - 2013-01-14 11:27 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-12 17:12 - 2010-08-16 14:46 - 00000950 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000UA.job
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
2013-06-12 13:33 - 2013-01-14 11:27 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 13:33 - 2011-07-26 14:06 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 13:12 - 2012-07-31 09:51 - 00000000 ____D C:\Counter-Strike 1.6
2013-06-12 12:06 - 2009-07-14 07:13 - 00726444 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-12 10:58 - 2011-11-06 12:19 - 00000000 ____D C:\Windows\System32\Drivers\AVG
2013-06-12 10:44 - 2010-08-16 14:46 - 00000898 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911170168-1602134873-2032042257-1000Core.job
2013-06-11 10:34 - 2010-08-24 21:29 - 00000000 ____D C:\Program Files (x86)\L4F
2013-06-11 10:33 - 2010-11-02 20:56 - 00000000 ____D C:\Users\JURICA\Desktop\Michal
2013-06-08 09:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-08 03:28 - 2010-09-16 03:19 - 00065820 ____A C:\Windows\PFRO.log
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\sk-SK
2013-06-08 03:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-08 03:11 - 2013-06-08 03:03 - 00009153 ____A C:\Windows\IE10_main.log
2013-06-08 03:08 - 2013-06-08 03:08 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 03:08 - 2013-06-08 03:08 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:08 - 2013-06-08 03:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:08 - 2013-06-08 03:08 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:08 - 2013-06-08 03:08 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:08 - 2013-06-08 03:08 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:08 - 2013-06-08 03:08 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:06 - 2013-06-08 03:06 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:06 - 2013-06-08 03:06 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 13:12 - 2010-10-17 19:54 - 00000000 ____D C:\Users\JURICA\Documents\FIFA 11
2013-06-07 09:24 - 2012-10-10 09:29 - 00603136 __ASH C:\Users\JURICA\Desktop\Thumbs.db
2013-06-06 16:53 - 2012-05-01 22:30 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-06-06 13:56 - 2013-06-06 13:56 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-06-06 09:55 - 2010-08-16 14:46 - 00002382 ____A C:\Users\JURICA\Desktop\Google Chrome.lnk
2013-06-06 07:27 - 2010-10-13 18:49 - 00000000 ____D C:\Users\JURICA\Desktop\J. Jurica
2013-06-04 17:12 - 2013-03-15 14:57 - 00003584 ____A C:\Users\JURICA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-04 17:09 - 2012-07-10 11:05 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-05-31 14:39 - 2013-03-11 16:03 - 00000000 ___RD C:\Users\JURICA\Desktop\maťko najlepší
2013-05-27 15:16 - 2011-02-13 23:31 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-05-27 15:16 - 2010-08-24 21:54 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-05-27 14:16 - 2011-08-11 11:59 - 00000000 ___RD C:\Users\JURICA\Desktop\Hry
2013-05-27 14:02 - 2010-08-28 22:17 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-05-27 14:01 - 2011-07-14 15:20 - 00000000 ____D C:\Program Files (x86)\Nokia
2013-05-27 13:52 - 2010-09-24 22:57 - 00000000 ____D C:\Program Files (x86)\Codemasters
2013-05-27 13:51 - 2013-05-27 13:51 - 00000000 ____D C:\Users\JURICA\Desktop\Fotky
2013-05-27 13:48 - 2010-12-27 22:55 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-27 13:44 - 2011-08-28 22:56 - 00000000 ____D C:\Users\JURICA\AppData\Roaming\GameRanger
2013-05-27 13:43 - 2013-01-03 09:06 - 00000000 ____D C:\Users\JURICA\AppData\Local\Conduit
2013-05-27 13:43 - 2011-02-22 15:19 - 00000000 ____D C:\Program Files (x86)\Valve
2013-05-25 10:32 - 2013-04-06 16:53 - 00000000 ____D C:\Users\JURICA\Documents\Euro Truck Simulator 2
2013-05-16 03:33 - 2009-07-14 06:45 - 00422000 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 03:15 - 2009-08-21 00:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-16 03:12 - 2010-08-12 00:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-15 12:00 - 2011-11-06 12:04 - 00000000 ____D C:\ProgramData\MFAData
2013-05-15 11:59 - 2011-11-06 12:20 - 00001007 ____A C:\Users\Public\Desktop\AVG 2012.lnk

Files to move or delete:
====================
C:\ProgramData\rundll32.exe
C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
C:\ProgramData\3ocig.bat
C:\ProgramData\3ocig.pad
C:\ProgramData\3ocig.reg
C:\ProgramData\gico3.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== BCD ================================

Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale sk-SK
inherit {globalsettings}
default {current}
resumeobject {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale sk-SK
inherit {bootloadersettings}
recoverysequence {15e7f002-10d0-11df-b1ea-fdc1de7bb1b8}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
nx OptIn
detecthal Yes

Windows Boot Loader
-------------------
identifier {15e7f002-10d0-11df-b1ea-fdc1de7bb1b8}
device ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
systemroot \windows
nx OptIn
winpe Yes

Resume from Hibernate
---------------------
identifier {15e7f000-10d0-11df-b1ea-fdc1de7bb1b8}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale sk-SK
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No

Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Windows Memory Diagnostic
locale sk-SK
inherit {globalsettings}
badmemoryaccess Yes

EMS Settings
------------
identifier {emssettings}
bootems Yes

Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200

RAM Defects
-----------
identifier {badmemory}

Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}

Device options
--------------
identifier {15e7f003-10d0-11df-b1ea-fdc1de7bb1b8}
description Ramdisk Options
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \Recovery\WindowsRE\boot.sdi



LastRegBack: 2013-06-06 12:57

==================== End Of Log ============================


nedalo sa mi to odoslat do jednej spravy
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#5 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    HKLM-x32\...\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" [1226928 2013-05-12] (AVG Secure Search)
HKLM-x32\...\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728 2012-02-26] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [1298240 2013-05-15] (Spigot, Inc.)
HKCU\...\Run: [ctfmon.exe] C:\PROGRA~3\rundll32.exe C:\PROGRA~3\gico3.dat,FG00 [165888 2013-06-12] ()
Startup: C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\gico3.dat ()
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10374&gct=hp
URLSearchHook: (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File
URLSearchHook: (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
URLSearchHook: (No Name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={3E01B750-B570-11E1-B16C-001999793892}
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {1A905A79-3E96-45A3-B69D-A31BFB268841} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=^AHO&apn_dtid=^YYYYYY^YY^SK&apn_uid=68c246cc-493b-4e4c-967d-e2b1eba5a595&apn_sauid=BE5D7238-D29B-4857-8C56-410A16B96E70
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {91A6F567-EE61-4D67-88D7-FF5F4374B890} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=ct3205709&SSPV=IENSP06
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {C3CCD014-A93C-4272-BD95-69DCBE26E5DD} URL = http://search.yahoo.com/search?fr=chr-g ... =937811&p={searchTerms}
SearchScopes: HKCU - {D476AB60-EC88-4C55-B617-4E4468905EBA} URL = 
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={3E01B750-B570-11E1-B16C-001999793892}
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKLM-x32 - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM-x32 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.1\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {62D40876-DF18-411F-9D34-A9DD7A197BC5} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://isearch.avg.com/?cid={2F739CEF-9BE3-47B1-BF55-9310B89A64ED}&mid=6d6d97856614329b11410f3694b6a709-dcf5126939c3c4b88d4057b188eaf1e94db224aa&lang=sk&ds=gm011&pr=sa&d=2012-05-01 23:30:58&v=14.2.0.1&pid=avg&sg=&sap=hp
FF Extension: Yontoo - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\plugin@yontoo.com
FF Extension: Zynga Community Toolbar - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF Extension: FoxTrick - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}
FF Extension: ytd - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{7E77F5DF-8022-40e3-9122-F03DEBEFC43B}.xpi
FF Extension: No Name - C:\Users\JURICA\AppData\Roaming\Mozilla\Firefox\Profiles\izzb5ooa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
CHR HomePage: hxxp://www.ask.com/?l=dis&o=APN10374cr&gct=hp
CHR Extension: (AVG Safe Search) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0
CHR Extension: (AVG Security Toolbar) - C:\Users\JURICA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.2.0.5_0
S2 vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [1015984 2013-05-12] (AVG Secure Search)
C:\Program Files (x86)\Common Files\AVG Secure Search
2013-06-12 14:45 - 2013-06-12 22:53 - 95023320 ___AT C:\ProgramData\3ocig.pad
2013-06-12 14:45 - 2013-06-12 22:51 - 00000000 ____A C:\ProgramData\as98213.txt
2013-06-12 14:45 - 2013-06-12 14:45 - 00165888 ____A C:\ProgramData\gico3.dat
2013-06-12 14:45 - 2013-06-12 14:45 - 00044544 ____A (Microsoft Corporation) C:\ProgramData\rundll32.exe
2013-06-12 14:45 - 2013-06-12 14:45 - 00002608 ____A C:\ProgramData\3ocig.js
2013-06-12 14:45 - 2013-06-12 14:45 - 00000151 ____A C:\ProgramData\3ocig.reg
2013-06-12 14:45 - 2013-06-12 14:45 - 00000055 ____A C:\ProgramData\3ocig.bat
C:\Program Files (x86)\YTD Toolbar
:\Program Files (x86)\DAEMON Tools Toolbar
C:\Program Files (x86)\uTorrentBar
C:\Program Files (x86)\Common Files\Spigot
C:\Program Files (x86)\SweetIM
C:\Program Files (x86)\AVG Secure Search
C:\ProgramData\rundll32.exe
C:\Users\JURICA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk
C:\ProgramData\3ocig.bat
C:\ProgramData\3ocig.pad
C:\ProgramData\3ocig.reg
C:\ProgramData\gico3.dat
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny log na flashku k FRST
:arrow: Spustte znovu FRST.exe na tom poskozenem PC
  • Kliknete na Fix
  • Probehne oprava a na flash disku se vytvori log Fixlog.txt
:arrow: Pokuste se nastartovat do bezneho rezimu

:arrow: Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Member45
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 12 Črv 2013 22:19

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#6 Příspěvek od Member45 »

dakujem velmi za pomoc.
a ten topic mam dat fixlog ktory mi to vypisalo ci ten povodny log ktory som sem daval?
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosim dostal sem vir SLOVENSKA POLICIE

#7 Příspěvek od vyosek »

Dejte mi sem fixlog.txt a pote i novy log z RSITu
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“