Možná nákaza, nestabilní net
Napsal: 23 zář 2013 11:38
Dobrý den, rád bych vás požádal o pomoc. Už nějaký pátek mi strašně blbne net, chvilku to jede bezproblémů ale najednou to buď spadne tak na minutu a pak se to zas nahodí, nebo se odezva zvýší až na 1500 milisekund. Projížděl jsem systém přes MBAM a pak CCleaner, bohužel bez výsledku.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Havlli at 2013-09-23 12:38:21
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 58 GB (14%) free of 417 GB
Total RAM: 3326 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:38:45, on 23.9.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\PROGRA~1\Raptr\raptr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\PROGRA~1\Raptr\raptr_im.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.185\deploy\LoLLauncher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.47\deploy\LolClient.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Havlli\Downloads\RSIT.exe
C:\Program Files\trend micro\Havlli.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Ultra Agent] "C:\Program Files\DAEMON Tools Ultra\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe --startup
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Disc Soft Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 5366 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-04 462752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-04 171424]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2000-01-01 11734240]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-28 642656]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Ultra Agent"=C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [2013-03-06 3088448]
"Raptr"=C:\PROGRA~1\Raptr\raptrstub.exe [2013-09-17 55360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"msacm.l3codecp"=l3codecp.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"VIDC.X264"=x264vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2013-09-23 12:38:21 ----D---- C:\rsit
2013-09-23 12:38:21 ----D---- C:\Program Files\trend micro
2013-09-23 12:27:07 ----D---- C:\Users\Havlli\AppData\Roaming\Bitcoin
2013-09-22 11:12:52 ----ASH---- C:\pagefile.sys
2013-09-21 17:20:03 ----D---- C:\ProgramData\spotflux
2013-09-21 17:19:39 ----D---- C:\Program Files\Spotflux
2013-09-21 17:19:21 ----D---- C:\Users\Havlli\AppData\Roaming\.spotflux
2013-09-19 21:30:28 ----D---- C:\Users\Havlli\AppData\Roaming\RIFT
2013-09-19 21:16:22 ----D---- C:\Users\Havlli\AppData\Roaming\library_dir
2013-09-19 21:16:15 ----D---- C:\Users\Havlli\AppData\Roaming\Raptr
2013-09-19 21:16:15 ----D---- C:\Program Files\Raptr
2013-09-18 13:12:05 ----D---- C:\ProgramData\VueTec
2013-09-17 19:10:18 ----D---- C:\Users\Havlli\AppData\Roaming\AutoBinaryCode2
2013-09-15 20:52:41 ----D---- C:\ProgramData\vsosdk
2013-09-15 20:30:30 ----D---- C:\Users\Havlli\AppData\Roaming\Vso
2013-09-15 20:30:30 ----A---- C:\Users\Havlli\AppData\Roaming\pcouffin.sys
2013-09-15 20:30:30 ----A---- C:\Users\Havlli\AppData\Roaming\inst.exe
2013-09-15 20:30:23 ----D---- C:\ProgramData\VSO
2013-09-15 20:30:23 ----D---- C:\Program Files\VSO
2013-09-15 19:44:48 ----RASH---- C:\MSDOS.SYS
2013-09-15 19:44:48 ----RASH---- C:\IO.SYS
2013-09-14 13:53:07 ----D---- C:\LOLHT Configs v2
2013-09-06 15:58:53 ----D---- C:\ProgramData\ATI
2013-09-06 15:58:52 ----D---- C:\Program Files\AMD AVT
2013-08-26 18:10:09 ----A---- C:\inuse.txt
2013-08-25 14:57:27 ----D---- C:\Users\Havlli\AppData\Roaming\Media Player Classic
2013-08-25 11:15:10 ----A---- C:\Windows\system32\lagarith.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\xvidvfw.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\xvidcore.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\x264vfw.dll
2013-08-25 11:15:08 ----A---- C:\Windows\system32\ff_vfw.dll
2013-08-24 14:28:23 ----D---- C:\Program Files\Bethesda Softworks
2013-08-23 09:27:19 ----D---- C:\Users\Havlli\AppData\Roaming\VMware
2013-08-23 09:20:09 ----D---- C:\ProgramData\VMware
2013-08-22 13:11:15 ----D---- C:\Users\Havlli\AppData\Roaming\Canon
2013-08-22 13:06:38 ----D---- C:\Program Files\Canon
2013-08-09 19:01:40 ----A---- C:\Windows\system32\HideMyIpSRVOff.ini
2013-08-09 19:01:40 ----A---- C:\Windows\system32\HideMyIpSRV.ini
2013-08-09 19:01:40 ----A---- C:\Windows\system32\drivers\hmip.sys
2013-07-25 06:35:05 ----D---- C:\ProgramData\Turbine
2013-07-19 12:44:02 ----D---- C:\Users\Havlli\AppData\Roaming\Opera Software
2013-07-19 12:43:56 ----D---- C:\Program Files\Opera
2013-07-08 22:12:10 ----A---- C:\Windows\system32\drivers\tapSF0901.sys
2013-06-30 12:36:29 ----D---- C:\Windows\Symbols
2013-06-29 00:32:38 ----D---- C:\Windows\system32\Logs
======List of files/folders modified in the last 3 months======
2013-09-23 12:38:22 ----D---- C:\Windows\Temp
2013-09-23 12:38:21 ----RD---- C:\Program Files
2013-09-23 12:17:35 ----D---- C:\Windows\system32\config
2013-09-23 04:05:17 ----D---- C:\Users\Havlli\AppData\Roaming\TS3Client
2013-09-22 20:42:53 ----D---- C:\Windows\inf
2013-09-22 20:39:50 ----D---- C:\Windows
2013-09-22 20:39:30 ----SHD---- C:\Config.Msi
2013-09-22 20:03:18 ----D---- C:\Windows\system32\drivers
2013-09-22 19:43:04 ----D---- C:\Windows\System32
2013-09-22 19:42:54 ----SHD---- C:\Windows\Installer
2013-09-22 19:42:38 ----D---- C:\Program Files\Common Files\Adobe
2013-09-22 19:42:38 ----D---- C:\Program Files\Common Files
2013-09-22 19:42:17 ----D---- C:\Users\Havlli\AppData\Roaming\Adobe
2013-09-22 19:41:15 ----D---- C:\Windows\winsxs
2013-09-22 19:41:07 ----D---- C:\Program Files\Adobe
2013-09-22 19:39:47 ----D---- C:\Program Files\CCleaner
2013-09-22 19:38:43 ----D---- C:\Program Files\Common Files\microsoft shared
2013-09-22 19:37:55 ----HD---- C:\ProgramData
2013-09-22 19:37:55 ----HD---- C:\Program Files\InstallShield Installation Information
2013-09-22 19:37:11 ----D---- C:\Windows\system32\DriverStore
2013-09-22 19:37:11 ----D---- C:\Windows\system32\catroot
2013-09-22 19:36:49 ----D---- C:\Program Files\WinAVI
2013-09-22 19:36:40 ----D---- C:\Program Files\War Thunder
2013-09-22 19:34:09 ----RSD---- C:\Windows\Fonts
2013-09-22 19:33:45 ----D---- C:\totalcmd
2013-09-22 19:31:16 ----D---- C:\Program Files\Common Files\InstallShield
2013-09-22 19:31:14 ----RSD---- C:\Windows\assembly
2013-09-22 19:31:14 ----D---- C:\ProgramData\Microsoft Help
2013-09-22 19:31:10 ----D---- C:\ProgramData\Sony
2013-09-22 19:30:21 ----SD---- C:\ProgramData\Microsoft
2013-09-22 19:30:21 ----D---- C:\Program Files\Microsoft.NET
2013-09-22 19:30:15 ----D---- C:\Windows\ShellNew
2013-09-22 19:30:05 ----D---- C:\Program Files\MSBuild
2013-09-22 19:29:03 ----D---- C:\Windows\Microsoft.NET
2013-09-22 19:28:39 ----D---- C:\ProgramData\Sony Ericsson
2013-09-22 19:28:39 ----D---- C:\Program Files\Sony Ericsson
2013-09-22 19:28:10 ----D---- C:\Program Files\Common Files\System
2013-09-22 19:28:10 ----A---- C:\Windows\win.ini
2013-09-22 19:26:32 ----D---- C:\Program Files\QuickTime
2013-09-22 19:25:22 ----D---- C:\Users\Havlli\AppData\Roaming\Origin
2013-09-22 19:25:18 ----D---- C:\ProgramData\Origin
2013-09-22 19:21:01 ----D---- C:\Ubisoft
2013-09-22 19:19:12 ----D---- C:\Program Files\Full Tilt Poker
2013-09-22 19:18:40 ----D---- C:\Users\Havlli\AppData\Roaming\BSplayer
2013-09-22 19:18:26 ----D---- C:\ProgramData\Freemake
2013-09-22 19:18:25 ----D---- C:\Program Files\Freemake
2013-09-22 19:18:03 ----D---- C:\Fraps
2013-09-22 19:04:06 ----D---- C:\Program Files\Origin Games
2013-09-22 19:03:16 ----A---- C:\Windows\system32\PnkBstrB.exe
2013-09-22 19:03:02 ----D---- C:\Windows\Prefetch
2013-09-22 19:02:39 ----SD---- C:\Users\Havlli\AppData\Roaming\Microsoft
2013-09-22 16:46:15 ----D---- C:\Windows\Minidump
2013-09-22 16:46:15 ----D---- C:\Windows\Logs
2013-09-22 11:20:01 ----D---- C:\Users\Havlli\AppData\Roaming\Skype
2013-09-20 23:10:51 ----D---- C:\Windows\PolicyDefinitions
2013-09-19 20:40:01 ----D---- C:\Downloads
2013-09-18 15:52:24 ----D---- C:\Windows\system32\catroot2
2013-09-16 13:50:59 ----A---- C:\Windows\system32\PnkBstrA.exe
2013-09-13 18:16:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-11 22:47:01 ----D---- C:\ProgramData\Steam
2013-09-11 17:10:53 ----D---- C:\Users\Havlli\AppData\Roaming\TeamViewer
2013-09-11 17:09:16 ----D---- C:\Windows\system32\Tasks
2013-09-10 12:56:38 ----D---- C:\ProgramData\Skype
2013-09-10 12:56:30 ----RD---- C:\Program Files\Skype
2013-09-06 15:58:52 ----D---- C:\ProgramData\AMD
2013-09-06 15:58:35 ----D---- C:\Program Files\ATI Technologies
2013-09-06 15:57:10 ----SHD---- C:\$Recycle.Bin
2013-08-29 16:23:34 ----D---- C:\Windows\system32\drivers\UMDF
2013-08-25 11:15:08 ----D---- C:\Program Files\K-Lite Codec Pack
2013-08-24 12:37:52 ----D---- C:\Games
2013-08-13 16:34:50 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-08-08 15:21:44 ----D---- C:\Windows\system32\en-US
2013-07-27 12:16:19 ----RD---- C:\Program Files (x86)
2013-07-24 17:34:46 ----D---- C:\Users\Havlli\AppData\Roaming\Awesomium
2013-07-09 18:22:02 ----HD---- C:\Windows\msdownld.tmp
2013-07-09 18:22:00 ----D---- C:\Windows\system32\directx
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2000-01-01 14504]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-05-04 443448]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 19056]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-04-09 48256]
R2 hmip;hmip; \??\C:\Windows\system32\Drivers\hmip.sys [2013-06-19 25448]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-29 9986048]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-29 463872]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-14 79872]
R3 dtscsibus;DAEMON Tools Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtscsibus.sys [2013-04-11 24704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2000-01-01 2565088]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2000-01-01 91760]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2000-01-01 44160]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AODDriver;AODDriver; \??\C:\Program Files\GIGABYTE\ET6\i386\AODDriver.sys []
S3 aswArKrn;aswArKrn; \??\C:\Windows\TEMP\aswArKrn.sys []
S3 ATP;Comodo Unite Miniport Driver; C:\Windows\system32\DRIVERS\cmdatp.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2013-03-29 23456]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2013-04-18 17488]
S3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver; C:\Windows\system32\DRIVERS\evolve.sys [2013-05-27 18584]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2013-05-04 17488]
S3 GVTDrv;GVTDrv; \??\C:\Windows\system32\Drivers\GVTDrv.sys [2013-05-04 24944]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2011-07-06 328552]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2013-04-10 13464]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tapSF0901;Spotflux Virtual Network Device Driver; C:\Windows\system32\DRIVERS\tapSF0901.sys [2013-07-08 33728]
S3 TMUVSPFLEP;TMUVSPFLEPIFFAV; \??\C:\Windows\system32\drivers\OQBLNIFWT.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vtany;vtany; \??\C:\Windows\vtany.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 xhunter1;xhunter1; \??\C:\Windows\xhunter1.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-29 219136]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-03-28 291840]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2013-09-16 76888]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
R3 Disc Soft Bus Service;Disc Soft Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [2013-03-06 580672]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-27 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-27 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-28 1343400]
S4 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Havlli at 2013-09-23 12:38:21
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 58 GB (14%) free of 417 GB
Total RAM: 3326 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:38:45, on 23.9.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\PROGRA~1\Raptr\raptr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\PROGRA~1\Raptr\raptr_im.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.185\deploy\LoLLauncher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.47\deploy\LolClient.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Havlli\Downloads\RSIT.exe
C:\Program Files\trend micro\Havlli.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Ultra Agent] "C:\Program Files\DAEMON Tools Ultra\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe --startup
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Disc Soft Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 5366 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-04 462752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-04 171424]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2000-01-01 11734240]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-28 642656]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Ultra Agent"=C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [2013-03-06 3088448]
"Raptr"=C:\PROGRA~1\Raptr\raptrstub.exe [2013-09-17 55360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"msacm.l3codecp"=l3codecp.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"VIDC.X264"=x264vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2013-09-23 12:38:21 ----D---- C:\rsit
2013-09-23 12:38:21 ----D---- C:\Program Files\trend micro
2013-09-23 12:27:07 ----D---- C:\Users\Havlli\AppData\Roaming\Bitcoin
2013-09-22 11:12:52 ----ASH---- C:\pagefile.sys
2013-09-21 17:20:03 ----D---- C:\ProgramData\spotflux
2013-09-21 17:19:39 ----D---- C:\Program Files\Spotflux
2013-09-21 17:19:21 ----D---- C:\Users\Havlli\AppData\Roaming\.spotflux
2013-09-19 21:30:28 ----D---- C:\Users\Havlli\AppData\Roaming\RIFT
2013-09-19 21:16:22 ----D---- C:\Users\Havlli\AppData\Roaming\library_dir
2013-09-19 21:16:15 ----D---- C:\Users\Havlli\AppData\Roaming\Raptr
2013-09-19 21:16:15 ----D---- C:\Program Files\Raptr
2013-09-18 13:12:05 ----D---- C:\ProgramData\VueTec
2013-09-17 19:10:18 ----D---- C:\Users\Havlli\AppData\Roaming\AutoBinaryCode2
2013-09-15 20:52:41 ----D---- C:\ProgramData\vsosdk
2013-09-15 20:30:30 ----D---- C:\Users\Havlli\AppData\Roaming\Vso
2013-09-15 20:30:30 ----A---- C:\Users\Havlli\AppData\Roaming\pcouffin.sys
2013-09-15 20:30:30 ----A---- C:\Users\Havlli\AppData\Roaming\inst.exe
2013-09-15 20:30:23 ----D---- C:\ProgramData\VSO
2013-09-15 20:30:23 ----D---- C:\Program Files\VSO
2013-09-15 19:44:48 ----RASH---- C:\MSDOS.SYS
2013-09-15 19:44:48 ----RASH---- C:\IO.SYS
2013-09-14 13:53:07 ----D---- C:\LOLHT Configs v2
2013-09-06 15:58:53 ----D---- C:\ProgramData\ATI
2013-09-06 15:58:52 ----D---- C:\Program Files\AMD AVT
2013-08-26 18:10:09 ----A---- C:\inuse.txt
2013-08-25 14:57:27 ----D---- C:\Users\Havlli\AppData\Roaming\Media Player Classic
2013-08-25 11:15:10 ----A---- C:\Windows\system32\lagarith.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\xvidvfw.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\xvidcore.dll
2013-08-25 11:15:09 ----A---- C:\Windows\system32\x264vfw.dll
2013-08-25 11:15:08 ----A---- C:\Windows\system32\ff_vfw.dll
2013-08-24 14:28:23 ----D---- C:\Program Files\Bethesda Softworks
2013-08-23 09:27:19 ----D---- C:\Users\Havlli\AppData\Roaming\VMware
2013-08-23 09:20:09 ----D---- C:\ProgramData\VMware
2013-08-22 13:11:15 ----D---- C:\Users\Havlli\AppData\Roaming\Canon
2013-08-22 13:06:38 ----D---- C:\Program Files\Canon
2013-08-09 19:01:40 ----A---- C:\Windows\system32\HideMyIpSRVOff.ini
2013-08-09 19:01:40 ----A---- C:\Windows\system32\HideMyIpSRV.ini
2013-08-09 19:01:40 ----A---- C:\Windows\system32\drivers\hmip.sys
2013-07-25 06:35:05 ----D---- C:\ProgramData\Turbine
2013-07-19 12:44:02 ----D---- C:\Users\Havlli\AppData\Roaming\Opera Software
2013-07-19 12:43:56 ----D---- C:\Program Files\Opera
2013-07-08 22:12:10 ----A---- C:\Windows\system32\drivers\tapSF0901.sys
2013-06-30 12:36:29 ----D---- C:\Windows\Symbols
2013-06-29 00:32:38 ----D---- C:\Windows\system32\Logs
======List of files/folders modified in the last 3 months======
2013-09-23 12:38:22 ----D---- C:\Windows\Temp
2013-09-23 12:38:21 ----RD---- C:\Program Files
2013-09-23 12:17:35 ----D---- C:\Windows\system32\config
2013-09-23 04:05:17 ----D---- C:\Users\Havlli\AppData\Roaming\TS3Client
2013-09-22 20:42:53 ----D---- C:\Windows\inf
2013-09-22 20:39:50 ----D---- C:\Windows
2013-09-22 20:39:30 ----SHD---- C:\Config.Msi
2013-09-22 20:03:18 ----D---- C:\Windows\system32\drivers
2013-09-22 19:43:04 ----D---- C:\Windows\System32
2013-09-22 19:42:54 ----SHD---- C:\Windows\Installer
2013-09-22 19:42:38 ----D---- C:\Program Files\Common Files\Adobe
2013-09-22 19:42:38 ----D---- C:\Program Files\Common Files
2013-09-22 19:42:17 ----D---- C:\Users\Havlli\AppData\Roaming\Adobe
2013-09-22 19:41:15 ----D---- C:\Windows\winsxs
2013-09-22 19:41:07 ----D---- C:\Program Files\Adobe
2013-09-22 19:39:47 ----D---- C:\Program Files\CCleaner
2013-09-22 19:38:43 ----D---- C:\Program Files\Common Files\microsoft shared
2013-09-22 19:37:55 ----HD---- C:\ProgramData
2013-09-22 19:37:55 ----HD---- C:\Program Files\InstallShield Installation Information
2013-09-22 19:37:11 ----D---- C:\Windows\system32\DriverStore
2013-09-22 19:37:11 ----D---- C:\Windows\system32\catroot
2013-09-22 19:36:49 ----D---- C:\Program Files\WinAVI
2013-09-22 19:36:40 ----D---- C:\Program Files\War Thunder
2013-09-22 19:34:09 ----RSD---- C:\Windows\Fonts
2013-09-22 19:33:45 ----D---- C:\totalcmd
2013-09-22 19:31:16 ----D---- C:\Program Files\Common Files\InstallShield
2013-09-22 19:31:14 ----RSD---- C:\Windows\assembly
2013-09-22 19:31:14 ----D---- C:\ProgramData\Microsoft Help
2013-09-22 19:31:10 ----D---- C:\ProgramData\Sony
2013-09-22 19:30:21 ----SD---- C:\ProgramData\Microsoft
2013-09-22 19:30:21 ----D---- C:\Program Files\Microsoft.NET
2013-09-22 19:30:15 ----D---- C:\Windows\ShellNew
2013-09-22 19:30:05 ----D---- C:\Program Files\MSBuild
2013-09-22 19:29:03 ----D---- C:\Windows\Microsoft.NET
2013-09-22 19:28:39 ----D---- C:\ProgramData\Sony Ericsson
2013-09-22 19:28:39 ----D---- C:\Program Files\Sony Ericsson
2013-09-22 19:28:10 ----D---- C:\Program Files\Common Files\System
2013-09-22 19:28:10 ----A---- C:\Windows\win.ini
2013-09-22 19:26:32 ----D---- C:\Program Files\QuickTime
2013-09-22 19:25:22 ----D---- C:\Users\Havlli\AppData\Roaming\Origin
2013-09-22 19:25:18 ----D---- C:\ProgramData\Origin
2013-09-22 19:21:01 ----D---- C:\Ubisoft
2013-09-22 19:19:12 ----D---- C:\Program Files\Full Tilt Poker
2013-09-22 19:18:40 ----D---- C:\Users\Havlli\AppData\Roaming\BSplayer
2013-09-22 19:18:26 ----D---- C:\ProgramData\Freemake
2013-09-22 19:18:25 ----D---- C:\Program Files\Freemake
2013-09-22 19:18:03 ----D---- C:\Fraps
2013-09-22 19:04:06 ----D---- C:\Program Files\Origin Games
2013-09-22 19:03:16 ----A---- C:\Windows\system32\PnkBstrB.exe
2013-09-22 19:03:02 ----D---- C:\Windows\Prefetch
2013-09-22 19:02:39 ----SD---- C:\Users\Havlli\AppData\Roaming\Microsoft
2013-09-22 16:46:15 ----D---- C:\Windows\Minidump
2013-09-22 16:46:15 ----D---- C:\Windows\Logs
2013-09-22 11:20:01 ----D---- C:\Users\Havlli\AppData\Roaming\Skype
2013-09-20 23:10:51 ----D---- C:\Windows\PolicyDefinitions
2013-09-19 20:40:01 ----D---- C:\Downloads
2013-09-18 15:52:24 ----D---- C:\Windows\system32\catroot2
2013-09-16 13:50:59 ----A---- C:\Windows\system32\PnkBstrA.exe
2013-09-13 18:16:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-11 22:47:01 ----D---- C:\ProgramData\Steam
2013-09-11 17:10:53 ----D---- C:\Users\Havlli\AppData\Roaming\TeamViewer
2013-09-11 17:09:16 ----D---- C:\Windows\system32\Tasks
2013-09-10 12:56:38 ----D---- C:\ProgramData\Skype
2013-09-10 12:56:30 ----RD---- C:\Program Files\Skype
2013-09-06 15:58:52 ----D---- C:\ProgramData\AMD
2013-09-06 15:58:35 ----D---- C:\Program Files\ATI Technologies
2013-09-06 15:57:10 ----SHD---- C:\$Recycle.Bin
2013-08-29 16:23:34 ----D---- C:\Windows\system32\drivers\UMDF
2013-08-25 11:15:08 ----D---- C:\Program Files\K-Lite Codec Pack
2013-08-24 12:37:52 ----D---- C:\Games
2013-08-13 16:34:50 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-08-08 15:21:44 ----D---- C:\Windows\system32\en-US
2013-07-27 12:16:19 ----RD---- C:\Program Files (x86)
2013-07-24 17:34:46 ----D---- C:\Users\Havlli\AppData\Roaming\Awesomium
2013-07-09 18:22:02 ----HD---- C:\Windows\msdownld.tmp
2013-07-09 18:22:00 ----D---- C:\Windows\system32\directx
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2000-01-01 14504]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-05-04 443448]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 19056]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-04-09 48256]
R2 hmip;hmip; \??\C:\Windows\system32\Drivers\hmip.sys [2013-06-19 25448]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-29 9986048]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-29 463872]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-14 79872]
R3 dtscsibus;DAEMON Tools Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtscsibus.sys [2013-04-11 24704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2000-01-01 2565088]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2000-01-01 91760]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2000-01-01 44160]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AODDriver;AODDriver; \??\C:\Program Files\GIGABYTE\ET6\i386\AODDriver.sys []
S3 aswArKrn;aswArKrn; \??\C:\Windows\TEMP\aswArKrn.sys []
S3 ATP;Comodo Unite Miniport Driver; C:\Windows\system32\DRIVERS\cmdatp.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2013-03-29 23456]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2013-04-18 17488]
S3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver; C:\Windows\system32\DRIVERS\evolve.sys [2013-05-27 18584]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2013-05-04 17488]
S3 GVTDrv;GVTDrv; \??\C:\Windows\system32\Drivers\GVTDrv.sys [2013-05-04 24944]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2011-07-06 328552]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2013-04-10 13464]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tapSF0901;Spotflux Virtual Network Device Driver; C:\Windows\system32\DRIVERS\tapSF0901.sys [2013-07-08 33728]
S3 TMUVSPFLEP;TMUVSPFLEPIFFAV; \??\C:\Windows\system32\drivers\OQBLNIFWT.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vtany;vtany; \??\C:\Windows\vtany.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 xhunter1;xhunter1; \??\C:\Windows\xhunter1.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-29 219136]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-03-28 291840]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2013-09-16 76888]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
R3 Disc Soft Bus Service;Disc Soft Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [2013-03-06 580672]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-27 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-27 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-28 1343400]
S4 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------