Prosím o kontrolu logu
Napsal: 26 bře 2014 21:35
Dobrý večer, mám takový problém. Asi dva dny zpět mi PC nevykazovalo žadny problem a pak se mi stala jedna nemilá věc, že jsem si nedopatřením nainstaloval hnus jmenem Bueno search.. Když jsem se toho bordelu ve Firefoxu zbavil, za dlouhého večera na googlu, stále mám problém s tím, že se mi sekají ve všech prohližečích videa na youtubu atd. a (připomínám, že jsem vsechno preinstaloval včetně flashplayeru). Tak se mi zdá, že jsem to neodstranil dostatečně a prosím Vás odborníky jako prostý uživatel o pomoc.
Zde je log:
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16521 BrowserJavaVersion: 10.51.2
Run by Milan at 21:40:55 on 2014-03-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4042.2422 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\taskeng.exe
c:\postgreSQL\bin\pg_ctl.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
c:\postgreSQL\bin\postgres.exe
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\PacFunction\updatePacFunction.exe
C:\Program Files (x86)\PacFunction\bin\utilPacFunction.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Program Files (x86)\PacFunction\bin\FilterApp_C64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\CCleaner\CCleaner64.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.bing.com
uSearch Bar = hxxp://www.bing.com
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
BHO: PacFunction: {9aa72d95-59d7-4421-a02c-f93a1187a165} - C:\Program Files (x86)\PacFunction\PacFunctionbho.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
uRun: [MaxDownloadMgr] "C:\Users\Milan\AppData\Local\Temp\StpC264_TMP.EXE"
mRun: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
mRunOnce: [20131224] C:\Program Files\Alwil Software\Avast5\setup\emupdate\2e9203ca-2578-4ca9-8e02-c37179b74f03.exe /check
dRun: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 213.46.172.37 213.46.172.36
TCP: Interfaces\{2B1157AB-DB94-4436-9870-494EC5A62553} : DHCPNameServer = 213.46.172.36 213.46.172.37
TCP: Interfaces\{64633988-5EF5-4D45-9006-F666E8274A46} : DHCPNameServer = 213.46.172.37 213.46.172.36
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
AppInit_DLLs=
SSODL: WebCheck - <orphaned>
x64-BHO: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
Hosts: 127.0.0.1 http://www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\nj18ac2f.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-3-14 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2013-3-14 207904]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3hcs.sys [2013-8-13 19264]
R1 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2013-9-19 22600]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-6-6 1034464]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-1-9 422216]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2011-1-22 254528]
R1 wStLibG64;wStLibG64;C:\Windows\System32\drivers\wStLibG64.sys [2014-3-25 61120]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-12-6 239616]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-1-9 78648]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-1-1 50344]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-6-19 634632]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2013-8-13 166720]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4;c:/postgreSQL/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "c:/postgreSQL/data" -w --> c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]
R2 ssinstall;SInstalátor;C:\Windows\SysWOW64\ssins.exe [2014-2-14 2324216]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2013-8-13 365376]
R2 Update PacFunction;Update PacFunction;C:\Program Files (x86)\PacFunction\updatePacFunction.exe [2014-3-21 348448]
R2 Util PacFunction;Util PacFunction;C:\Program Files (x86)\PacFunction\bin\utilPacFunction.exe [2014-3-23 348448]
R3 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2014-1-1 79672]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-9-24 94208]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3hub.sys [2013-8-13 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3xhc.sys [2013-8-13 789824]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2014-2-13 888536]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-7-8 123856]
S2 LiveUpdateSvc;LiveUpdate;C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-2-13 2151200]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 etdrv;etdrv;C:\Windows\etdrv.sys [2013-8-13 25640]
S3 GVTDrv64;GVTDrv64;C:\Windows\GVTDrv64.sys [2013-8-13 30528]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;C:\Windows\System32\drivers\ewdcsc.sys [2012-9-25 29696]
S3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\System32\drivers\ewusbdev.sys [2012-9-25 114304]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-8-13 160256]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-3-12 111616]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service --> C:\Windows\System32\GameMon.des -service [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-2-13 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-2-13 57856]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-1-9 1255736]
.
=============== File Associations ===============
.
ShellExec: Opera.exe: open="C:\Program Files (x86)\Opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2074-05-07 16:38:48 203576 ------w- C:\Program Files (x86)\Microsoft Games\Age of Empires III\autopatcher2.exe
2014-03-26 20:03:28 -------- d-----w- C:\FRST
2014-03-26 16:32:58 -------- d-----w- C:\Users\Milan\AppData\Local\Opera Software
2014-03-26 16:32:56 -------- d-----w- C:\Users\Milan\AppData\Roaming\Opera Software
2014-03-26 15:12:51 -------- d-----w- C:\Windows\SysWow64\Adobe
2014-03-26 15:07:23 -------- d-----w- C:\Users\Milan\AppData\Roaming\ParetoLogic
2014-03-26 15:07:23 -------- d-----w- C:\Users\Milan\AppData\Roaming\DriverCure
2014-03-26 15:07:11 -------- d-----w- C:\ProgramData\ParetoLogic
2014-03-26 12:08:13 -------- d-----w- C:\Users\Milan\AppData\Local\Max Secure Software
2014-03-26 12:07:57 -------- d-----w- C:\Users\Milan\AppData\Roaming\GetRightToGo
2014-03-26 03:44:43 -------- d-----w- C:\Program Files (x86)\RegCleaner
2014-03-26 03:38:07 -------- d-----w- C:\Program Files (x86)\Anvisoft
2014-03-25 22:06:04 -------- d-----w- C:\AdwCleaner
2014-03-25 12:38:48 10521840 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FEC2C216-ACFF-4C24-8EFE-6F5B35DD423C}\mpengine.dll
2014-03-25 00:52:02 61120 ----a-w- C:\Windows\System32\drivers\wStLibG64.sys
2014-03-23 17:33:31 -------- d-----w- C:\Program Files (x86)\buenosearch LTD
2014-03-23 17:33:02 -------- d-----w- C:\Program Files (x86)\PacFunction
2014-03-18 14:47:29 2100312 ----a-w- C:\Windows\System32\WavesGUILib64.dll
2014-03-18 14:47:28 3849304 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys
2014-03-18 14:47:28 2825432 ----a-w- C:\Windows\System32\RtPgEx64.dll
2014-03-18 14:47:28 2787032 ----a-w- C:\Windows\System32\RtkAPO64.dll
2014-03-18 14:47:28 1022680 ----a-w- C:\Windows\System32\RtkApi64.dll
2014-03-18 14:47:27 624344 ----a-w- C:\Windows\System32\RtDataProc64.dll
2014-03-18 14:47:18 397592 ----a-w- C:\Windows\System32\MBWrp64.dll
2014-03-18 14:47:18 156888 ----a-w- C:\Windows\System32\RCoInstII64.dll
2014-03-18 14:47:17 2037336 ----a-w- C:\Windows\System32\MaxxAudioEQ64.dll
2014-03-18 14:47:16 1014360 ----a-w- C:\Windows\System32\MaxxAudioAPOShell64.dll
2014-03-18 14:47:14 2770976 ----a-w- C:\Windows\System32\FMAPO64.dll
2014-03-18 14:43:42 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-03-18 14:43:42 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-03-18 14:43:17 228864 ----a-w- C:\Windows\System32\wwansvc.dll
2014-03-11 23:21:09 5777288 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2014-03-06 16:18:59 -------- d-----w- C:\Users\Milan\AppData\Roaming\BitTorrent
2014-03-06 15:30:44 -------- d-----w- C:\Users\Milan\.objectdb
2014-03-06 15:30:42 -------- d-----w- C:\Users\Milan\AppData\Roaming\VitySoft
2014-03-05 20:44:47 -------- d-----w- C:\Users\Milan\AppData\Roaming\DC++
2014-03-05 20:44:47 -------- d-----w- C:\Users\Milan\AppData\Local\DC++
2014-03-05 20:44:14 -------- d-----w- C:\Program Files (x86)\DC++
2014-02-27 12:30:53 1958616 ----a-w- C:\Windows\System32\RTSnMg64.cpl
2014-02-27 12:30:51 2782936 ----a-w- C:\Windows\System32\SET5CAA.tmp
2014-02-27 12:30:49 397592 ----a-w- C:\Windows\System32\SET5D08.tmp
2014-02-27 12:30:46 -------- d-----w- C:\DrvInstall
.
==================== Find3M ====================
.
2014-03-25 03:31:33 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-25 03:31:33 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-03-10 17:17:22 128288 ----a-w- C:\Windows\System32\IObitSmartDefragExtension.dll
2014-03-01 05:17:02 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-03-01 05:16:26 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-03-01 04:52:55 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-03-01 04:51:59 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-03-01 04:33:52 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-03-01 04:33:34 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-03-01 04:32:59 708608 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-03-01 04:23:49 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-01 04:11:20 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-03-01 03:54:33 5768704 ----a-w- C:\Windows\System32\jscript9.dll
2014-03-01 03:52:43 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-03-01 03:51:53 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-03-01 03:38:26 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-03-01 03:37:35 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-03-01 03:35:11 2041856 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-03-01 03:14:15 4244480 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-03-01 03:10:28 2334208 ----a-w- C:\Windows\System32\wininet.dll
2014-03-01 03:00:08 1964032 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-03-01 02:32:16 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-02-20 21:23:36 2871808 ----a-w- C:\Windows\explorer.exe
2014-02-20 21:23:36 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe
2014-02-20 21:23:06 67072 ----a-w- C:\Windows\splwow64.exe
2014-02-20 21:23:06 559104 ----a-w- C:\Windows\System32\spoolsv.exe
2014-02-14 12:49:08 79 ----a-w- C:\Windows\SysWow64\ssinstall-uninstall.bat
2014-02-14 12:49:07 2324216 ----a-w- C:\Windows\SysWow64\ssins.exe
2014-02-13 20:13:48 335360 ----a-w- C:\Windows\System32\msieftp.dll
2014-02-13 20:13:48 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll
2014-02-13 20:13:35 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
2014-02-13 20:13:35 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
2014-02-13 20:13:17 465920 ----a-w- C:\Windows\System32\WMPhoto.dll
2014-02-13 20:13:17 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll
2014-02-13 20:12:55 1930752 ----a-w- C:\Windows\System32\authui.dll
2014-02-13 20:12:55 1796096 ----a-w- C:\Windows\SysWow64\authui.dll
2014-02-13 20:12:54 197120 ----a-w- C:\Windows\System32\credui.dll
2014-02-13 20:12:54 190464 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll
2014-02-13 20:12:54 168960 ----a-w- C:\Windows\SysWow64\credui.dll
2014-02-13 20:12:54 152576 ----a-w- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
2014-02-13 20:12:24 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
2014-02-13 20:12:24 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
2014-02-13 20:10:44 155584 ----a-w- C:\Windows\System32\drivers\ataport.sys
2014-02-13 20:08:41 48640 ----a-w- C:\Windows\System32\wwanprotdim.dll
2014-02-13 20:08:32 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2014-02-13 20:08:32 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2014-02-13 20:08:32 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll
2014-02-13 20:08:32 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll
2014-02-13 20:08:32 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2014-02-13 20:08:32 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll
2014-02-13 20:06:34 223752 ----a-w- C:\Windows\System32\drivers\fvevol.sys
2014-02-13 20:06:22 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll
2014-02-13 20:01:01 800768 ----a-w- C:\Windows\System32\usp10.dll
2014-02-13 20:01:01 626688 ----a-w- C:\Windows\SysWow64\usp10.dll
2014-02-13 19:58:25 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys
2014-02-13 19:58:25 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll
2014-02-13 19:58:25 744448 ----a-w- C:\Windows\System32\WUDFx.dll
2014-02-13 19:58:25 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll
2014-02-13 19:58:25 229888 ----a-w- C:\Windows\System32\WUDFHost.exe
2014-02-13 19:58:25 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys
2014-02-13 19:58:25 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll
2014-02-13 19:56:43 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2014-02-13 19:56:29 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys
2014-02-13 19:56:29 41472 ----a-w- C:\Windows\System32\drivers\RNDISMP.sys
2014-02-13 19:56:19 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2014-02-13 19:56:19 366592 ----a-w- C:\Windows\System32\qdvd.dll
2014-02-13 19:56:11 209920 ----a-w- C:\Windows\System32\profsvc.dll
2014-02-13 19:56:02 3216384 ----a-w- C:\Windows\System32\msi.dll
2014-02-13 19:56:02 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2014-02-13 19:55:50 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2014-02-13 19:55:50 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
2014-02-13 19:55:34 515584 ----a-w- C:\Windows\System32\timedate.cpl
2014-02-13 19:55:34 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl
2014-02-13 19:53:35 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2014-02-13 19:53:01 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe
2014-02-13 19:53:01 31232 ----a-w- C:\Windows\System32\prevhost.exe
2014-02-13 19:30:38 99800 ----a-w- C:\Windows\System32\drivers\TeeDriverx64.sys
2014-02-13 19:29:13 888536 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2014-02-13 19:29:13 73800 ----a-w- C:\Windows\System32\RtNicProp64.dll
2014-02-13 19:29:13 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2014-02-13 19:28:39 1286872 ----a-w- C:\Windows\System32\RTCOM64.dll
2014-02-13 19:28:36 209096 ----a-w- C:\Windows\System32\AERTAC64.dll
2014-02-13 19:28:36 113576 ----a-w- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
2014-02-09 16:55:15 65536 ----a-w- C:\Windows\System32\spu_storage.bin
2014-02-07 01:23:30 3156480 ----a-w- C:\Windows\System32\win32k.sys
2014-02-04 02:32:12 624128 ----a-w- C:\Windows\System32\qedit.dll
2014-02-04 02:04:11 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
2014-01-31 20:24:36 126464 ----a-w- C:\Windows\System32\mantle64.dll
2014-01-31 20:24:16 113152 ----a-w- C:\Windows\SysWow64\mantle32.dll
2014-01-31 20:23:54 5350400 ----a-w- C:\Windows\System32\amdmantle64.dll
2014-01-31 20:10:46 4286976 ----a-w- C:\Windows\SysWow64\amdmantle32.dll
2014-01-31 19:59:12 81920 ----a-w- C:\Windows\System32\mantleaxl64.dll
2014-01-31 19:59:02 79360 ----a-w- C:\Windows\SysWow64\mantleaxl32.dll
2014-01-31 19:48:04 44544 ----a-w- C:\Windows\System32\amdmmcl6.dll
2014-01-31 19:47:58 35840 ----a-w- C:\Windows\SysWow64\amdmmcl.dll
2014-01-31 19:37:06 806912 ----a-w- C:\Windows\System32\coinst_13.350.dll
2014-01-29 02:32:18 484864 ----a-w- C:\Windows\System32\wer.dll
2014-01-29 02:06:47 381440 ----a-w- C:\Windows\SysWow64\wer.dll
2014-01-12 02:41:08 51496 ----a-w- C:\Windows\System32\drivers\stflt.sys
2014-01-01 15:22:21 79672 ----a-w- C:\Windows\System32\drivers\aswstm.sys
.
============= FINISH: 21:41:04,73 ===============
Zde je log:
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16521 BrowserJavaVersion: 10.51.2
Run by Milan at 21:40:55 on 2014-03-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4042.2422 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\taskeng.exe
c:\postgreSQL\bin\pg_ctl.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
c:\postgreSQL\bin\postgres.exe
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\PacFunction\updatePacFunction.exe
C:\Program Files (x86)\PacFunction\bin\utilPacFunction.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
c:\postgreSQL\bin\postgres.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Program Files (x86)\PacFunction\bin\FilterApp_C64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\CCleaner\CCleaner64.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.bing.com
uSearch Bar = hxxp://www.bing.com
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
BHO: PacFunction: {9aa72d95-59d7-4421-a02c-f93a1187a165} - C:\Program Files (x86)\PacFunction\PacFunctionbho.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
uRun: [MaxDownloadMgr] "C:\Users\Milan\AppData\Local\Temp\StpC264_TMP.EXE"
mRun: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
mRunOnce: [20131224] C:\Program Files\Alwil Software\Avast5\setup\emupdate\2e9203ca-2578-4ca9-8e02-c37179b74f03.exe /check
dRun: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 213.46.172.37 213.46.172.36
TCP: Interfaces\{2B1157AB-DB94-4436-9870-494EC5A62553} : DHCPNameServer = 213.46.172.36 213.46.172.37
TCP: Interfaces\{64633988-5EF5-4D45-9006-F666E8274A46} : DHCPNameServer = 213.46.172.37 213.46.172.36
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
AppInit_DLLs=
SSODL: WebCheck - <orphaned>
x64-BHO: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
Hosts: 127.0.0.1 http://www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\nj18ac2f.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-3-14 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2013-3-14 207904]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3hcs.sys [2013-8-13 19264]
R1 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2013-9-19 22600]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-6-6 1034464]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-1-9 422216]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2011-1-22 254528]
R1 wStLibG64;wStLibG64;C:\Windows\System32\drivers\wStLibG64.sys [2014-3-25 61120]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-12-6 239616]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-1-9 78648]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-1-1 50344]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-6-19 634632]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2013-8-13 166720]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4;c:/postgreSQL/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "c:/postgreSQL/data" -w --> c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]
R2 ssinstall;SInstalátor;C:\Windows\SysWOW64\ssins.exe [2014-2-14 2324216]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2013-8-13 365376]
R2 Update PacFunction;Update PacFunction;C:\Program Files (x86)\PacFunction\updatePacFunction.exe [2014-3-21 348448]
R2 Util PacFunction;Util PacFunction;C:\Program Files (x86)\PacFunction\bin\utilPacFunction.exe [2014-3-23 348448]
R3 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2014-1-1 79672]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-9-24 94208]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3hub.sys [2013-8-13 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;C:\Windows\System32\drivers\iusb3xhc.sys [2013-8-13 789824]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2014-2-13 888536]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-7-8 123856]
S2 LiveUpdateSvc;LiveUpdate;C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-2-13 2151200]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 etdrv;etdrv;C:\Windows\etdrv.sys [2013-8-13 25640]
S3 GVTDrv64;GVTDrv64;C:\Windows\GVTDrv64.sys [2013-8-13 30528]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;C:\Windows\System32\drivers\ewdcsc.sys [2012-9-25 29696]
S3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\System32\drivers\ewusbdev.sys [2012-9-25 114304]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-8-13 160256]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-3-12 111616]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service --> C:\Windows\System32\GameMon.des -service [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-2-13 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-2-13 57856]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-1-9 1255736]
.
=============== File Associations ===============
.
ShellExec: Opera.exe: open="C:\Program Files (x86)\Opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2074-05-07 16:38:48 203576 ------w- C:\Program Files (x86)\Microsoft Games\Age of Empires III\autopatcher2.exe
2014-03-26 20:03:28 -------- d-----w- C:\FRST
2014-03-26 16:32:58 -------- d-----w- C:\Users\Milan\AppData\Local\Opera Software
2014-03-26 16:32:56 -------- d-----w- C:\Users\Milan\AppData\Roaming\Opera Software
2014-03-26 15:12:51 -------- d-----w- C:\Windows\SysWow64\Adobe
2014-03-26 15:07:23 -------- d-----w- C:\Users\Milan\AppData\Roaming\ParetoLogic
2014-03-26 15:07:23 -------- d-----w- C:\Users\Milan\AppData\Roaming\DriverCure
2014-03-26 15:07:11 -------- d-----w- C:\ProgramData\ParetoLogic
2014-03-26 12:08:13 -------- d-----w- C:\Users\Milan\AppData\Local\Max Secure Software
2014-03-26 12:07:57 -------- d-----w- C:\Users\Milan\AppData\Roaming\GetRightToGo
2014-03-26 03:44:43 -------- d-----w- C:\Program Files (x86)\RegCleaner
2014-03-26 03:38:07 -------- d-----w- C:\Program Files (x86)\Anvisoft
2014-03-25 22:06:04 -------- d-----w- C:\AdwCleaner
2014-03-25 12:38:48 10521840 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FEC2C216-ACFF-4C24-8EFE-6F5B35DD423C}\mpengine.dll
2014-03-25 00:52:02 61120 ----a-w- C:\Windows\System32\drivers\wStLibG64.sys
2014-03-23 17:33:31 -------- d-----w- C:\Program Files (x86)\buenosearch LTD
2014-03-23 17:33:02 -------- d-----w- C:\Program Files (x86)\PacFunction
2014-03-18 14:47:29 2100312 ----a-w- C:\Windows\System32\WavesGUILib64.dll
2014-03-18 14:47:28 3849304 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys
2014-03-18 14:47:28 2825432 ----a-w- C:\Windows\System32\RtPgEx64.dll
2014-03-18 14:47:28 2787032 ----a-w- C:\Windows\System32\RtkAPO64.dll
2014-03-18 14:47:28 1022680 ----a-w- C:\Windows\System32\RtkApi64.dll
2014-03-18 14:47:27 624344 ----a-w- C:\Windows\System32\RtDataProc64.dll
2014-03-18 14:47:18 397592 ----a-w- C:\Windows\System32\MBWrp64.dll
2014-03-18 14:47:18 156888 ----a-w- C:\Windows\System32\RCoInstII64.dll
2014-03-18 14:47:17 2037336 ----a-w- C:\Windows\System32\MaxxAudioEQ64.dll
2014-03-18 14:47:16 1014360 ----a-w- C:\Windows\System32\MaxxAudioAPOShell64.dll
2014-03-18 14:47:14 2770976 ----a-w- C:\Windows\System32\FMAPO64.dll
2014-03-18 14:43:42 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-03-18 14:43:42 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-03-18 14:43:17 228864 ----a-w- C:\Windows\System32\wwansvc.dll
2014-03-11 23:21:09 5777288 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2014-03-06 16:18:59 -------- d-----w- C:\Users\Milan\AppData\Roaming\BitTorrent
2014-03-06 15:30:44 -------- d-----w- C:\Users\Milan\.objectdb
2014-03-06 15:30:42 -------- d-----w- C:\Users\Milan\AppData\Roaming\VitySoft
2014-03-05 20:44:47 -------- d-----w- C:\Users\Milan\AppData\Roaming\DC++
2014-03-05 20:44:47 -------- d-----w- C:\Users\Milan\AppData\Local\DC++
2014-03-05 20:44:14 -------- d-----w- C:\Program Files (x86)\DC++
2014-02-27 12:30:53 1958616 ----a-w- C:\Windows\System32\RTSnMg64.cpl
2014-02-27 12:30:51 2782936 ----a-w- C:\Windows\System32\SET5CAA.tmp
2014-02-27 12:30:49 397592 ----a-w- C:\Windows\System32\SET5D08.tmp
2014-02-27 12:30:46 -------- d-----w- C:\DrvInstall
.
==================== Find3M ====================
.
2014-03-25 03:31:33 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-25 03:31:33 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-03-10 17:17:22 128288 ----a-w- C:\Windows\System32\IObitSmartDefragExtension.dll
2014-03-01 05:17:02 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-03-01 05:16:26 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-03-01 04:52:55 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-03-01 04:51:59 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-03-01 04:33:52 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-03-01 04:33:34 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-03-01 04:32:59 708608 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-03-01 04:23:49 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-01 04:11:20 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-03-01 03:54:33 5768704 ----a-w- C:\Windows\System32\jscript9.dll
2014-03-01 03:52:43 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-03-01 03:51:53 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-03-01 03:38:26 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-03-01 03:37:35 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-03-01 03:35:11 2041856 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-03-01 03:14:15 4244480 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-03-01 03:10:28 2334208 ----a-w- C:\Windows\System32\wininet.dll
2014-03-01 03:00:08 1964032 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-03-01 02:32:16 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-02-20 21:23:36 2871808 ----a-w- C:\Windows\explorer.exe
2014-02-20 21:23:36 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe
2014-02-20 21:23:06 67072 ----a-w- C:\Windows\splwow64.exe
2014-02-20 21:23:06 559104 ----a-w- C:\Windows\System32\spoolsv.exe
2014-02-14 12:49:08 79 ----a-w- C:\Windows\SysWow64\ssinstall-uninstall.bat
2014-02-14 12:49:07 2324216 ----a-w- C:\Windows\SysWow64\ssins.exe
2014-02-13 20:13:48 335360 ----a-w- C:\Windows\System32\msieftp.dll
2014-02-13 20:13:48 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll
2014-02-13 20:13:35 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
2014-02-13 20:13:35 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
2014-02-13 20:13:17 465920 ----a-w- C:\Windows\System32\WMPhoto.dll
2014-02-13 20:13:17 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll
2014-02-13 20:12:55 1930752 ----a-w- C:\Windows\System32\authui.dll
2014-02-13 20:12:55 1796096 ----a-w- C:\Windows\SysWow64\authui.dll
2014-02-13 20:12:54 197120 ----a-w- C:\Windows\System32\credui.dll
2014-02-13 20:12:54 190464 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll
2014-02-13 20:12:54 168960 ----a-w- C:\Windows\SysWow64\credui.dll
2014-02-13 20:12:54 152576 ----a-w- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
2014-02-13 20:12:24 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
2014-02-13 20:12:24 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
2014-02-13 20:10:44 155584 ----a-w- C:\Windows\System32\drivers\ataport.sys
2014-02-13 20:08:41 48640 ----a-w- C:\Windows\System32\wwanprotdim.dll
2014-02-13 20:08:32 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2014-02-13 20:08:32 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2014-02-13 20:08:32 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll
2014-02-13 20:08:32 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll
2014-02-13 20:08:32 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2014-02-13 20:08:32 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll
2014-02-13 20:06:34 223752 ----a-w- C:\Windows\System32\drivers\fvevol.sys
2014-02-13 20:06:22 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll
2014-02-13 20:01:01 800768 ----a-w- C:\Windows\System32\usp10.dll
2014-02-13 20:01:01 626688 ----a-w- C:\Windows\SysWow64\usp10.dll
2014-02-13 19:58:25 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys
2014-02-13 19:58:25 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll
2014-02-13 19:58:25 744448 ----a-w- C:\Windows\System32\WUDFx.dll
2014-02-13 19:58:25 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll
2014-02-13 19:58:25 229888 ----a-w- C:\Windows\System32\WUDFHost.exe
2014-02-13 19:58:25 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys
2014-02-13 19:58:25 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll
2014-02-13 19:56:43 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2014-02-13 19:56:29 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys
2014-02-13 19:56:29 41472 ----a-w- C:\Windows\System32\drivers\RNDISMP.sys
2014-02-13 19:56:19 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2014-02-13 19:56:19 366592 ----a-w- C:\Windows\System32\qdvd.dll
2014-02-13 19:56:11 209920 ----a-w- C:\Windows\System32\profsvc.dll
2014-02-13 19:56:02 3216384 ----a-w- C:\Windows\System32\msi.dll
2014-02-13 19:56:02 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2014-02-13 19:55:50 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2014-02-13 19:55:50 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
2014-02-13 19:55:34 515584 ----a-w- C:\Windows\System32\timedate.cpl
2014-02-13 19:55:34 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl
2014-02-13 19:53:35 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2014-02-13 19:53:01 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe
2014-02-13 19:53:01 31232 ----a-w- C:\Windows\System32\prevhost.exe
2014-02-13 19:30:38 99800 ----a-w- C:\Windows\System32\drivers\TeeDriverx64.sys
2014-02-13 19:29:13 888536 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2014-02-13 19:29:13 73800 ----a-w- C:\Windows\System32\RtNicProp64.dll
2014-02-13 19:29:13 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2014-02-13 19:28:39 1286872 ----a-w- C:\Windows\System32\RTCOM64.dll
2014-02-13 19:28:36 209096 ----a-w- C:\Windows\System32\AERTAC64.dll
2014-02-13 19:28:36 113576 ----a-w- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
2014-02-09 16:55:15 65536 ----a-w- C:\Windows\System32\spu_storage.bin
2014-02-07 01:23:30 3156480 ----a-w- C:\Windows\System32\win32k.sys
2014-02-04 02:32:12 624128 ----a-w- C:\Windows\System32\qedit.dll
2014-02-04 02:04:11 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
2014-01-31 20:24:36 126464 ----a-w- C:\Windows\System32\mantle64.dll
2014-01-31 20:24:16 113152 ----a-w- C:\Windows\SysWow64\mantle32.dll
2014-01-31 20:23:54 5350400 ----a-w- C:\Windows\System32\amdmantle64.dll
2014-01-31 20:10:46 4286976 ----a-w- C:\Windows\SysWow64\amdmantle32.dll
2014-01-31 19:59:12 81920 ----a-w- C:\Windows\System32\mantleaxl64.dll
2014-01-31 19:59:02 79360 ----a-w- C:\Windows\SysWow64\mantleaxl32.dll
2014-01-31 19:48:04 44544 ----a-w- C:\Windows\System32\amdmmcl6.dll
2014-01-31 19:47:58 35840 ----a-w- C:\Windows\SysWow64\amdmmcl.dll
2014-01-31 19:37:06 806912 ----a-w- C:\Windows\System32\coinst_13.350.dll
2014-01-29 02:32:18 484864 ----a-w- C:\Windows\System32\wer.dll
2014-01-29 02:06:47 381440 ----a-w- C:\Windows\SysWow64\wer.dll
2014-01-12 02:41:08 51496 ----a-w- C:\Windows\System32\drivers\stflt.sys
2014-01-01 15:22:21 79672 ----a-w- C:\Windows\System32\drivers\aswstm.sys
.
============= FINISH: 21:41:04,73 ===============
