Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosim o kontrolu logu

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

prosim o kontrolu logu

#1 Příspěvek od NeoFan »

Logfile of random's system information tool 1.10 (written by random/random)
Run by miso at 2014-06-07 12:38:22
Microsoft Windows 7 Professional N Service Pack 1
System drive C: has 5 GB (15%) free of 30 GB
Total RAM: 7679 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:38:25, on 7. 6. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16545)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
D:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\miso\AppData\Local\Viber\Viber.exe
D:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\V0770Mon.exe
D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe
C:\Windows\V0790Mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\miso.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [V0770Mon.exe] C:\Windows\V0770Mon.exe
O4 - HKLM\..\Run: [Live! Central 3] "D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe" /mode2
O4 - HKLM\..\Run: [V0790Mon.exe] C:\Windows\V0790Mon.exe
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "D:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Wunderlist] "C:\Program Files (x86)\Wunderlist2\Wunderlist.exe" /silent
O4 - HKCU\..\Run: [Viber] "C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [EADM] "D:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Evernote.lnk = ?
O4 - Global Startup: Skype.lnk = D:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - Global Startup: TeamViewer 9.lnk = D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
O8 - Extra context menu item: Clip image - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: New note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Motorola Device Manager Service (Motorola Device Manager) - Motorola Mobility LLC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Popcorn Time Updater - Popcorn Time - C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PST Service - Motorola - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 11093 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"D:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe"
"C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe"
"C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k secsvcs
taskhost.exe USER
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
"D:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\system32\SearchIndexer.exe /Embedding
"D:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log D:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"D:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log D:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
KHALMNPR.EXE /API
"C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized
"D:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Windows\V0770Mon.exe"
"D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe" /mode2
"C:\Windows\V0790Mon.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
C:\Windows\system32\msiexec.exe /V
taskeng.exe {E9980AFE-DB84-4D3B-A7DD-F7376CABE32B}
"D:\Program Files\CCleaner\CCleaner.exe" /uac
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"E:\downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\miso\AppData\Roaming\Mozilla\Firefox\Profiles\qkqfsdsx.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=D:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=D:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=D:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.5.2]
"Description"=Java™ Deployment Toolkit
"Path"=D:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.5.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files\Java\jre8\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL


C:\Users\miso\AppData\Roaming\Mozilla\Firefox\Profiles\qkqfsdsx.default\extensions\
jid1-4P0kohSJxU1qGg@jetpack
{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre8\bin\ssv.dll [2014-05-31 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-05-01 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2013-07-31 433944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-05-31 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-16 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-05-01 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-03-03 583520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2013-07-31 364824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-16 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2013-07-31 3091224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=D:\Program Files (x86)\Skype\Phone\Skype.exe [2014-01-14 20728480]
"DAEMON Tools Lite"=D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"uTorrent"=C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe [2014-04-29 1270352]
"Wunderlist"=C:\Program Files (x86)\Wunderlist2\Wunderlist.exe [2013-12-02 13021792]
"Viber"=C:\Users\miso\AppData\Local\Viber\Viber.exe [2014-03-05 936456]
"EADM"=D:\Program Files (x86)\Origin\Origin.exe [2014-05-29 3588952]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=D:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-06 3890208]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21 959904]
"BCSSync"=D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]
"V0770Mon.exe"=C:\Windows\V0770Mon.exe [2012-06-01 32884]
"Live! Central 3"=D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe [2013-08-02 461312]
"V0790Mon.exe"=C:\Windows\V0790Mon.exe [2013-06-19 32884]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-03-18 224128]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Evernote.lnk - C:\Windows\Installer\{12FB6296-8840-11E3-86D7-00163E98E7D0}\Evernote.ico
Skype.lnk - D:\Program Files (x86)\Skype\Phone\Skype.exe
TeamViewer 9.lnk - D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

C:\Users\miso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2013-06-13 66328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-07 12:38:22 ----D---- C:\rsit
2014-06-05 23:12:36 ----D---- C:\ProgramData\BitRaider
2014-05-31 11:51:14 ----D---- C:\Program Files (x86)\Popcorn Time
2014-05-30 13:28:27 ----D---- C:\ProgramData\PopCap Games
2014-05-30 04:08:07 ----D---- C:\Program Files (x86)\ATI Technologies
2014-05-30 04:01:58 ----D---- C:\Users\miso\AppData\Roaming\ATI
2014-05-30 04:01:58 ----D---- C:\ProgramData\ATI
2014-05-30 03:58:46 ----D---- C:\ProgramData\AMD
2014-05-30 03:57:48 ----D---- C:\Program Files\ATI
2014-05-29 21:26:54 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2014-05-29 18:13:33 ----D---- C:\ProgramData\EA Core
2014-05-29 18:13:32 ----D---- C:\ProgramData\EA Logs
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-05-29 16:40:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-05-29 16:40:28 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-05-29 16:40:28 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-05-29 16:40:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-05-29 16:40:25 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-05-29 16:40:06 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-05-29 16:40:06 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-05-29 16:40:04 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-05-29 16:40:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-05-29 16:40:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-05-29 16:40:03 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-05-29 16:40:02 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-05-29 16:40:02 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-05-29 16:39:59 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-05-29 16:39:59 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-05-29 16:39:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-05-29 16:39:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-05-29 16:39:51 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-05-29 16:39:51 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-05-29 16:39:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-05-29 16:21:40 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-05-29 16:21:40 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-05-29 16:21:24 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-05-29 16:21:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-05-29 16:21:24 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-05-29 16:21:24 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-05-29 16:21:17 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-05-29 16:21:17 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-05-29 16:21:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-05-29 16:21:07 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-05-29 16:21:02 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-05-29 16:21:01 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-05-29 16:21:01 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-05-29 16:20:58 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-05-29 16:20:58 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-05-29 16:20:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-05-29 16:20:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-05-29 16:20:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-05-29 16:20:50 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-05-29 16:20:49 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-05-29 16:20:45 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-05-29 16:20:45 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-05-29 16:20:24 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-05-29 16:20:24 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-05-29 16:20:21 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-05-29 16:20:08 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-05-29 16:20:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-05-29 16:19:59 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-05-29 16:19:59 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-05-29 16:19:58 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-05-29 16:19:57 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-05-29 16:19:57 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-05-29 16:19:55 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-05-29 16:19:55 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-05-29 16:19:54 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-05-29 16:19:54 ----A---- C:\Windows\system32\xinput1_3.dll
2014-05-29 16:19:39 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-05-29 16:19:39 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-05-29 16:19:38 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-05-29 16:19:37 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-05-29 16:19:37 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-05-29 16:19:37 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-05-29 16:19:37 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-05-29 16:19:36 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-05-29 16:19:36 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-05-29 16:19:36 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-05-29 16:19:36 ----A---- C:\Windows\system32\d3dx10.dll
2014-05-29 16:19:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-05-29 16:19:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-05-29 16:19:34 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-05-29 16:19:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-05-29 16:19:34 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-05-29 16:19:34 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-05-29 16:19:33 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-05-29 16:19:33 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-05-29 16:19:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-05-29 16:19:31 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-05-29 16:19:31 ----A---- C:\Windows\system32\xinput1_2.dll
2014-05-29 16:19:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-05-29 16:19:30 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-05-29 16:19:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-05-29 16:19:30 ----A---- C:\Windows\system32\xinput1_1.dll
2014-05-29 16:19:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-05-29 16:19:25 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-05-29 16:19:25 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-05-29 16:18:34 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-05-29 16:18:34 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-05-29 16:18:33 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-05-29 16:18:33 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-05-29 16:18:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-05-29 16:18:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-05-29 16:18:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-05-29 16:18:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-05-29 16:18:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-05-29 16:18:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-05-29 16:18:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-05-29 16:18:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-05-29 15:34:04 ----D---- C:\Users\miso\AppData\Roaming\Origin
2014-05-29 15:20:25 ----D---- C:\ProgramData\Origin
2014-05-29 15:20:24 ----D---- C:\ProgramData\Electronic Arts
2014-05-24 20:09:23 ----D---- C:\Windows\SYSWOW64\1033
2014-05-24 20:09:23 ----D---- C:\Windows\system32\1033
2014-05-15 01:20:49 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 01:20:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-15 01:20:47 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 01:20:47 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 01:06:54 ----A---- C:\Windows\system32\shell32.dll
2014-05-15 01:06:53 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-15 01:06:52 ----A---- C:\Windows\system32\aepdu.dll
2014-05-15 01:06:44 ----A---- C:\Windows\system32\aeinv.dll
2014-05-15 01:06:04 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-15 01:06:04 ----A---- C:\Windows\system32\kerberos.dll
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-15 01:06:03 ----A---- C:\Windows\system32\winlogon.exe
2014-05-15 01:06:03 ----A---- C:\Windows\system32\objsel.dll
2014-05-15 01:06:03 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-15 01:06:03 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\wdigest.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\schannel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-15 01:06:02 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\adprovider.dll
2014-05-15 01:06:01 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\sspicli.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\secur32.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\lsass.exe
2014-05-15 01:06:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-15 01:06:00 ----A---- C:\Windows\system32\credssp.dll
2014-05-15 00:58:04 ----D---- C:\Program Files (x86)\Google
2014-05-10 18:50:05 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-05-08 18:04:59 ----D---- C:\Users\miso\AppData\Roaming\InfraRecorder

======List of files/folders modified in the last 1 month======

2014-06-07 12:38:25 ----D---- C:\Windows\Temp
2014-06-07 12:38:25 ----D---- C:\Windows\Prefetch
2014-06-07 12:38:24 ----D---- C:\Program Files\trend micro
2014-06-07 12:37:04 ----D---- C:\Users\miso\AppData\Roaming\uTorrent
2014-06-07 12:31:42 ----D---- C:\Users\miso\AppData\Roaming\Skype
2014-06-07 12:29:12 ----SHD---- C:\Windows\Installer
2014-06-07 12:29:05 ----SHD---- C:\System Volume Information
2014-06-07 12:25:07 ----RD---- C:\Program Files (x86)
2014-06-07 12:14:16 ----D---- C:\Windows\system32\LogFiles
2014-06-07 12:14:14 ----D---- C:\Windows\System32
2014-06-07 12:14:14 ----D---- C:\Windows\inf
2014-06-07 12:14:13 ----D---- C:\Windows
2014-06-07 11:33:15 ----D---- C:\Windows\system32\config
2014-06-07 11:28:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-07 11:21:02 ----D---- C:\Users\miso\AppData\Roaming\Dropbox
2014-06-07 11:20:41 ----D---- C:\Users\miso\AppData\Roaming\DropboxMaster
2014-06-07 11:20:39 ----D---- C:\Users\miso\AppData\Roaming\ViberPC
2014-06-07 11:20:15 ----D---- C:\Temp
2014-06-05 23:12:36 ----HD---- C:\ProgramData
2014-06-05 23:11:29 ----D---- C:\Program Files (x86)\Common Files
2014-06-05 01:37:48 ----D---- C:\Windows\system32\catroot2
2014-06-03 00:16:39 ----D---- C:\Users\miso\AppData\Roaming\vlc
2014-05-31 20:35:51 ----D---- C:\avast! sandbox
2014-05-31 18:01:41 ----D---- C:\ProgramData\Oracle
2014-05-31 18:01:28 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-31 18:01:27 ----A---- C:\Windows\system32\javaws.exe
2014-05-31 18:01:27 ----A---- C:\Windows\system32\javaw.exe
2014-05-31 18:01:27 ----A---- C:\Windows\system32\java.exe
2014-05-31 00:51:34 ----D---- C:\Users\miso\AppData\Roaming\FileZilla
2014-05-31 00:51:27 ----D---- C:\Windows\Logs
2014-05-31 00:48:44 ----D---- C:\Windows\SysWOW64
2014-05-31 00:45:00 ----D---- C:\Users\miso\AppData\Roaming\Dev-Cpp
2014-05-31 00:40:06 ----D---- C:\ProgramData\Microsoft Help
2014-05-31 00:40:05 ----RSD---- C:\Windows\assembly
2014-05-31 00:40:04 ----SD---- C:\ProgramData\Microsoft
2014-05-31 00:39:08 ----D---- C:\Windows\system32\DriverStore
2014-05-31 00:39:08 ----D---- C:\Windows\system32\drivers
2014-05-31 00:39:08 ----D---- C:\Windows\system32\catroot
2014-05-31 00:37:41 ----D---- C:\Windows\twain_32
2014-05-31 00:37:30 ----HD---- C:\GrandeDevice
2014-05-30 03:58:15 ----D---- C:\ProgramData\Package Cache
2014-05-30 03:57:48 ----RD---- C:\Program Files
2014-05-29 17:04:05 ----D---- C:\Windows\Microsoft.NET
2014-05-29 16:41:08 ----D---- C:\Windows\winsxs
2014-05-29 16:30:40 ----D---- C:\Program Files (x86)\MSBuild
2014-05-29 16:21:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-05-29 16:15:55 ----D---- C:\Program Files (x86)\Microsoft SDKs
2014-05-25 21:32:59 ----D---- C:\Windows\debug
2014-05-24 20:19:53 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-05-16 18:35:07 ----D---- C:\Windows\rescache
2014-05-15 14:56:07 ----SD---- C:\Windows\system32\CompatTel
2014-05-15 14:56:05 ----D---- C:\Windows\system32\en-US
2014-05-15 14:56:05 ----D---- C:\Windows\PolicyDefinitions
2014-05-15 01:20:34 ----D---- C:\Windows\system32\MRT
2014-05-15 01:19:39 ----A---- C:\Windows\system32\MRT.exe
2014-05-15 00:58:06 ----D---- C:\Windows\Tasks
2014-05-15 00:58:06 ----D---- C:\Windows\system32\Tasks
2014-05-13 21:56:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-05-11 11:39:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-08 18:53:40 ----D---- C:\Users\miso\AppData\Roaming\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-05-01 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-05-01 208416]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; SysWOW64\speedfan.sys []
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-16 381440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-04-02 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-05-01 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-05-12 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-05-12 423240]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2014-02-25 252704]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2014-02-25 126752]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.3;AODDriver4.3; \??\D:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2014-02-11 59616]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-05-01 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-05-01 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-05-12 85328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2011-09-05 178176]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2013-05-23 77592]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2013-05-23 13080]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2013-05-23 76568]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2013-05-23 59160]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 V0790Vid;Live! Cam Chat HD VF0790 Driver; C:\Windows\system32\DRIVERS\V0790Vid.sys [2013-07-09 380416]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2014-02-25 140576]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2014-02-25 154912]
R3 vpcbus;Virtual PC Host Bus Service; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;USB Virtualization Connector Service; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28ux.sys [2009-09-15 1061888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 V0770Vid;Live! Cam Sync HD VF0770 Driver; C:\Windows\system32\DRIVERS\V0770Vid.sys [2012-06-01 379776]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2014-02-25 113952]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUSB;Motorola Android USB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 AMD FUEL Service;AMD FUEL Service; D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2014-04-17 344064]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-05-01 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-15 116648]
R2 Motorola Device Manager;Motorola Device Manager Service; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2013-11-15 137528]
R2 Popcorn Time Updater;Popcorn Time Updater; C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe [2014-05-22 210944]
R2 PST Service;PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2011-09-02 65657]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R2 TeamViewer9;TeamViewer 9; D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-25 5024576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; D:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-13 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-06-05 477960]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-15 116648]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2013-06-13 357144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-02-16 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#2 Příspěvek od Márty84 »

Zdravim :)

:???: Je s pc nejaky konkretni problem? Nebo jde jen o prevenci?

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#3 Příspěvek od NeoFan »

Dobry den,

problem s pc nie je, avsak som si vsimol neautorizovany pristup na moj gmail.

# AdwCleaner v3.212 - Report created 07/06/2014 at 14:05:39
# Updated 05/06/2014 by Xplode
# Operating System : Windows 7 Professional N Service Pack 1 (64 bits)
# Username : miso - MISO-PC
# Running from : C:\Users\miso\Desktop\adwcleaner_3.212.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545


-\\ Mozilla Firefox v29.0.1 (en-US)

[ File : C:\Users\miso\AppData\Roaming\Mozilla\Firefox\Profiles\qkqfsdsx.default\prefs.js ]


*************************

AdwCleaner[R1].txt - [797 octets] - [07/06/2014 13:42:15]
AdwCleaner[R2].txt - [856 octets] - [07/06/2014 13:58:05]
AdwCleaner[R3].txt - [915 octets] - [07/06/2014 14:05:02]
AdwCleaner[S1].txt - [839 octets] - [07/06/2014 14:05:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [898 octets] ##########
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#4 Příspěvek od Márty84 »

:arrow: Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#5 Příspěvek od NeoFan »

Dobre rano,


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8. 6. 2014
Scan Time: 2:41:04
Logfile: log.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.07.07
Rootkit Database: v2014.06.02.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: miso

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 269859
Time Elapsed: 7 min, 25 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Deep Rootkit Scan: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 2
Forged physical sector, Physical Sector #62531017 on Drive #0, , [a08f076566962dcc8c2462d670ff1a50],
Forged physical sector, Physical Sector #62531033 on Drive #0, , [a08f076566962dcc8c2462d670ff1a50],


(end)
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#6 Příspěvek od Márty84 »

NeoFan píše:Dobre rano,
No, v tuhle dobu byvam pres tyden vzhuru a chystam se do prace, ale o vikendu teda neee :D


:arrow: Nalezy MBAM nechte opravit (ale nevim, jestli s tim neco bude delat), pak MBAM odinstalujte.


:!: Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu, kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#7 Příspěvek od NeoFan »

tak ja musim obcasne aj cez vikend :cry:



RogueKiller V9.0.2.0 [Jun 3 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : miso [Admin rights]
Mode : Scan -- Date : 06/09/2014 10:37:22

¤¤¤ Bad processes : 1 ¤¤¤
[Suspicious.Path] Viber.exe -- C:\Users\miso\AppData\Local\Viber\Viber.exe[7] -> KILLED [TermProc]

¤¤¤ Registry Entries : 12 ¤¤¤
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Run | Viber : "C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized -> FOUND
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Run | Viber : "C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized -> FOUND
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> FOUND
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> FOUND
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ HOSTS File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: KINGSTON SV100S232G ATA Device +++++
--- User ---
[MBR] 28aa10cfff454eb7688acbcdd19380ba
[BSP] 3bab085e6ae8d0e7c561403ededfa9fb : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 30431 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD20EARX-00PASB0 ATA Device +++++
--- User ---
[MBR] 01707f6c55af22c58cc8f4f2c908e718
[BSP] e9170e04af64ece4d737256a3fa4f522 : Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 250000 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 512002048 | Size: 1657727 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: CBM Flash Disk USB Device +++++
--- User ---
[MBR] e0839b3f828b46e6c16a63b51672f972
[BSP] 4c4d69997159379b603d856bc4139546 : Unknown MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x6) [VISIBLE] Offset (sectors): 32 | Size: 2015 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#8 Příspěvek od Márty84 »

Ja nekdy taky, ale nastesti ne moc casto :)



:arrow: Znovu spustte RogueKiller jako spravce
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni nalezy oznacte (zkontrolujte, ze jsou u nich zatrzitka) a kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#9 Příspěvek od NeoFan »

RogueKiller V9.0.2.0 [Jun 3 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : miso [Admin rights]
Mode : Remove -- Date : 06/09/2014 12:15:33

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 12 ¤¤¤
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Run | Viber : "C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized [x] -> DELETED
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Run | Viber : "C:\Users\miso\AppData\Local\Viber\Viber.exe" StartMinimized -> ERROR [2]
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> NOT SELECTED
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1579003021-2699656099-1788894814-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> NOT SELECTED
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ HOSTS File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: KINGSTON SV100S232G ATA Device +++++
--- User ---
[MBR] 28aa10cfff454eb7688acbcdd19380ba
[BSP] 3bab085e6ae8d0e7c561403ededfa9fb : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 30431 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD20EARX-00PASB0 ATA Device +++++
--- User ---
[MBR] 01707f6c55af22c58cc8f4f2c908e718
[BSP] e9170e04af64ece4d737256a3fa4f522 : Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 250000 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 512002048 | Size: 1657727 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: CBM Flash Disk USB Device +++++
--- User ---
[MBR] e0839b3f828b46e6c16a63b51672f972
[BSP] 4c4d69997159379b603d856bc4139546 : Unknown MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x6) [VISIBLE] Offset (sectors): 32 | Size: 2015 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )


============================================
RKreport_SCN_06092014_103722.log - RKreport_SCN_06092014_121322.log
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#10 Příspěvek od Márty84 »

Dejte novy log z RSIT
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#11 Příspěvek od NeoFan »

Logfile of random's system information tool 1.10 (written by random/random)
Run by miso at 2014-06-09 22:40:31
Microsoft Windows 7 Professional N Service Pack 1
System drive C: has 4 GB (15%) free of 30 GB
Total RAM: 7679 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:34, on 9. 6. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16545)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
D:\Program Files (x86)\Skype\Phone\Skype.exe
D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe
D:\Program Files (x86)\Origin\Origin.exe
D:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\V0770Mon.exe
D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\V0790Mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Program Files\trend micro\miso.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [V0770Mon.exe] C:\Windows\V0770Mon.exe
O4 - HKLM\..\Run: [Live! Central 3] "D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe" /mode2
O4 - HKLM\..\Run: [V0790Mon.exe] C:\Windows\V0790Mon.exe
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "D:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Wunderlist] "C:\Program Files (x86)\Wunderlist2\Wunderlist.exe" /silent
O4 - HKCU\..\Run: [EADM] "D:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Evernote.lnk = ?
O4 - Global Startup: Skype.lnk = D:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - Global Startup: TeamViewer 9.lnk = D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
O8 - Extra context menu item: Clip image - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: New note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Motorola Device Manager Service (Motorola Device Manager) - Motorola Mobility LLC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Popcorn Time Updater - Popcorn Time - C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PST Service - Motorola - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 10946 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"D:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe"
"C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe"
"C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe"
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
"D:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
KHALMNPR.EXE /API
"C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\system32\SearchIndexer.exe /Embedding
"D:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log D:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"D:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log D:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"D:\Program Files (x86)\Origin\Origin.exe" -AutoStart
"D:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Windows\V0770Mon.exe"
"D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe" /mode2
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\V0790Mon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4424.84348a0.2093037668 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4424 "\\.\pipe\gecko-crash-server-pipe.4424" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe" --proxy-stub-channel=Flash5992.56156010.24010 --host-broker-channel=Flash5992.56156010.21247 --host-pid=5992 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe" --channel=6028.005FF84C.1353895319 --proxy-stub-channel=Flash5992.56156010.24010 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"E:\downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\miso\AppData\Roaming\Mozilla\Firefox\Profiles\qkqfsdsx.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=D:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=D:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=D:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.5.2]
"Description"=Java™ Deployment Toolkit
"Path"=D:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.5.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files\Java\jre8\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\miso\AppData\Roaming\Mozilla\Firefox\Profiles\qkqfsdsx.default\extensions\
jid1-4P0kohSJxU1qGg@jetpack
{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre8\bin\ssv.dll [2014-05-31 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-05-01 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2013-07-31 433944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-05-31 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-16 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-05-01 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-03-03 583520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2013-07-31 364824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-16 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2013-07-31 3091224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=D:\Program Files (x86)\Skype\Phone\Skype.exe [2014-01-14 20728480]
"DAEMON Tools Lite"=D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"uTorrent"=C:\Users\miso\AppData\Roaming\uTorrent\uTorrent.exe [2014-04-29 1270352]
"Wunderlist"=C:\Program Files (x86)\Wunderlist2\Wunderlist.exe [2013-12-02 13021792]
"EADM"=D:\Program Files (x86)\Origin\Origin.exe [2014-05-29 3588952]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=D:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-06 3890208]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21 959904]
"BCSSync"=D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]
"V0770Mon.exe"=C:\Windows\V0770Mon.exe [2012-06-01 32884]
"Live! Central 3"=D:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe [2013-08-02 461312]
"V0790Mon.exe"=C:\Windows\V0790Mon.exe [2013-06-19 32884]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-03-18 224128]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Evernote.lnk - C:\Windows\Installer\{12FB6296-8840-11E3-86D7-00163E98E7D0}\Evernote.ico
Skype.lnk - D:\Program Files (x86)\Skype\Phone\Skype.exe
TeamViewer 9.lnk - D:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

C:\Users\miso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\miso\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2013-06-13 66328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-09 10:32:35 ----D---- C:\ProgramData\RogueKiller
2014-06-08 02:37:52 ----D---- C:\ProgramData\Malwarebytes
2014-06-07 17:29:29 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-06-07 13:41:50 ----D---- C:\AdwCleaner
2014-06-07 13:06:43 ----D---- C:\Users\miso\AppData\Roaming\vlc
2014-06-07 12:38:22 ----D---- C:\rsit
2014-06-05 23:12:36 ----D---- C:\ProgramData\BitRaider
2014-05-31 11:51:14 ----D---- C:\Program Files (x86)\Popcorn Time
2014-05-30 13:28:27 ----D---- C:\ProgramData\PopCap Games
2014-05-30 04:08:07 ----D---- C:\Program Files (x86)\ATI Technologies
2014-05-30 04:01:58 ----D---- C:\Users\miso\AppData\Roaming\ATI
2014-05-30 04:01:58 ----D---- C:\ProgramData\ATI
2014-05-30 03:58:46 ----D---- C:\ProgramData\AMD
2014-05-30 03:57:48 ----D---- C:\Program Files\ATI
2014-05-29 21:26:54 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2014-05-29 18:13:33 ----D---- C:\ProgramData\EA Core
2014-05-29 18:13:32 ----D---- C:\ProgramData\EA Logs
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-05-29 16:40:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-05-29 16:40:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-05-29 16:40:30 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-05-29 16:40:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-05-29 16:40:29 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-05-29 16:40:28 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-05-29 16:40:28 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-05-29 16:40:27 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-05-29 16:40:27 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-05-29 16:40:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-05-29 16:40:25 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-05-29 16:40:06 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-05-29 16:40:06 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-05-29 16:40:04 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-05-29 16:40:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-05-29 16:40:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-05-29 16:40:03 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-05-29 16:40:02 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-05-29 16:40:02 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-05-29 16:40:01 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-05-29 16:40:00 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-05-29 16:39:59 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-05-29 16:39:59 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-05-29 16:39:56 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-05-29 16:39:56 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-05-29 16:39:55 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-05-29 16:39:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-05-29 16:39:54 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-05-29 16:39:53 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-05-29 16:39:53 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-05-29 16:39:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-05-29 16:39:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-05-29 16:39:51 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-05-29 16:39:51 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-05-29 16:39:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-05-29 16:39:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-05-29 16:21:40 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-05-29 16:21:40 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-05-29 16:21:24 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-05-29 16:21:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-05-29 16:21:24 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-05-29 16:21:24 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-05-29 16:21:17 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-05-29 16:21:17 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-05-29 16:21:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-05-29 16:21:07 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-05-29 16:21:02 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-05-29 16:21:02 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-05-29 16:21:01 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-05-29 16:21:01 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-05-29 16:20:58 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-05-29 16:20:58 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-05-29 16:20:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-05-29 16:20:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-05-29 16:20:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-05-29 16:20:50 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-05-29 16:20:49 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-05-29 16:20:49 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-05-29 16:20:45 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-05-29 16:20:45 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-05-29 16:20:24 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-05-29 16:20:24 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-05-29 16:20:21 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-05-29 16:20:21 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-05-29 16:20:08 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-05-29 16:20:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-05-29 16:19:59 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-05-29 16:19:59 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-05-29 16:19:58 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-05-29 16:19:58 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-05-29 16:19:57 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-05-29 16:19:57 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-05-29 16:19:56 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-05-29 16:19:55 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-05-29 16:19:55 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-05-29 16:19:54 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-05-29 16:19:54 ----A---- C:\Windows\system32\xinput1_3.dll
2014-05-29 16:19:39 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-05-29 16:19:39 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-05-29 16:19:38 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-05-29 16:19:38 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-05-29 16:19:37 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-05-29 16:19:37 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-05-29 16:19:37 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-05-29 16:19:37 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-05-29 16:19:36 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-05-29 16:19:36 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-05-29 16:19:36 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-05-29 16:19:36 ----A---- C:\Windows\system32\d3dx10.dll
2014-05-29 16:19:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-05-29 16:19:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-05-29 16:19:34 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-05-29 16:19:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-05-29 16:19:34 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-05-29 16:19:34 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-05-29 16:19:33 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-05-29 16:19:33 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-05-29 16:19:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-05-29 16:19:31 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-05-29 16:19:31 ----A---- C:\Windows\system32\xinput1_2.dll
2014-05-29 16:19:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-05-29 16:19:30 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-05-29 16:19:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-05-29 16:19:30 ----A---- C:\Windows\system32\xinput1_1.dll
2014-05-29 16:19:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-05-29 16:19:25 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-05-29 16:19:25 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-05-29 16:18:36 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-05-29 16:18:34 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-05-29 16:18:34 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-05-29 16:18:33 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-05-29 16:18:33 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-05-29 16:18:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-05-29 16:18:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-05-29 16:18:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-05-29 16:18:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-05-29 16:18:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-05-29 16:18:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-05-29 16:18:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-05-29 16:18:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-05-29 15:34:04 ----D---- C:\Users\miso\AppData\Roaming\Origin
2014-05-29 15:20:25 ----D---- C:\ProgramData\Origin
2014-05-29 15:20:24 ----D---- C:\ProgramData\Electronic Arts
2014-05-24 20:09:23 ----D---- C:\Windows\SYSWOW64\1033
2014-05-24 20:09:23 ----D---- C:\Windows\system32\1033
2014-05-15 01:20:49 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 01:20:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-15 01:20:47 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 01:20:47 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 01:06:54 ----A---- C:\Windows\system32\shell32.dll
2014-05-15 01:06:53 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-15 01:06:52 ----A---- C:\Windows\system32\aepdu.dll
2014-05-15 01:06:44 ----A---- C:\Windows\system32\aeinv.dll
2014-05-15 01:06:04 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-15 01:06:04 ----A---- C:\Windows\system32\kerberos.dll
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-15 01:06:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-15 01:06:03 ----A---- C:\Windows\system32\winlogon.exe
2014-05-15 01:06:03 ----A---- C:\Windows\system32\objsel.dll
2014-05-15 01:06:03 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-15 01:06:03 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\wdigest.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\schannel.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-15 01:06:02 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-15 01:06:02 ----A---- C:\Windows\system32\adprovider.dll
2014-05-15 01:06:01 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-15 01:06:00 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\sspicli.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\secur32.dll
2014-05-15 01:06:00 ----A---- C:\Windows\system32\lsass.exe
2014-05-15 01:06:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-15 01:06:00 ----A---- C:\Windows\system32\credssp.dll
2014-05-15 00:58:04 ----D---- C:\Program Files (x86)\Google
2014-05-10 18:50:05 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2014-06-09 22:40:34 ----D---- C:\Windows\Prefetch
2014-06-09 22:40:33 ----D---- C:\Windows\Temp
2014-06-09 22:40:33 ----D---- C:\Program Files\trend micro
2014-06-09 22:39:22 ----D---- C:\Users\miso\AppData\Roaming\uTorrent
2014-06-09 22:37:52 ----D---- C:\Users\miso\AppData\Roaming\Skype
2014-06-09 22:22:01 ----D---- C:\Windows\system32\config
2014-06-09 22:21:37 ----SHD---- C:\System Volume Information
2014-06-09 10:36:36 ----D---- C:\Windows\System32
2014-06-09 10:36:36 ----D---- C:\Windows\inf
2014-06-09 10:36:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-09 10:32:35 ----HD---- C:\ProgramData
2014-06-09 10:28:45 ----D---- C:\Users\miso\AppData\Roaming\Dropbox
2014-06-09 10:28:37 ----D---- C:\Users\miso\AppData\Roaming\DropboxMaster
2014-06-09 10:28:28 ----D---- C:\Users\miso\AppData\Roaming\ViberPC
2014-06-09 10:28:12 ----D---- C:\Temp
2014-06-08 23:24:30 ----RD---- C:\Program Files (x86)
2014-06-08 23:24:30 ----D---- C:\Windows\system32\drivers
2014-06-07 18:39:39 ----D---- C:\Windows\system32\LogFiles
2014-06-07 17:29:34 ----D---- C:\Windows
2014-06-07 13:03:48 ----D---- C:\Windows\Tasks
2014-06-07 13:03:48 ----D---- C:\Windows\system32\Tasks
2014-06-07 13:03:47 ----SHD---- C:\Windows\Installer
2014-06-05 23:11:29 ----D---- C:\Program Files (x86)\Common Files
2014-06-05 01:37:48 ----D---- C:\Windows\system32\catroot2
2014-05-31 20:35:51 ----D---- C:\avast! sandbox
2014-05-31 18:01:41 ----D---- C:\ProgramData\Oracle
2014-05-31 18:01:28 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-31 18:01:27 ----A---- C:\Windows\system32\javaws.exe
2014-05-31 18:01:27 ----A---- C:\Windows\system32\javaw.exe
2014-05-31 18:01:27 ----A---- C:\Windows\system32\java.exe
2014-05-31 00:51:34 ----D---- C:\Users\miso\AppData\Roaming\FileZilla
2014-05-31 00:51:27 ----D---- C:\Windows\Logs
2014-05-31 00:48:44 ----D---- C:\Windows\SysWOW64
2014-05-31 00:45:00 ----D---- C:\Users\miso\AppData\Roaming\Dev-Cpp
2014-05-31 00:40:06 ----D---- C:\ProgramData\Microsoft Help
2014-05-31 00:40:05 ----RSD---- C:\Windows\assembly
2014-05-31 00:40:04 ----SD---- C:\ProgramData\Microsoft
2014-05-31 00:39:08 ----D---- C:\Windows\system32\DriverStore
2014-05-31 00:39:08 ----D---- C:\Windows\system32\catroot
2014-05-31 00:37:41 ----D---- C:\Windows\twain_32
2014-05-31 00:37:30 ----HD---- C:\GrandeDevice
2014-05-30 03:58:15 ----D---- C:\ProgramData\Package Cache
2014-05-30 03:57:48 ----RD---- C:\Program Files
2014-05-29 17:04:05 ----D---- C:\Windows\Microsoft.NET
2014-05-29 16:41:08 ----D---- C:\Windows\winsxs
2014-05-29 16:30:40 ----D---- C:\Program Files (x86)\MSBuild
2014-05-29 16:21:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-05-29 16:15:55 ----D---- C:\Program Files (x86)\Microsoft SDKs
2014-05-25 21:32:59 ----D---- C:\Windows\debug
2014-05-24 20:19:53 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-05-16 18:35:07 ----D---- C:\Windows\rescache
2014-05-15 14:56:07 ----SD---- C:\Windows\system32\CompatTel
2014-05-15 14:56:05 ----D---- C:\Windows\system32\en-US
2014-05-15 14:56:05 ----D---- C:\Windows\PolicyDefinitions
2014-05-15 01:20:34 ----D---- C:\Windows\system32\MRT
2014-05-15 01:19:39 ----A---- C:\Windows\system32\MRT.exe
2014-05-13 21:56:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-05-11 11:39:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-05-01 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-05-01 208416]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; SysWOW64\speedfan.sys []
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-16 381440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-04-02 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-05-01 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-05-12 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-05-12 423240]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2014-02-25 252704]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2014-02-25 126752]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.3;AODDriver4.3; \??\D:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2014-02-11 59616]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-05-01 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-05-01 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-05-12 85328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2011-09-05 178176]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2013-05-23 77592]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2013-05-23 13080]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2013-05-23 76568]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2013-05-23 59160]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 V0790Vid;Live! Cam Chat HD VF0790 Driver; C:\Windows\system32\DRIVERS\V0790Vid.sys [2013-07-09 380416]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2014-02-25 140576]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2014-02-25 154912]
R3 vpcbus;Virtual PC Host Bus Service; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;USB Virtualization Connector Service; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28ux.sys [2009-09-15 1061888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 V0770Vid;Live! Cam Sync HD VF0770 Driver; C:\Windows\system32\DRIVERS\V0770Vid.sys [2012-06-01 379776]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2014-02-25 113952]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUSB;Motorola Android USB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 AMD FUEL Service;AMD FUEL Service; D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2014-04-17 344064]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-05-01 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Motorola Device Manager;Motorola Device Manager Service; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2013-11-15 137528]
R2 Popcorn Time Updater;Popcorn Time Updater; C:\Program Files (x86)\Popcorn Time\PopcornTimeUpdater.exe [2014-05-22 210944]
R2 PST Service;PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2011-09-02 65657]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R2 TeamViewer9;TeamViewer 9; D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-25 5024576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; D:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-13 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-06-05 477960]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2013-06-13 357144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-02-16 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#12 Příspěvek od Márty84 »

:!: Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s
Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#13 Příspěvek od NeoFan »

zdravim,


dostavam error: Cannot create file: C:\....\Desktop\cmd.bat
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: prosim o kontrolu logu

#14 Příspěvek od Márty84 »

Obcas se to stane, ze OTL tuhle chybku vyhodi :roll:

Spustte ho podle stejneho navodu jeste jednou, ale s timto upravenym skriptem

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
NeoFan
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 105
Registrován: 01 kvě 2007 20:39
Kontaktovat uživatele:
Kontaktovat uživatele NeoFan

Re: prosim o kontrolu logu

#15 Příspěvek od NeoFan »

Bohuzial ziadna zmena.
Nahoru
Zamčeno

Zpět na „Sekce pouze pro Vzorné návštěvníky“