Logfile of random's system information tool 1.10 (written by random/random)
Run by Vercik at 2014-09-09 19:52:25
Microsoft Windows 8.1 Pro
System drive C: has 378 GB (62%) free of 610 GB
Total RAM: 3978 MB (76% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:52:58, on 9. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe
C:\Program Files\trend micro\Vercik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll
O2 - BHO: PrivDogExtension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PrivDogService] "C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe"
O4 - HKLM\..\Run: [ComodoFSChrome] "C:\Program Files (x86)\AdTrustMedia\PrivDog\FinalizeSetup.exe" /c
O4 - HKCU\..\Run: [HP Deskjet 4620 series (NET)] "C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN28E210GM05TN:NW" -scfn "HP Deskjet 4620 series (NET)" -AutoStart 1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{06D7B2C1-27FF-4955-87BA-838460132E96}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{3029D95E-2530-4F75-B3E7-9F9781687C1C}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{06D7B2C1-27FF-4955-87BA-838460132E96}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\Windows\system32\AdminService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8277 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\AdminService.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\printfilterpipelinesvc.exe -Embedding
taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN28E210GM05TN:NW" -scfn "HP Deskjet 4620 series (NET)" -AutoStart 1
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe"
"C:\Program Files\HP\HP Deskjet 4620 series\Bin\HPNetworkCommunicator.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1856917958-631521434-1380265511-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1856917958-631521434-1380265511-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Users\Vercik\AppData\Local\Microsoft\Windows\INetCache\IE\BZEW8LTU\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 556 560 568 65536 564
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey C9156990-9868-D8D8-4654-C11E8D5FC3C5 -Reinvoke
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b939d1de-c850-44c6-9247-d3f6e97f18ee -SystemEventPortName:HostProcess-94eb9489-94ca-4cd5-9644-e4a5b3f5aab6 -IoCancelEventPortName:HostProcess-50f07e10-08ce-495a-8d3c-51faf7634a68 -NonStateChangingEventPortName:HostProcess-04dee555-600d-46eb-965c-08c21330caf5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7f5cf707-1e8b-4292-aec0-22f47ca29e4b -DeviceGroupId:WudfDefaultDevicePool
C:\Windows\System32\ThumbnailExtractionHost.exe -Embedding
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-07-27 218776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2014-07-27 2335960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll [2014-06-17 1093800]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21 153248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2014-07-27 1730256]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25 1253144]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll [2014-06-17 937128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25 1253144]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2013-12-21 391128]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-12-21 771544]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-12-21 770520]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Deskjet 4620 series (NET)"=C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
""= []
"PrivDogService"=C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe [2014-06-17 662184]
"ComodoFSChrome"=C:\Program Files (x86)\AdTrustMedia\PrivDog\FinalizeSetup.exe /c []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-12-21 624640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=28
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-09-09 19:52:25 ----D---- C:\rsit
2014-09-09 19:52:25 ----D---- C:\Program Files\trend micro
2014-09-08 23:48:14 ----A---- C:\Windows\system32\drivers\fvstore.dat
2014-09-08 22:50:21 ----SHD---- C:\Config.Msi
2014-08-28 15:52:40 ----A---- C:\Windows\system32\win32k.sys
2014-08-13 08:34:02 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-13 08:34:02 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-13 08:34:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-13 08:34:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-13 08:34:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-13 08:34:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-13 08:33:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-13 08:33:59 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-13 08:33:59 ----A---- C:\Windows\system32\urlmon.dll
2014-08-13 08:33:59 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-13 08:33:58 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-13 08:33:58 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-13 08:33:57 ----A---- C:\Windows\system32\iertutil.dll
2014-08-13 08:33:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-13 08:33:55 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-13 08:33:48 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-13 08:33:46 ----A---- C:\Windows\system32\ieframe.dll
2014-08-13 08:33:44 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-13 08:33:44 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-13 08:33:44 ----A---- C:\Windows\system32\jscript9.dll
2014-08-13 08:33:44 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-13 08:33:43 ----A---- C:\Windows\system32\mshtml.dll
2014-08-13 08:33:42 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-13 08:33:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-13 08:33:41 ----A---- C:\Windows\system32\wininet.dll
2014-08-13 08:33:41 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-13 08:33:41 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-13 08:33:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 08:33:39 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-13 08:33:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-13 08:33:39 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-13 08:33:38 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-13 08:33:38 ----A---- C:\Windows\system32\vbscript.dll
2014-08-13 08:33:15 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2014-08-13 08:33:15 ----A---- C:\Windows\system32\mfcore.dll
2014-08-13 08:33:14 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2014-08-13 08:33:14 ----A---- C:\Windows\system32\d3d9.dll
2014-08-13 08:33:09 ----A---- C:\Windows\system32\vpnike.dll
2014-08-13 08:33:09 ----A---- C:\Windows\system32\ntdll.dll
2014-08-13 08:33:09 ----A---- C:\Windows\system32\localspl.dll
2014-08-13 08:33:09 ----A---- C:\Windows\system32\fveapi.dll
2014-08-13 08:33:09 ----A---- C:\Windows\system32\dhcpcore.dll
2014-08-13 08:33:08 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-08-13 08:33:08 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2014-08-13 08:33:08 ----A---- C:\Windows\system32\actxprxy.dll
2014-08-13 08:33:07 ----A---- C:\Windows\SYSWOW64\SkyDriveShell.dll
2014-08-13 08:33:07 ----A---- C:\Windows\system32\SkyDriveShell.dll
2014-08-13 08:33:07 ----A---- C:\Windows\system32\framedynos.dll
2014-08-13 08:33:07 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-08-13 08:33:06 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-08-13 08:33:06 ----A---- C:\Windows\system32\bdesvc.dll
2014-08-13 08:33:05 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2014-08-13 08:33:05 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-08-13 08:33:05 ----A---- C:\Windows\system32\ncobjapi.dll
2014-08-13 08:33:05 ----A---- C:\Windows\system32\drivers\agilevpn.sys
2014-08-13 08:33:05 ----A---- C:\Windows\system32\BFE.DLL
2014-08-13 08:33:02 ----A---- C:\Windows\system32\framedyn.dll
2014-08-13 08:33:01 ----A---- C:\Windows\system32\winbici.dll
2014-08-13 08:33:00 ----A---- C:\Windows\SYSWOW64\ncobjapi.dll
2014-08-13 08:33:00 ----A---- C:\Windows\system32\drivers\vwifimp.sys
2014-08-13 08:32:59 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-08-13 08:32:59 ----A---- C:\Windows\system32\WebClnt.dll
2014-08-13 08:32:59 ----A---- C:\Windows\system32\Robocopy.exe
2014-08-13 08:32:59 ----A---- C:\Windows\system32\dhcpcsvc.dll
2014-08-13 08:32:55 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-08-13 08:32:55 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-08-13 08:32:55 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-08-13 08:32:55 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-08-13 08:32:54 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2014-08-13 08:32:54 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-08-13 08:32:54 ----A---- C:\Windows\SYSWOW64\dhcpcsvc.dll
2014-08-13 08:32:54 ----A---- C:\Windows\system32\fvecpl.dll
2014-08-13 08:32:54 ----A---- C:\Windows\system32\drivers\vwififlt.sys
2014-08-13 08:32:54 ----A---- C:\Windows\system32\BulkOperationHost.exe
2014-08-13 08:32:53 ----A---- C:\Windows\system32\reseteng.dll
2014-08-13 08:32:53 ----A---- C:\Windows\system32\fvewiz.dll
2014-08-13 08:32:53 ----A---- C:\Windows\system32\BdeHdCfgLib.dll
2014-08-13 08:32:53 ----A---- C:\Windows\system32\BdeHdCfg.exe
2014-08-13 08:32:52 ----A---- C:\Windows\SYSWOW64\d3d8thk.dll
2014-08-13 08:32:52 ----A---- C:\Windows\system32\srms.dat
2014-08-13 08:32:12 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-08-13 08:32:11 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-13 08:32:11 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-13 08:32:11 ----A---- C:\Windows\system32\dxgi.dll
2014-08-13 08:32:10 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-08-13 08:32:10 ----A---- C:\Windows\system32\dwmcore.dll
2014-08-13 08:32:10 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-13 08:32:05 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-13 08:32:04 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2014-08-13 08:32:03 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-08-13 08:31:57 ----AC---- C:\Windows\system32\drivers\usbport.sys
2014-08-13 08:31:57 ----AC---- C:\Windows\system32\drivers\usbhub.sys
2014-08-13 08:31:57 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2014-08-13 08:31:57 ----A---- C:\Windows\system32\rsaenh.dll
2014-08-13 08:31:57 ----A---- C:\Windows\system32\gpprefcl.dll
2014-08-13 08:31:57 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-08-13 08:31:56 ----AC---- C:\Windows\system32\drivers\USBHUB3.SYS
2014-08-13 08:31:56 ----A---- C:\Windows\SYSWOW64\rsaenh.dll
2014-08-13 08:31:56 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-08-13 08:31:56 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-08-13 08:31:56 ----A---- C:\Windows\system32\WUDFHost.exe
2014-08-13 08:31:56 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-08-13 08:31:55 ----AC---- C:\Windows\system32\drivers\usbuhci.sys
2014-08-13 08:31:55 ----AC---- C:\Windows\system32\drivers\usbehci.sys
2014-08-13 08:31:55 ----A---- C:\Windows\system32\DaOtpCredentialProvider.dll
2014-08-13 08:31:52 ----A---- C:\Windows\system32\hal.dll
2014-08-13 08:31:51 ----AC---- C:\Windows\system32\drivers\usbd.sys
2014-08-13 08:31:51 ----A---- C:\Windows\system32\cscui.dll
2014-08-13 08:31:50 ----A---- C:\Windows\SYSWOW64\DaOtpCredentialProvider.dll
2014-08-13 08:31:48 ----A---- C:\Windows\system32\authui.dll
2014-08-13 08:31:47 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-13 08:31:46 ----A---- C:\Windows\system32\msi.dll
2014-08-13 08:31:45 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-13 08:31:45 ----A---- C:\Windows\system32\msihnd.dll
2014-08-13 08:31:45 ----A---- C:\Windows\system32\consent.exe
2014-08-13 08:31:44 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-13 08:31:42 ----A---- C:\Windows\system32\MrmCoreR.dll
2014-08-13 08:31:41 ----A---- C:\Windows\system32\Wpc.dll
2014-08-13 08:31:40 ----A---- C:\Windows\system32\WpcMon.exe
2014-08-13 08:31:39 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-08-13 08:31:39 ----A---- C:\Windows\system32\WpcWebSync.dll
2014-08-13 08:31:33 ----A---- C:\Windows\system32\gdi32.dll
2014-08-13 08:31:31 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-13 08:31:29 ----A---- C:\Windows\system32\MDMAgent.exe
2014-08-13 08:31:28 ----A---- C:\Windows\system32\SyncEngine.dll
2014-08-13 08:31:27 ----A---- C:\Windows\system32\SkyDriveTelemetry.dll
2014-08-13 08:31:27 ----A---- C:\Windows\system32\SkyDrive.exe
======List of files/folders modified in the last 1 month======
2014-09-09 19:52:37 ----D---- C:\Windows\Prefetch
2014-09-09 19:52:25 ----RD---- C:\Program Files
2014-09-09 19:51:41 ----RD---- C:\Program Files (x86)
2014-09-09 19:51:41 ----D---- C:\Windows\Temp
2014-09-09 19:24:39 ----D---- C:\Windows\system32\logs
2014-09-09 19:23:41 ----D---- C:\Windows\AppReadiness
2014-09-09 19:22:40 ----RD---- C:\Users
2014-09-09 19:00:00 ----D---- C:\Windows\system32\sru
2014-09-09 18:42:07 ----RD---- C:\Windows\System32
2014-09-09 18:42:07 ----D---- C:\Windows\Inf
2014-09-09 18:42:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-09 18:15:50 ----D---- C:\Windows\system32\Tasks
2014-09-09 09:42:05 ----D---- C:\Windows\Microsoft.NET
2014-09-09 08:53:20 ----D---- C:\Users\Vercik\AppData\Roaming\uTorrent
2014-09-09 00:02:01 ----SD---- C:\Users\Vercik\AppData\Roaming\Microsoft
2014-09-08 23:48:14 ----D---- C:\Windows\system32\drivers
2014-09-08 23:33:47 ----HD---- C:\ProgramData
2014-09-08 23:33:46 ----D---- C:\Program Files\COMODO
2014-09-08 23:33:19 ----D---- C:\ProgramData\COMODO
2014-09-08 22:51:30 ----SHD---- C:\Windows\Installer
2014-09-08 22:51:10 ----D---- C:\Windows\SysWOW64
2014-09-08 21:25:25 ----D---- C:\Windows\system32\NDF
2014-09-06 09:35:01 ----SHD---- C:\System Volume Information
2014-09-03 08:23:22 ----D---- C:\Windows\system32\config
2014-09-01 10:26:58 ----HD---- C:\Program Files\WindowsApps
2014-09-01 04:59:03 ----D---- C:\Windows\WinSxS
2014-08-28 16:39:58 ----D---- C:\Windows\CbsTemp
2014-08-20 11:38:25 ----RD---- C:\Windows\assembly
2014-08-20 11:37:45 ----D---- C:\ProgramData\Microsoft Help
2014-08-20 09:01:22 ----D---- C:\Windows\system32\DriverStore
2014-08-16 13:07:24 ----D---- C:\Windows\rescache
2014-08-15 09:25:24 ----SHD---- C:\Boot
2014-08-15 09:21:07 ----D---- C:\Windows\SYSWOW64\wbem
2014-08-15 09:21:07 ----D---- C:\Windows\SYSWOW64\migration
2014-08-15 09:21:07 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-15 09:21:07 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-15 09:21:07 ----D---- C:\Windows\MediaViewer
2014-08-15 09:21:06 ----D---- C:\Windows\system32\wbem
2014-08-15 09:21:06 ----D---- C:\Windows\system32\en-US
2014-08-15 09:21:06 ----D---- C:\Windows\system32\cs-CZ
2014-08-15 09:21:04 ----D---- C:\Windows\Camera
2014-08-15 09:21:03 ----D---- C:\Windows\FileManager
2014-08-15 09:21:01 ----RD---- C:\Windows\ToastData
2014-08-15 09:21:01 ----D---- C:\Windows\system32\migration
2014-08-15 09:20:54 ----D---- C:\Program Files\Internet Explorer
2014-08-15 09:20:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-15 09:20:52 ----D---- C:\Windows\PolicyDefinitions
2014-08-13 09:30:57 ----D---- C:\Windows\system32\MRT
2014-08-13 09:27:41 ----A---- C:\Windows\system32\MRT.exe
2014-08-13 09:24:27 ----A---- C:\Windows\win.ini
2014-08-13 08:30:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-13 08:30:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-13 08:30:01 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 08:30:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-13 08:30:00 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-13 08:29:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-13 08:29:57 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-13 08:29:53 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-13 08:29:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-13 08:29:51 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-13 08:29:49 ----A---- C:\Windows\system32\iesetup.dll
2014-08-13 08:29:49 ----A---- C:\Windows\system32\iernonce.dll
2014-08-13 08:29:37 ----A---- C:\Windows\system32\msrating.dll
2014-08-13 08:29:33 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-13 08:27:59 ----D---- C:\Windows\system32\catroot2
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-03-13 157016]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-12-21 4216320]
R3 iwdbus;@oem7.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-12-15 27032]
R3 MEIx64;@oem8.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-18 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 RSPCIESTOR;@oem4.inf,%Rts5208%;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2012-03-29 342632]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Still Serial Digital Camera Driver; C:\Windows\system32\DRIVERS\serscan.sys [2013-08-22 11776]
R3 tap0901;@oem1.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
R3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;UMDF Reflector service for LocationProvider; C:\Windows\System32\drivers\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdMtp;WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 intaud_WaveExtensible;@oem6.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-12-15 39320]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 WDC_SAM;@oem9.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\Windows\System32\drivers\wdcsam64.sys [2008-05-06 14464]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AtherosSvc;AtherosSvc; C:\Windows\system32\AdminService.exe [2012-08-30 208384]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe [2012-01-25 240408]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe [2012-01-25 192792]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-01 116648]
S2 Service KMSELDI;Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [2013-11-26 800536]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-12-21 279000]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-01 116648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]
-----------------EOF-----------------
Přispějete na provoz fóra?