Preventivka - malware, ci spyware
Napsal: 24 úno 2015 15:03
Logfile of random's system information tool 1.10 (written by random/random)
Run by vandy at 2015-02-24 14:53:49
Microsoft Windows 7 Ultimate
System drive C: has 128 GB (42%) free of 302 GB
Total RAM: 3071 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:54:52, on 24.2.2015
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\LibreOffice 4\program\swriter.exe
C:\Program Files\LibreOffice 4\program\soffice.exe
C:\Program Files\LibreOffice 4\program\soffice.bin
C:\Program Files\AVG\AVG2015\avgcfgex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\vandy\Downloads\RSIT.exe
C:\Program Files\trend micro\vandy.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={C4656872- ... 2015-02-09 12:55:39&v=4.0.6.10&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download video on this page - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300
O8 - Extra context menu item: Download video this links to - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/301
O9 - Extra button: Download Video - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video on this page - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6170 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-19 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-19 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2015-02-10 3710416]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-18 271744]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27 558496]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2015-01-23 31087200]
"BitTorrent"=C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-02-10 1742936]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe"="C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe:*:Enabled:YouTube Video Downloader"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-02-24 14:53:52 ----D---- C:\Program Files\trend micro
2015-02-24 14:53:49 ----D---- C:\rsit
2015-02-24 14:44:54 ----D---- C:\Program Files\Wireshark
2015-02-23 18:50:01 ----D---- C:\zbrush-female-face
2015-02-23 15:30:08 ----D---- C:\Program Files\EPUB Converter Tool
2015-02-23 15:27:10 ----D---- C:\convertepub-to-pdf
2015-02-23 15:01:11 ----D---- C:\ebooks
2015-02-23 13:40:12 ----D---- C:\zbrushtuto
2015-02-22 17:50:30 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2015-02-22 17:48:51 ----D---- C:\Program Files\Adobe
2015-02-22 17:42:42 ----D---- C:\ProgramData\Package Cache
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files\Adobe
2015-02-22 17:33:54 ----D---- C:\Users\vandy\AppData\Roaming\Macromedia
2015-02-22 17:33:43 ----D---- C:\ProgramData\Adobe
2015-02-22 06:11:45 ----D---- C:\Program Files\Pixologic
2015-02-21 19:25:50 ----D---- C:\zbrush4r7
2015-02-21 16:20:09 ----AD---- C:\ProgramData\Reprise
2015-02-21 16:20:05 ----D---- C:\Users\vandy\AppData\Roaming\SketchUp
2015-02-21 16:14:31 ----D---- C:\ProgramData\SketchUp
2015-02-21 16:14:30 ----D---- C:\Program Files\SketchUp
2015-02-21 15:28:24 ----D---- C:\sketchup
2015-02-19 13:10:41 ----D---- C:\Program Files\glassfish-4.1
2015-02-19 12:55:37 ----D---- C:\Program Files\NetBeans 8.0.2
2015-02-19 12:43:01 ----D---- C:\ProgramData\Sun
2015-02-19 12:42:59 ----D---- C:\Program Files\Common Files\Java
2015-02-19 12:41:19 ----A---- C:\Windows\system32\javaws.exe
2015-02-19 12:40:53 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-02-19 12:40:53 ----A---- C:\Windows\system32\javaw.exe
2015-02-19 12:40:52 ----A---- C:\Windows\system32\java.exe
2015-02-19 12:37:30 ----D---- C:\Program Files\Java
2015-02-19 09:43:33 ----D---- C:\Users\vandy\AppData\Roaming\NVIDIA
2015-02-19 08:57:17 ----D---- C:\Program Files\MAXON
2015-02-19 08:55:26 ----D---- C:\Users\vandy\AppData\Roaming\MAXON
2015-02-17 15:10:03 ----D---- C:\Windows\log.system.cgp
2015-02-17 15:08:39 ----A---- C:\Windows\UC.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\RAR.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKUNZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\NOCLOSE.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\LHA.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\ARJ.PIF
2015-02-17 15:08:37 ----D---- C:\Users\vandy\AppData\Roaming\GHISLER
2015-02-17 15:08:37 ----D---- C:\totalcmd
2015-02-16 18:47:41 ----D---- C:\Program Files\Common Files\PX Storage Engine
2015-02-16 18:47:31 ----D---- C:\Users\vandy\AppData\Roaming\Winamp
2015-02-16 18:47:31 ----D---- C:\Program Files\Winamp
2015-02-16 11:54:55 ----D---- C:\Users\vandy\AppData\Roaming\Adobe
2015-02-16 11:54:32 ----D---- C:\Users\vandy\AppData\Roaming\oald8
2015-02-16 11:53:32 ----D---- C:\Windows\system32\Macromed
2015-02-16 11:52:58 ----D---- C:\Program Files\Oxford
2015-02-16 09:49:05 ----D---- C:\ProgramData\TamoSoft
2015-02-10 17:57:13 ----D---- C:\ProgramData\AVerTV 3D
2015-02-10 17:55:43 ----D---- C:\Windows\Driver Cache
2015-02-10 17:55:43 ----A---- C:\Windows\system32\drivers\AVerAF35.sys
2015-02-10 17:53:45 ----A---- C:\Windows\system32\CardID.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib22.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib21.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib12.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib11.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\pthreadVC.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib03.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib02.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib01.dll
2015-02-10 17:53:27 ----D---- C:\Program Files\Common Files\AVerMedia
2015-02-10 17:53:25 ----D---- C:\Program Files\AVerMedia
2015-02-10 16:45:44 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys
2015-02-10 15:29:47 ----D---- C:\Program Files\Drakensang Online
2015-02-10 15:21:33 ----D---- C:\Users\vandy\AppData\Roaming\Unity
2015-02-10 15:14:08 ----D---- C:\ProgramData\NVIDIA
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvvsvc.exe
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvshext.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvcr.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvc.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvmctray.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvcpl.dll
2015-02-10 15:12:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-02-10 15:03:49 ----D---- C:\NVIDIA
2015-02-10 14:54:22 ----D---- C:\Program Files\Microsoft.NET
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHost.exe
2015-02-10 14:53:25 ----A---- C:\Windows\system32\netfxperf.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\mscoree.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\dfshim.dll
2015-02-10 14:51:34 ----D---- C:\ProgramData\boost_interprocess
2015-02-10 14:51:33 ----D---- C:\ProgramData\NVIDIA Corporation
2015-02-10 14:51:31 ----A---- C:\Windows\system32\nvaudcap32v.dll
2015-02-10 14:51:31 ----A---- C:\Windows\system32\drivers\nvvad32v.sys
2015-02-10 14:51:14 ----D---- C:\Program Files\NVIDIA Corporation
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-02-10 14:45:26 ----HD---- C:\Windows\msdownld.tmp
2015-02-10 14:45:18 ----D---- C:\Windows\system32\directx
2015-02-10 12:58:42 ----D---- C:\Program Files\GoldWave
2015-02-10 12:19:28 ----D---- C:\Program Files\Tracker Software
2015-02-10 11:46:37 ----D---- C:\Program Files\Strogino CS Portal
2015-02-10 11:28:55 ----D---- C:\Users\vandy\AppData\Roaming\WinRAR
2015-02-10 11:27:30 ----D---- C:\Program Files\ReviverSoft
2015-02-10 11:27:21 ----D---- C:\Users\vandy\AppData\Roaming\OpenCandy
2015-02-10 11:27:05 ----D---- C:\ProgramData\APN
2015-02-10 11:26:44 ----D---- C:\Users\vandy\AppData\Roaming\BitTorrent
2015-02-10 10:49:30 ----D---- C:\Users\vandy\AppData\Roaming\Skype
2015-02-10 10:49:21 ----RD---- C:\Program Files\Skype
2015-02-10 10:49:21 ----D---- C:\Program Files\Common Files\Skype
2015-02-10 10:49:17 ----D---- C:\ProgramData\Skype
2015-02-09 20:49:07 ----D---- C:\Windows\SoftwareDistribution
2015-02-09 20:46:45 ----D---- C:\Windows\Prefetch
2015-02-09 20:45:27 ----ASH---- C:\hiberfil.sys
2015-02-09 20:44:40 ----D---- C:\Windows\Panther
2015-02-09 20:33:48 ----D---- C:\UNDEL
2015-02-09 19:32:11 ----D---- C:\Users\vandy\AppData\Roaming\LibreOffice
2015-02-09 19:31:49 ----D---- C:\Program Files\WinRAR
2015-02-09 19:27:39 ----D---- C:\Program Files\LibreOffice 4
2015-02-09 18:44:24 ----D---- C:\Users\vandy\AppData\Roaming\Tomabo
2015-02-09 16:05:22 ----D---- C:\Program Files\Tomabo
2015-02-09 15:35:45 ----D---- C:\Program Files\OpenTTD
2015-02-09 14:42:48 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-02-09 14:42:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\xactengine2_9.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-02-09 14:42:30 ----A---- C:\Windows\system32\xinput1_3.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-02-09 14:42:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx10.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\x3daudio1_1.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\d3dx9_31.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_2.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_1.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-02-09 14:42:24 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-02-09 14:42:12 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-02-09 14:42:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-02-09 14:27:40 ----HD---- C:\Program Files\InstallShield Installation Information
2015-02-09 12:56:04 ----D---- C:\ProgramData\AVG Security Toolbar
2015-02-09 12:54:47 ----D---- C:\Program Files\AVG Web TuneUp
2015-02-09 12:46:53 ----D---- C:\Users\vandy\AppData\Roaming\AVG2015
2015-02-09 12:45:16 ----D---- C:\Users\vandy\AppData\Roaming\TuneUp Software
2015-02-09 12:43:28 ----HD---- C:\$AVG
2015-02-09 12:43:28 ----D---- C:\ProgramData\AVG2015
2015-02-09 12:42:36 ----D---- C:\Program Files\AVG
2015-02-09 12:36:12 ----SHD---- C:\Windows\Installer
2015-02-09 12:35:40 ----HD---- C:\ProgramData\Common Files
2015-02-09 12:35:40 ----D---- C:\ProgramData\MFAData
2015-02-09 12:31:55 ----D---- C:\Program Files\Google
2015-02-09 12:29:00 ----D---- C:\Program Files\MagicISO
2015-02-09 12:28:06 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wups2.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wucltux.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuaueng.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuauclt.exe
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wups.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wudriver.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wuapi.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuwebv.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuapp.exe
2015-02-09 12:15:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-09 12:11:07 ----D---- C:\Users\vandy\AppData\Roaming\Identities
2015-02-09 12:10:41 ----SD---- C:\Users\vandy\AppData\Roaming\Microsoft
2015-02-09 12:10:41 ----D---- C:\Users\vandy\AppData\Roaming\Media Center Programs
2015-02-03 10:47:24 ----A---- C:\Windows\system32\drivers\avglogx.sys
======List of files/folders modified in the last 1 month======
2015-02-24 14:53:52 ----RD---- C:\Program Files
2015-02-24 14:47:31 ----D---- C:\Windows\Temp
2015-02-23 18:57:01 ----HD---- C:\ProgramData
2015-02-23 17:01:30 ----SHD---- C:\System Volume Information
2015-02-23 15:30:32 ----HD---- C:\Config.Msi
2015-02-22 17:43:23 ----D---- C:\Windows\System32
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files
2015-02-20 07:09:31 ----D---- C:\=== ARCHIV ===
2015-02-20 07:03:59 ----D---- C:\=== Windows 7 ===
2015-02-19 13:08:38 ----D---- C:\wamp
2015-02-19 09:12:36 ----D---- C:\Windows\system32\config
2015-02-19 09:01:59 ----D---- C:\Windows\winsxs
2015-02-18 13:13:45 ----D---- C:\Windows\system32\drivers
2015-02-17 15:10:19 ----AD---- C:\Windows
2015-02-16 22:20:27 ----D---- C:\Windows\system32\Tasks
2015-02-16 11:53:07 ----RSD---- C:\Windows\Fonts
2015-02-16 10:25:30 ----D---- C:\Windows\inf
2015-02-16 10:23:14 ----D---- C:\Windows\system32\catroot
2015-02-16 10:23:12 ----D---- C:\Windows\system32\DriverStore
2015-02-15 14:42:12 ----D---- C:\Windows\system32\NDF
2015-02-14 18:58:43 ----D---- C:\Windows\system32\drivers\etc
2015-02-14 16:34:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-02-13 17:48:38 ----SD---- C:\ProgramData\Microsoft
2015-02-13 09:16:44 ----D---- C:\Windows\system32\catroot2
2015-02-12 11:08:57 ----D---- C:\Windows\system32\wdi
2015-02-10 17:51:34 ----D---- C:\Program Files\Common Files\microsoft shared
2015-02-10 16:41:48 ----D---- C:\Windows\Microsoft.NET
2015-02-10 16:41:47 ----RSD---- C:\Windows\assembly
2015-02-10 15:14:02 ----RD---- C:\Users
2015-02-10 15:13:20 ----D---- C:\Windows\Help
2015-02-10 14:54:34 ----D---- C:\Windows\system32\en-US
2015-02-10 11:28:23 ----D---- C:\Windows\Tasks
2015-02-10 09:01:04 ----D---- C:\Windows\Logs
2015-02-09 21:07:15 ----D---- C:\Windows\debug
2015-02-09 20:55:20 ----D---- C:\Windows\system32\CodeIntegrity
2015-02-09 20:49:02 ----D---- C:\Windows\system32\sysprep
2015-02-09 20:46:39 ----D---- C:\Windows\CSC
2015-02-09 20:44:27 ----RASH---- C:\BOOTSECT.BAK
2015-02-09 20:44:25 ----SHD---- C:\Boot
2015-02-09 18:51:56 ----SHD---- C:\$Recycle.Bin
2015-02-09 17:59:00 ----D---- C:\Windows\rescache
2015-02-09 12:28:00 ----D---- C:\Windows\system32\LogFiles
2015-02-09 12:21:06 ----D---- C:\Windows\system32\restore
2015-02-09 12:15:11 ----D---- C:\Windows\system32\wbem
2015-02-09 12:09:10 ----SHD---- C:\Recovery
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-11-18 154904]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2015-02-03 265184]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2015-01-23 107488]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R0 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2005-11-14 34176]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2015-02-10 217568]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2015-01-16 210400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 AVerAF35;AVerMedia A835 USB DVB-T; C:\Windows\System32\Drivers\AVerAF35.sys [2013-06-05 769152]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad32v.sys [2014-11-22 32912]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2013-06-26 368640]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-10-31 167936]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2015-02-10 3411408]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2015-02-10 308720]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706128]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-30 662816]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Run by vandy at 2015-02-24 14:53:49
Microsoft Windows 7 Ultimate
System drive C: has 128 GB (42%) free of 302 GB
Total RAM: 3071 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:54:52, on 24.2.2015
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\LibreOffice 4\program\swriter.exe
C:\Program Files\LibreOffice 4\program\soffice.exe
C:\Program Files\LibreOffice 4\program\soffice.bin
C:\Program Files\AVG\AVG2015\avgcfgex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\vandy\Downloads\RSIT.exe
C:\Program Files\trend micro\vandy.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={C4656872- ... 2015-02-09 12:55:39&v=4.0.6.10&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download video on this page - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300
O8 - Extra context menu item: Download video this links to - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/301
O9 - Extra button: Download Video - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video on this page - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6170 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-19 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-19 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2015-02-10 3710416]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-18 271744]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27 558496]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2015-01-23 31087200]
"BitTorrent"=C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-02-10 1742936]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe"="C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe:*:Enabled:YouTube Video Downloader"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-02-24 14:53:52 ----D---- C:\Program Files\trend micro
2015-02-24 14:53:49 ----D---- C:\rsit
2015-02-24 14:44:54 ----D---- C:\Program Files\Wireshark
2015-02-23 18:50:01 ----D---- C:\zbrush-female-face
2015-02-23 15:30:08 ----D---- C:\Program Files\EPUB Converter Tool
2015-02-23 15:27:10 ----D---- C:\convertepub-to-pdf
2015-02-23 15:01:11 ----D---- C:\ebooks
2015-02-23 13:40:12 ----D---- C:\zbrushtuto
2015-02-22 17:50:30 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2015-02-22 17:48:51 ----D---- C:\Program Files\Adobe
2015-02-22 17:42:42 ----D---- C:\ProgramData\Package Cache
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files\Adobe
2015-02-22 17:33:54 ----D---- C:\Users\vandy\AppData\Roaming\Macromedia
2015-02-22 17:33:43 ----D---- C:\ProgramData\Adobe
2015-02-22 06:11:45 ----D---- C:\Program Files\Pixologic
2015-02-21 19:25:50 ----D---- C:\zbrush4r7
2015-02-21 16:20:09 ----AD---- C:\ProgramData\Reprise
2015-02-21 16:20:05 ----D---- C:\Users\vandy\AppData\Roaming\SketchUp
2015-02-21 16:14:31 ----D---- C:\ProgramData\SketchUp
2015-02-21 16:14:30 ----D---- C:\Program Files\SketchUp
2015-02-21 15:28:24 ----D---- C:\sketchup
2015-02-19 13:10:41 ----D---- C:\Program Files\glassfish-4.1
2015-02-19 12:55:37 ----D---- C:\Program Files\NetBeans 8.0.2
2015-02-19 12:43:01 ----D---- C:\ProgramData\Sun
2015-02-19 12:42:59 ----D---- C:\Program Files\Common Files\Java
2015-02-19 12:41:19 ----A---- C:\Windows\system32\javaws.exe
2015-02-19 12:40:53 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-02-19 12:40:53 ----A---- C:\Windows\system32\javaw.exe
2015-02-19 12:40:52 ----A---- C:\Windows\system32\java.exe
2015-02-19 12:37:30 ----D---- C:\Program Files\Java
2015-02-19 09:43:33 ----D---- C:\Users\vandy\AppData\Roaming\NVIDIA
2015-02-19 08:57:17 ----D---- C:\Program Files\MAXON
2015-02-19 08:55:26 ----D---- C:\Users\vandy\AppData\Roaming\MAXON
2015-02-17 15:10:03 ----D---- C:\Windows\log.system.cgp
2015-02-17 15:08:39 ----A---- C:\Windows\UC.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\RAR.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKUNZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\NOCLOSE.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\LHA.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\ARJ.PIF
2015-02-17 15:08:37 ----D---- C:\Users\vandy\AppData\Roaming\GHISLER
2015-02-17 15:08:37 ----D---- C:\totalcmd
2015-02-16 18:47:41 ----D---- C:\Program Files\Common Files\PX Storage Engine
2015-02-16 18:47:31 ----D---- C:\Users\vandy\AppData\Roaming\Winamp
2015-02-16 18:47:31 ----D---- C:\Program Files\Winamp
2015-02-16 11:54:55 ----D---- C:\Users\vandy\AppData\Roaming\Adobe
2015-02-16 11:54:32 ----D---- C:\Users\vandy\AppData\Roaming\oald8
2015-02-16 11:53:32 ----D---- C:\Windows\system32\Macromed
2015-02-16 11:52:58 ----D---- C:\Program Files\Oxford
2015-02-16 09:49:05 ----D---- C:\ProgramData\TamoSoft
2015-02-10 17:57:13 ----D---- C:\ProgramData\AVerTV 3D
2015-02-10 17:55:43 ----D---- C:\Windows\Driver Cache
2015-02-10 17:55:43 ----A---- C:\Windows\system32\drivers\AVerAF35.sys
2015-02-10 17:53:45 ----A---- C:\Windows\system32\CardID.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib22.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib21.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib12.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib11.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\pthreadVC.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib03.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib02.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib01.dll
2015-02-10 17:53:27 ----D---- C:\Program Files\Common Files\AVerMedia
2015-02-10 17:53:25 ----D---- C:\Program Files\AVerMedia
2015-02-10 16:45:44 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys
2015-02-10 15:29:47 ----D---- C:\Program Files\Drakensang Online
2015-02-10 15:21:33 ----D---- C:\Users\vandy\AppData\Roaming\Unity
2015-02-10 15:14:08 ----D---- C:\ProgramData\NVIDIA
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvvsvc.exe
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvshext.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvcr.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvc.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvmctray.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvcpl.dll
2015-02-10 15:12:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-02-10 15:03:49 ----D---- C:\NVIDIA
2015-02-10 14:54:22 ----D---- C:\Program Files\Microsoft.NET
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHost.exe
2015-02-10 14:53:25 ----A---- C:\Windows\system32\netfxperf.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\mscoree.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\dfshim.dll
2015-02-10 14:51:34 ----D---- C:\ProgramData\boost_interprocess
2015-02-10 14:51:33 ----D---- C:\ProgramData\NVIDIA Corporation
2015-02-10 14:51:31 ----A---- C:\Windows\system32\nvaudcap32v.dll
2015-02-10 14:51:31 ----A---- C:\Windows\system32\drivers\nvvad32v.sys
2015-02-10 14:51:14 ----D---- C:\Program Files\NVIDIA Corporation
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-02-10 14:45:26 ----HD---- C:\Windows\msdownld.tmp
2015-02-10 14:45:18 ----D---- C:\Windows\system32\directx
2015-02-10 12:58:42 ----D---- C:\Program Files\GoldWave
2015-02-10 12:19:28 ----D---- C:\Program Files\Tracker Software
2015-02-10 11:46:37 ----D---- C:\Program Files\Strogino CS Portal
2015-02-10 11:28:55 ----D---- C:\Users\vandy\AppData\Roaming\WinRAR
2015-02-10 11:27:30 ----D---- C:\Program Files\ReviverSoft
2015-02-10 11:27:21 ----D---- C:\Users\vandy\AppData\Roaming\OpenCandy
2015-02-10 11:27:05 ----D---- C:\ProgramData\APN
2015-02-10 11:26:44 ----D---- C:\Users\vandy\AppData\Roaming\BitTorrent
2015-02-10 10:49:30 ----D---- C:\Users\vandy\AppData\Roaming\Skype
2015-02-10 10:49:21 ----RD---- C:\Program Files\Skype
2015-02-10 10:49:21 ----D---- C:\Program Files\Common Files\Skype
2015-02-10 10:49:17 ----D---- C:\ProgramData\Skype
2015-02-09 20:49:07 ----D---- C:\Windows\SoftwareDistribution
2015-02-09 20:46:45 ----D---- C:\Windows\Prefetch
2015-02-09 20:45:27 ----ASH---- C:\hiberfil.sys
2015-02-09 20:44:40 ----D---- C:\Windows\Panther
2015-02-09 20:33:48 ----D---- C:\UNDEL
2015-02-09 19:32:11 ----D---- C:\Users\vandy\AppData\Roaming\LibreOffice
2015-02-09 19:31:49 ----D---- C:\Program Files\WinRAR
2015-02-09 19:27:39 ----D---- C:\Program Files\LibreOffice 4
2015-02-09 18:44:24 ----D---- C:\Users\vandy\AppData\Roaming\Tomabo
2015-02-09 16:05:22 ----D---- C:\Program Files\Tomabo
2015-02-09 15:35:45 ----D---- C:\Program Files\OpenTTD
2015-02-09 14:42:48 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-02-09 14:42:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\xactengine2_9.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-02-09 14:42:30 ----A---- C:\Windows\system32\xinput1_3.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-02-09 14:42:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx10.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\x3daudio1_1.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\d3dx9_31.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_2.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_1.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-02-09 14:42:24 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-02-09 14:42:12 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-02-09 14:42:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-02-09 14:27:40 ----HD---- C:\Program Files\InstallShield Installation Information
2015-02-09 12:56:04 ----D---- C:\ProgramData\AVG Security Toolbar
2015-02-09 12:54:47 ----D---- C:\Program Files\AVG Web TuneUp
2015-02-09 12:46:53 ----D---- C:\Users\vandy\AppData\Roaming\AVG2015
2015-02-09 12:45:16 ----D---- C:\Users\vandy\AppData\Roaming\TuneUp Software
2015-02-09 12:43:28 ----HD---- C:\$AVG
2015-02-09 12:43:28 ----D---- C:\ProgramData\AVG2015
2015-02-09 12:42:36 ----D---- C:\Program Files\AVG
2015-02-09 12:36:12 ----SHD---- C:\Windows\Installer
2015-02-09 12:35:40 ----HD---- C:\ProgramData\Common Files
2015-02-09 12:35:40 ----D---- C:\ProgramData\MFAData
2015-02-09 12:31:55 ----D---- C:\Program Files\Google
2015-02-09 12:29:00 ----D---- C:\Program Files\MagicISO
2015-02-09 12:28:06 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wups2.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wucltux.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuaueng.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuauclt.exe
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wups.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wudriver.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wuapi.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuwebv.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuapp.exe
2015-02-09 12:15:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-09 12:11:07 ----D---- C:\Users\vandy\AppData\Roaming\Identities
2015-02-09 12:10:41 ----SD---- C:\Users\vandy\AppData\Roaming\Microsoft
2015-02-09 12:10:41 ----D---- C:\Users\vandy\AppData\Roaming\Media Center Programs
2015-02-03 10:47:24 ----A---- C:\Windows\system32\drivers\avglogx.sys
======List of files/folders modified in the last 1 month======
2015-02-24 14:53:52 ----RD---- C:\Program Files
2015-02-24 14:47:31 ----D---- C:\Windows\Temp
2015-02-23 18:57:01 ----HD---- C:\ProgramData
2015-02-23 17:01:30 ----SHD---- C:\System Volume Information
2015-02-23 15:30:32 ----HD---- C:\Config.Msi
2015-02-22 17:43:23 ----D---- C:\Windows\System32
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files
2015-02-20 07:09:31 ----D---- C:\=== ARCHIV ===
2015-02-20 07:03:59 ----D---- C:\=== Windows 7 ===
2015-02-19 13:08:38 ----D---- C:\wamp
2015-02-19 09:12:36 ----D---- C:\Windows\system32\config
2015-02-19 09:01:59 ----D---- C:\Windows\winsxs
2015-02-18 13:13:45 ----D---- C:\Windows\system32\drivers
2015-02-17 15:10:19 ----AD---- C:\Windows
2015-02-16 22:20:27 ----D---- C:\Windows\system32\Tasks
2015-02-16 11:53:07 ----RSD---- C:\Windows\Fonts
2015-02-16 10:25:30 ----D---- C:\Windows\inf
2015-02-16 10:23:14 ----D---- C:\Windows\system32\catroot
2015-02-16 10:23:12 ----D---- C:\Windows\system32\DriverStore
2015-02-15 14:42:12 ----D---- C:\Windows\system32\NDF
2015-02-14 18:58:43 ----D---- C:\Windows\system32\drivers\etc
2015-02-14 16:34:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-02-13 17:48:38 ----SD---- C:\ProgramData\Microsoft
2015-02-13 09:16:44 ----D---- C:\Windows\system32\catroot2
2015-02-12 11:08:57 ----D---- C:\Windows\system32\wdi
2015-02-10 17:51:34 ----D---- C:\Program Files\Common Files\microsoft shared
2015-02-10 16:41:48 ----D---- C:\Windows\Microsoft.NET
2015-02-10 16:41:47 ----RSD---- C:\Windows\assembly
2015-02-10 15:14:02 ----RD---- C:\Users
2015-02-10 15:13:20 ----D---- C:\Windows\Help
2015-02-10 14:54:34 ----D---- C:\Windows\system32\en-US
2015-02-10 11:28:23 ----D---- C:\Windows\Tasks
2015-02-10 09:01:04 ----D---- C:\Windows\Logs
2015-02-09 21:07:15 ----D---- C:\Windows\debug
2015-02-09 20:55:20 ----D---- C:\Windows\system32\CodeIntegrity
2015-02-09 20:49:02 ----D---- C:\Windows\system32\sysprep
2015-02-09 20:46:39 ----D---- C:\Windows\CSC
2015-02-09 20:44:27 ----RASH---- C:\BOOTSECT.BAK
2015-02-09 20:44:25 ----SHD---- C:\Boot
2015-02-09 18:51:56 ----SHD---- C:\$Recycle.Bin
2015-02-09 17:59:00 ----D---- C:\Windows\rescache
2015-02-09 12:28:00 ----D---- C:\Windows\system32\LogFiles
2015-02-09 12:21:06 ----D---- C:\Windows\system32\restore
2015-02-09 12:15:11 ----D---- C:\Windows\system32\wbem
2015-02-09 12:09:10 ----SHD---- C:\Recovery
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-11-18 154904]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2015-02-03 265184]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2015-01-23 107488]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R0 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2005-11-14 34176]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2015-02-10 217568]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2015-01-16 210400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 AVerAF35;AVerMedia A835 USB DVB-T; C:\Windows\System32\Drivers\AVerAF35.sys [2013-06-05 769152]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad32v.sys [2014-11-22 32912]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2013-06-26 368640]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-10-31 167936]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2015-02-10 3411408]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2015-02-10 308720]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706128]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-30 662816]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------