Pomalý start win 7, firefox nelze ukončit, špatná instalace
Napsal: 04 bře 2015 16:47
Dobrý den,
poslední dobou mi velice pomalu startuje počítač. Při poslední aktualizaci Firefoxu mi nešlo ukončit službu Firefox.exe ani přes správce úloh. Musel jsem downgradovat. Poslední dobou také instaluji různé trial verze videoeditačních programů. Nelze mi spustit zkušební verze programu DaVinci Resolve.
Zkoušel jsem Malwarebytes, Spybot search and destroy, CC cleaner. Zde log z RSIT.
Jakákoli pomoc vítána. Děkuji!
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ginkgo Biloba at 2015-03-04 16:35:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 42 GB (33%) free of 129 GB
Total RAM: 12287 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:35:18, on 4.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe
C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ginkgo Biloba.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RIM PeerManager] "C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKUS\S-1-5-21-1564805385-2134862589-1354525322-1224\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-1564805385-2134862589-1354525322-1224\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O4 - Global Startup: GV LicenseManager.lnk = C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
O4 - Global Startup: P2 Card Manager.lnk = C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: BlackBerry Device Manager - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service - Flexera Software LLC. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: p2csvc - Unknown owner - C:\Windows\system32\p2csvc.exe (file missing)
O23 - Service: p2csvc32 - Panasonic Corporation - C:\Windows\SysWOW64\p2csvc32.exe
O23 - Service: postgresql-x64-9.2 - PostgreSQL Server 9.2 (postgresql-x64-9.2) - PostgreSQL Global Development Group - C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RIM MDNS - Apple Inc. - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
O23 - Service: BlackBerry Link Communication Manager (RIM Tunnel Service) - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11129 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x310
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Windows\SysWOW64\bgsvcgen.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
taskeng.exe {C9FAA006-10F4-4E6A-A21F-82A60DA394AB}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\p2csvc.exe -service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c3974690-34c4-4df4-aa1a-fc4f0cbeef76 1
\??\C:\Windows\system32\conhost.exe "2060648651838572340498652590178434940789589310700048203-839249897-278262057
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "739361671-6719962561263402793-888722685-1905850126-1163985375-216089533-105297222
C:\Windows\SysWOW64\p2csvc32.exe -service
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe" runservice -N "postgresql-x64-9.2" -D "C:/Program Files/PostgreSQL/9.2/data" -w
"C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe"
"C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe" service
"C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe"
"C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3584.0.508508387\1829671926" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39,47 --gpu-vendor-id=0x10de --gpu-device-id=0x0e22 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4709 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A1_Stable_R1/PasswordGeneration/Disabled/QUIC/Control/RememberCertificateErrorDecisions/OneMonth/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="3584.3.1992518997\570564522" /prefetch:673131151
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" -D "C:/Program Files/PostgreSQL/9.2/data"
\??\C:\Windows\system32\conhost.exe "-17234860641564283083-854817368-20187898401071888846-858995521934610044-1706827017
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forklog" "1064" "1060"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1216" "-x4"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "136" "-x3"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1216" "-x5"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkavlauncher" "136"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkcol" "1216"
"C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
C:\Windows\System32\alg.exe
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
\??\C:\Windows\system32\conhost.exe "472573387-8930608871005053164154403571315008394482108680754-4802717011853307369
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A1_Stable_R1/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Control/RememberCertificateErrorDecisions/OneMonth/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="3584.6.1832228311\657580419" /prefetch:673131151
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Ginkgo Biloba\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
consent.exe 408 388 0000000003532290
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\Ginkgo Biloba\AppData\Roaming\Mozilla\Firefox\Profiles\o6y75f39.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0]
"Description"=BlackBerry Web Software Loading Helper Plug-In for Mozilla browsers
"Path"=C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-27 705448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-27 586968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"AutoKMS"=C:\Windows\AutoKMS.exe [2014-08-03 615936]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-02-13 60712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray]
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2013-03-29 2081792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-08-28 2252800]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"RIM PeerManager"=C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [2014-11-28 4857592]
"RIMBBLaunchAgent.exe"=C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2014-10-31 443640]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GV LicenseManager.lnk - C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
P2 Card Manager.lnk - C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.CDV5"=cdv5codc.dll
"vidc.CLLC"=cllccodc.dll
"vidc.CUVC"=cuvccodc.dll
"vidc.CDVC"=cdvccodc.dll
"vidc.CDVH"=cdvhcodc.dll
"vidc.CMIC"=cmiccodc.dll
"vidc.CHQX"=chqxcodc.dll
"vidc.C210"=c210codc.dll
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2015-03-04 16:26:52 ----D---- C:\Program Files\trend micro
2015-03-04 16:26:51 ----D---- C:\rsit
2015-03-04 14:46:39 ----D---- C:\ProgramData\Blackmagic Design
2015-03-04 14:42:21 ----D---- C:\Program Files\PostgreSQL
2015-03-02 18:26:12 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Avid
2015-03-02 00:40:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-01 23:39:08 ----A---- C:\ComboFix.txt
2015-03-01 23:30:05 ----SHD---- C:\$RECYCLE.BIN
2015-03-01 23:13:50 ----A---- C:\Windows\zip.exe
2015-03-01 23:13:50 ----A---- C:\Windows\SWSC.exe
2015-03-01 23:13:50 ----A---- C:\Windows\SWREG.exe
2015-03-01 23:13:50 ----A---- C:\Windows\sed.exe
2015-03-01 23:13:50 ----A---- C:\Windows\PEV.exe
2015-03-01 23:13:50 ----A---- C:\Windows\NIRCMD.exe
2015-03-01 23:13:50 ----A---- C:\Windows\MBR.exe
2015-03-01 23:13:50 ----A---- C:\Windows\grep.exe
2015-03-01 23:12:50 ----D---- C:\Qoobox
2015-03-01 23:12:25 ----D---- C:\Windows\erdnt
2015-03-01 22:28:02 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-03-01 22:28:02 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2015-03-01 21:59:52 ----D---- C:\Program Files\Common Files\VST3
2015-03-01 21:59:51 ----D---- C:\Program Files\Steinberg
2015-03-01 21:59:51 ----D---- C:\Program Files (x86)\Steinberg
2015-03-01 21:59:50 ----D---- C:\Program Files\Common Files\Avid
2015-03-01 21:59:49 ----D---- C:\Program Files (x86)\iZotope
2015-03-01 21:05:05 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\PACE Anti-Piracy
2015-03-01 21:05:05 ----D---- C:\ProgramData\PACE Anti-Piracy
2015-03-01 21:03:20 ----D---- C:\ProgramData\Pinnacle
2015-03-01 20:58:35 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\FLEXnet
2015-03-01 20:58:35 ----D---- C:\ProgramData\InstallShield
2015-03-01 20:55:31 ----D---- C:\ProgramData\PACE
2015-03-01 20:48:34 ----D---- C:\Program Files\Avid
2015-03-01 20:46:48 ----D---- C:\ProgramData\Avid
2015-03-01 20:45:12 ----D---- C:\ProgramData\SafeNet Sentinel
2015-02-28 09:42:30 ----A---- C:\Windows\system32\drivers\TrufosAlt.sys
2015-02-27 17:08:31 ----D---- C:\Program Files (x86)\Avid
2015-02-26 22:38:22 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-02-26 22:38:13 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-02-26 22:26:44 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Red Giant
2015-02-26 22:26:33 ----D---- C:\ProgramData\Red Giant
2015-02-26 22:26:33 ----D---- C:\Program Files (x86)\Red Giant Link
2015-02-26 22:25:39 ----D---- C:\Program Files (x86)\Red Giant
2015-02-26 21:46:33 ----D---- C:\ProgramData\Sony
2015-02-26 21:46:01 ----D---- C:\Program Files\Red Giant
2015-02-26 21:45:56 ----D---- C:\ProgramData\RedGiant
2015-02-25 17:54:46 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-02-25 16:36:57 ----D---- C:\Program Files\iPod
2015-02-25 16:36:57 ----D---- C:\Program Files (x86)\iTunes
2015-02-25 16:36:56 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-25 16:36:56 ----D---- C:\Program Files\iTunes
2015-02-22 00:51:14 ----D---- C:\Program Files (x86)\BlackBerry
2015-02-22 00:48:31 ----D---- C:\ProgramData\Package Cache
2015-02-21 15:45:38 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion
2015-02-12 16:15:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-12 16:15:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-12 16:15:58 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-12 16:15:58 ----A---- C:\Windows\system32\jscript9.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\generaltel.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\appraiser.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\aeinv.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\invagent.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\devinv.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aitstatic.exe
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aepic.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aepdu.dll
2015-02-11 18:40:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-11 18:40:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-11 18:40:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-11 18:40:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\iernonce.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-11 18:40:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-11 18:40:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-11 18:40:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 18:40:22 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 18:40:22 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-11 18:40:21 ----A---- C:\Windows\system32\iesetup.dll
2015-02-11 18:40:21 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-11 18:40:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-11 18:40:20 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-11 18:40:20 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 18:40:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-11 18:40:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-11 18:40:19 ----A---- C:\Windows\system32\ieui.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\ieframe.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\msrating.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-11 18:40:16 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\wintrust.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\cryptsvc.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\crypt32.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-11 18:13:16 ----A---- C:\Windows\system32\schannel.dll
2015-02-11 18:13:15 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-11 18:13:15 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\wdigest.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\kerberos.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\credssp.dll
2015-02-11 18:10:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 18:10:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-11 18:09:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 18:09:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-11 18:09:54 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\sspicli.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\secur32.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\msobjs.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\lsass.exe
2015-02-11 18:09:54 ----A---- C:\Windows\system32\auditpol.exe
2015-02-11 18:09:35 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-11 18:09:35 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-11 18:09:29 ----A---- C:\Windows\system32\mstscax.dll
2015-02-11 18:09:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-02-11 18:09:27 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-02-11 18:09:06 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 18:09:06 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 18:08:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 18:08:46 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-11 18:08:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-11 18:08:44 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\srcore.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\srclient.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\rstrui.exe
2015-02-11 18:08:29 ----A---- C:\Windows\system32\win32k.sys
2015-02-10 22:25:51 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\wdi.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\powertracker.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\perftrack.dll
======List of files/folders modified in the last 1 month======
2015-03-04 16:32:46 ----D---- C:\ProgramData\NVIDIA
2015-03-04 16:32:20 ----D---- C:\Windows\Temp
2015-03-04 16:31:38 ----D---- C:\Windows\system32\catroot
2015-03-04 16:26:52 ----D---- C:\Program Files
2015-03-04 16:24:09 ----SHD---- C:\Windows\Installer
2015-03-04 16:24:09 ----D---- C:\MATS
2015-03-04 16:24:09 ----D---- C:\Config.Msi
2015-03-04 16:23:58 ----D---- C:\Windows\system32\DriverStore
2015-03-04 16:23:58 ----D---- C:\Windows\inf
2015-03-04 16:23:51 ----D---- C:\Windows\system32\config
2015-03-04 16:23:51 ----D---- C:\Program Files (x86)
2015-03-04 16:23:20 ----D---- C:\Windows\SysWOW64
2015-03-04 16:22:05 ----RSD---- C:\Windows\Fonts
2015-03-04 16:14:33 ----SHD---- C:\System Volume Information
2015-03-04 16:07:06 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-03-04 16:06:58 ----D---- C:\Windows\system32\drivers
2015-03-04 16:06:58 ----D---- C:\Program Files (x86)\Common Files
2015-03-04 16:00:44 ----D---- C:\Program Files (x86)\Google
2015-03-04 14:47:20 ----D---- C:\Windows
2015-03-04 14:46:39 ----D---- C:\ProgramData
2015-03-04 14:44:04 ----RD---- C:\Users
2015-03-04 12:36:05 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\vlc
2015-03-04 11:58:38 ----D---- C:\Windows\Prefetch
2015-03-03 14:48:21 ----D---- C:\Windows\System32
2015-03-03 14:48:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-03 14:47:15 ----D---- C:\Unreal Commander
2015-03-02 17:21:55 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\uTorrent
2015-03-02 17:07:25 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\NVIDIA
2015-03-02 10:26:57 ----D---- C:\Windows\Microsoft.NET
2015-03-02 10:18:37 ----RSD---- C:\Windows\assembly
2015-03-02 08:56:06 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-01 23:41:24 ----ASD---- C:\ProgramData\Microsoft
2015-03-01 23:29:43 ----A---- C:\Windows\system.ini
2015-03-01 23:29:35 ----D---- C:\Windows\system32\drivers\etc
2015-03-01 23:24:37 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-03-01 23:17:43 ----D---- C:\Windows\SYSWOW64\drivers
2015-03-01 23:17:43 ----D---- C:\Windows\AppPatch
2015-03-01 21:59:52 ----D---- C:\Program Files\Common Files
2015-03-01 21:15:10 ----D---- C:\Windows\winsxs
2015-03-01 21:15:03 ----D---- C:\Windows\system32\catroot2
2015-02-26 22:26:47 ----D---- C:\Windows\system32\Tasks
2015-02-25 16:36:56 ----D---- C:\Program Files\Common Files\Apple
2015-02-22 09:48:30 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Skype
2015-02-21 15:45:50 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\XCPCSync.OEM
2015-02-21 15:44:44 ----D---- C:\Program Files (x86)\Research In Motion
2015-02-14 12:28:19 ----D---- C:\Windows\rescache
2015-02-12 23:31:57 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-12 23:31:57 ----D---- C:\Windows\system32\en-US
2015-02-12 12:46:15 ----SD---- C:\Windows\system32\CompatTel
2015-02-12 12:46:15 ----D---- C:\Windows\system32\appraiser
2015-02-12 12:46:14 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-12 12:46:14 ----D---- C:\Windows\system32\cs-CZ
2015-02-12 12:46:14 ----D---- C:\Program Files\Internet Explorer
2015-02-12 12:46:12 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-12 03:00:45 ----D---- C:\Windows\system32\MRT
2015-02-12 02:55:58 ----A---- C:\Windows\system32\MRT.exe
2015-02-11 17:57:17 ----D---- C:\Windows\tracing
2015-02-09 00:51:14 ----D---- C:\Windows\Tasks
2015-02-09 00:45:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-27 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-27 267632]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2010-09-01 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-27 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-27 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-27 436624]
R1 cdrblock;cdrblock; C:\Windows\system32\DRIVERS\cdrblock.sys [2012-10-11 37704]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-27 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-27 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-27 116728]
R2 Sentinel64;Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [2009-09-17 145448]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-10-03 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 rimvndis;BlackBerry Virtual Private Network; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [2014-05-07 17920]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-08-17 1235968]
S1 cdrbsdrv;cdrbsdrv; C:\Windows\system32\drivers\cdrbsdrv.sys []
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 AVCSTRM;AVC Streaming Filter Driver; C:\Windows\system32\DRIVERS\avcstrm.sys [2009-07-14 17664]
S3 blackberryncm;BlackBerryNCM Service; C:\Windows\system32\DRIVERS\blackberryncm6_AMD64.sys [2014-09-08 25088]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2013-03-07 13896]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2013-03-07 9160]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys []
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\SysWOW64\FsUsbExDisk.SYS [2013-04-18 37344]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys []
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys []
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys []
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 MSTAPE;Microsoft AV/C Tape Subunit Device; C:\Windows\system32\DRIVERS\mstape.sys [2009-07-14 56448]
S3 p2usb;Panasonic P2 Series USB Device; C:\Windows\system32\DRIVERS\p2usb.sys [2010-06-01 28672]
S3 pwdrvio;pwdrvio; C:\Windows\system32\drivers\pwdrvio.sys []
S3 pwdspio;pwdspio; C:\Windows\system32\drivers\pwdspio.sys []
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2014-05-06 79872]
S3 TrufosAlt;TrufosAlt; C:\Windows\system32\DRIVERS\TrufosAlt.sys [2015-02-28 390776]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbrndis6;Adaptér USB RNDIS6; C:\Windows\system32\DRIVERS\usb80236.sys [2013-02-12 19968]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2011-02-16 14464]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-27 50344]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\SysWOW64\bgsvcgen.exe [2013-12-06 118784]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-13 935240]
R2 p2csvc;p2csvc; C:\Windows\system32\p2csvc.exe [2008-07-25 67072]
R2 p2csvc32;p2csvc32; C:\Windows\SysWOW64\p2csvc32.exe [2008-07-25 61440]
R2 postgresql-x64-9.2;postgresql-x64-9.2 - PostgreSQL Server 9.2; C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N postgresql-x64-9.2 -D C:/Program Files/PostgreSQL/9.2/data -w []
R2 RIM MDNS;RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [2014-05-07 389632]
R2 RIM Tunnel Service;BlackBerry Link Communication Manager; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [2014-11-28 1348344]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-13 410768]
R3 BlackBerry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2014-10-31 588024]
R3 FlexNet Licensing Service;FlexNet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-11-21 1045840]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-20 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-09 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-11-26 1038088]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-20 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-01-12 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-01-23 834752]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-23 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------
poslední dobou mi velice pomalu startuje počítač. Při poslední aktualizaci Firefoxu mi nešlo ukončit službu Firefox.exe ani přes správce úloh. Musel jsem downgradovat. Poslední dobou také instaluji různé trial verze videoeditačních programů. Nelze mi spustit zkušební verze programu DaVinci Resolve.
Zkoušel jsem Malwarebytes, Spybot search and destroy, CC cleaner. Zde log z RSIT.
Jakákoli pomoc vítána. Děkuji!
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ginkgo Biloba at 2015-03-04 16:35:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 42 GB (33%) free of 129 GB
Total RAM: 12287 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:35:18, on 4.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe
C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ginkgo Biloba.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RIM PeerManager] "C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKUS\S-1-5-21-1564805385-2134862589-1354525322-1224\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-1564805385-2134862589-1354525322-1224\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O4 - Global Startup: GV LicenseManager.lnk = C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
O4 - Global Startup: P2 Card Manager.lnk = C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: BlackBerry Device Manager - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service - Flexera Software LLC. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: p2csvc - Unknown owner - C:\Windows\system32\p2csvc.exe (file missing)
O23 - Service: p2csvc32 - Panasonic Corporation - C:\Windows\SysWOW64\p2csvc32.exe
O23 - Service: postgresql-x64-9.2 - PostgreSQL Server 9.2 (postgresql-x64-9.2) - PostgreSQL Global Development Group - C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RIM MDNS - Apple Inc. - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
O23 - Service: BlackBerry Link Communication Manager (RIM Tunnel Service) - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11129 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x310
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Windows\SysWOW64\bgsvcgen.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
taskeng.exe {C9FAA006-10F4-4E6A-A21F-82A60DA394AB}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\p2csvc.exe -service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c3974690-34c4-4df4-aa1a-fc4f0cbeef76 1
\??\C:\Windows\system32\conhost.exe "2060648651838572340498652590178434940789589310700048203-839249897-278262057
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "739361671-6719962561263402793-888722685-1905850126-1163985375-216089533-105297222
C:\Windows\SysWOW64\p2csvc32.exe -service
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe" runservice -N "postgresql-x64-9.2" -D "C:/Program Files/PostgreSQL/9.2/data" -w
"C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe"
"C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe" service
"C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe"
"C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3584.0.508508387\1829671926" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39,47 --gpu-vendor-id=0x10de --gpu-device-id=0x0e22 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4709 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A1_Stable_R1/PasswordGeneration/Disabled/QUIC/Control/RememberCertificateErrorDecisions/OneMonth/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="3584.3.1992518997\570564522" /prefetch:673131151
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" -D "C:/Program Files/PostgreSQL/9.2/data"
\??\C:\Windows\system32\conhost.exe "-17234860641564283083-854817368-20187898401071888846-858995521934610044-1706827017
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forklog" "1064" "1060"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1216" "-x4"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "136" "-x3"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1216" "-x5"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkavlauncher" "136"
"C:/Program Files/PostgreSQL/9.2/bin/postgres.exe" "--forkcol" "1216"
"C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
C:\Windows\System32\alg.exe
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
\??\C:\Windows\system32\conhost.exe "472573387-8930608871005053164154403571315008394482108680754-4802717011853307369
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A1_Stable_R1/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Control/RememberCertificateErrorDecisions/OneMonth/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_94/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="3584.6.1832228311\657580419" /prefetch:673131151
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Ginkgo Biloba\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
consent.exe 408 388 0000000003532290
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\Ginkgo Biloba\AppData\Roaming\Mozilla\Firefox\Profiles\o6y75f39.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0]
"Description"=BlackBerry Web Software Loading Helper Plug-In for Mozilla browsers
"Path"=C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-27 705448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-27 586968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"AutoKMS"=C:\Windows\AutoKMS.exe [2014-08-03 615936]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-02-13 60712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray]
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2013-03-29 2081792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-08-28 2252800]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"RIM PeerManager"=C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [2014-11-28 4857592]
"RIMBBLaunchAgent.exe"=C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2014-10-31 443640]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GV LicenseManager.lnk - C:\Program Files (x86)\Grass Valley\GV LicenseManager\AppMaintainer.exe
P2 Card Manager.lnk - C:\Program Files\Panasonic P2\Drivers\App\P2TaskTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.CDV5"=cdv5codc.dll
"vidc.CLLC"=cllccodc.dll
"vidc.CUVC"=cuvccodc.dll
"vidc.CDVC"=cdvccodc.dll
"vidc.CDVH"=cdvhcodc.dll
"vidc.CMIC"=cmiccodc.dll
"vidc.CHQX"=chqxcodc.dll
"vidc.C210"=c210codc.dll
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2015-03-04 16:26:52 ----D---- C:\Program Files\trend micro
2015-03-04 16:26:51 ----D---- C:\rsit
2015-03-04 14:46:39 ----D---- C:\ProgramData\Blackmagic Design
2015-03-04 14:42:21 ----D---- C:\Program Files\PostgreSQL
2015-03-02 18:26:12 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Avid
2015-03-02 00:40:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-01 23:39:08 ----A---- C:\ComboFix.txt
2015-03-01 23:30:05 ----SHD---- C:\$RECYCLE.BIN
2015-03-01 23:13:50 ----A---- C:\Windows\zip.exe
2015-03-01 23:13:50 ----A---- C:\Windows\SWSC.exe
2015-03-01 23:13:50 ----A---- C:\Windows\SWREG.exe
2015-03-01 23:13:50 ----A---- C:\Windows\sed.exe
2015-03-01 23:13:50 ----A---- C:\Windows\PEV.exe
2015-03-01 23:13:50 ----A---- C:\Windows\NIRCMD.exe
2015-03-01 23:13:50 ----A---- C:\Windows\MBR.exe
2015-03-01 23:13:50 ----A---- C:\Windows\grep.exe
2015-03-01 23:12:50 ----D---- C:\Qoobox
2015-03-01 23:12:25 ----D---- C:\Windows\erdnt
2015-03-01 22:28:02 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-03-01 22:28:02 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2015-03-01 21:59:52 ----D---- C:\Program Files\Common Files\VST3
2015-03-01 21:59:51 ----D---- C:\Program Files\Steinberg
2015-03-01 21:59:51 ----D---- C:\Program Files (x86)\Steinberg
2015-03-01 21:59:50 ----D---- C:\Program Files\Common Files\Avid
2015-03-01 21:59:49 ----D---- C:\Program Files (x86)\iZotope
2015-03-01 21:05:05 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\PACE Anti-Piracy
2015-03-01 21:05:05 ----D---- C:\ProgramData\PACE Anti-Piracy
2015-03-01 21:03:20 ----D---- C:\ProgramData\Pinnacle
2015-03-01 20:58:35 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\FLEXnet
2015-03-01 20:58:35 ----D---- C:\ProgramData\InstallShield
2015-03-01 20:55:31 ----D---- C:\ProgramData\PACE
2015-03-01 20:48:34 ----D---- C:\Program Files\Avid
2015-03-01 20:46:48 ----D---- C:\ProgramData\Avid
2015-03-01 20:45:12 ----D---- C:\ProgramData\SafeNet Sentinel
2015-02-28 09:42:30 ----A---- C:\Windows\system32\drivers\TrufosAlt.sys
2015-02-27 17:08:31 ----D---- C:\Program Files (x86)\Avid
2015-02-26 22:38:22 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-02-26 22:38:13 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-02-26 22:38:13 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-02-26 22:26:44 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Red Giant
2015-02-26 22:26:33 ----D---- C:\ProgramData\Red Giant
2015-02-26 22:26:33 ----D---- C:\Program Files (x86)\Red Giant Link
2015-02-26 22:25:39 ----D---- C:\Program Files (x86)\Red Giant
2015-02-26 21:46:33 ----D---- C:\ProgramData\Sony
2015-02-26 21:46:01 ----D---- C:\Program Files\Red Giant
2015-02-26 21:45:56 ----D---- C:\ProgramData\RedGiant
2015-02-25 17:54:46 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-02-25 16:36:57 ----D---- C:\Program Files\iPod
2015-02-25 16:36:57 ----D---- C:\Program Files (x86)\iTunes
2015-02-25 16:36:56 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-25 16:36:56 ----D---- C:\Program Files\iTunes
2015-02-22 00:51:14 ----D---- C:\Program Files (x86)\BlackBerry
2015-02-22 00:48:31 ----D---- C:\ProgramData\Package Cache
2015-02-21 15:45:38 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Research In Motion
2015-02-12 16:15:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-12 16:15:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-12 16:15:58 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-12 16:15:58 ----A---- C:\Windows\system32\jscript9.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\generaltel.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\appraiser.dll
2015-02-11 18:40:31 ----A---- C:\Windows\system32\aeinv.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\invagent.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\devinv.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aitstatic.exe
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aepic.dll
2015-02-11 18:40:30 ----A---- C:\Windows\system32\aepdu.dll
2015-02-11 18:40:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-11 18:40:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-11 18:40:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-11 18:40:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-11 18:40:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\iernonce.dll
2015-02-11 18:40:25 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-11 18:40:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-11 18:40:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-11 18:40:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 18:40:23 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-11 18:40:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-11 18:40:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 18:40:22 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 18:40:22 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-11 18:40:21 ----A---- C:\Windows\system32\iesetup.dll
2015-02-11 18:40:21 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-11 18:40:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-11 18:40:20 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-11 18:40:20 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 18:40:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-11 18:40:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-11 18:40:19 ----A---- C:\Windows\system32\ieui.dll
2015-02-11 18:40:19 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 18:40:18 ----A---- C:\Windows\system32\ieframe.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\msrating.dll
2015-02-11 18:40:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-11 18:40:16 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\wintrust.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\cryptsvc.dll
2015-02-11 18:14:12 ----A---- C:\Windows\system32\crypt32.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-02-11 18:14:11 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-11 18:13:16 ----A---- C:\Windows\system32\schannel.dll
2015-02-11 18:13:15 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-11 18:13:15 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-11 18:13:14 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\wdigest.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\kerberos.dll
2015-02-11 18:13:14 ----A---- C:\Windows\system32\credssp.dll
2015-02-11 18:10:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 18:10:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-11 18:09:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 18:09:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 18:09:55 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 18:09:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-11 18:09:54 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\sspicli.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\secur32.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\msobjs.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 18:09:54 ----A---- C:\Windows\system32\lsass.exe
2015-02-11 18:09:54 ----A---- C:\Windows\system32\auditpol.exe
2015-02-11 18:09:35 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-11 18:09:35 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-11 18:09:29 ----A---- C:\Windows\system32\mstscax.dll
2015-02-11 18:09:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-02-11 18:09:27 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-02-11 18:09:06 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 18:09:06 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 18:08:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 18:08:46 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-11 18:08:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-11 18:08:44 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\srcore.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\srclient.dll
2015-02-11 18:08:44 ----A---- C:\Windows\system32\rstrui.exe
2015-02-11 18:08:29 ----A---- C:\Windows\system32\win32k.sys
2015-02-10 22:25:51 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\wdi.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\powertracker.dll
2015-02-10 22:25:51 ----A---- C:\Windows\system32\perftrack.dll
======List of files/folders modified in the last 1 month======
2015-03-04 16:32:46 ----D---- C:\ProgramData\NVIDIA
2015-03-04 16:32:20 ----D---- C:\Windows\Temp
2015-03-04 16:31:38 ----D---- C:\Windows\system32\catroot
2015-03-04 16:26:52 ----D---- C:\Program Files
2015-03-04 16:24:09 ----SHD---- C:\Windows\Installer
2015-03-04 16:24:09 ----D---- C:\MATS
2015-03-04 16:24:09 ----D---- C:\Config.Msi
2015-03-04 16:23:58 ----D---- C:\Windows\system32\DriverStore
2015-03-04 16:23:58 ----D---- C:\Windows\inf
2015-03-04 16:23:51 ----D---- C:\Windows\system32\config
2015-03-04 16:23:51 ----D---- C:\Program Files (x86)
2015-03-04 16:23:20 ----D---- C:\Windows\SysWOW64
2015-03-04 16:22:05 ----RSD---- C:\Windows\Fonts
2015-03-04 16:14:33 ----SHD---- C:\System Volume Information
2015-03-04 16:07:06 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-03-04 16:06:58 ----D---- C:\Windows\system32\drivers
2015-03-04 16:06:58 ----D---- C:\Program Files (x86)\Common Files
2015-03-04 16:00:44 ----D---- C:\Program Files (x86)\Google
2015-03-04 14:47:20 ----D---- C:\Windows
2015-03-04 14:46:39 ----D---- C:\ProgramData
2015-03-04 14:44:04 ----RD---- C:\Users
2015-03-04 12:36:05 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\vlc
2015-03-04 11:58:38 ----D---- C:\Windows\Prefetch
2015-03-03 14:48:21 ----D---- C:\Windows\System32
2015-03-03 14:48:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-03 14:47:15 ----D---- C:\Unreal Commander
2015-03-02 17:21:55 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\uTorrent
2015-03-02 17:07:25 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\NVIDIA
2015-03-02 10:26:57 ----D---- C:\Windows\Microsoft.NET
2015-03-02 10:18:37 ----RSD---- C:\Windows\assembly
2015-03-02 08:56:06 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-01 23:41:24 ----ASD---- C:\ProgramData\Microsoft
2015-03-01 23:29:43 ----A---- C:\Windows\system.ini
2015-03-01 23:29:35 ----D---- C:\Windows\system32\drivers\etc
2015-03-01 23:24:37 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-03-01 23:17:43 ----D---- C:\Windows\SYSWOW64\drivers
2015-03-01 23:17:43 ----D---- C:\Windows\AppPatch
2015-03-01 21:59:52 ----D---- C:\Program Files\Common Files
2015-03-01 21:15:10 ----D---- C:\Windows\winsxs
2015-03-01 21:15:03 ----D---- C:\Windows\system32\catroot2
2015-02-26 22:26:47 ----D---- C:\Windows\system32\Tasks
2015-02-25 16:36:56 ----D---- C:\Program Files\Common Files\Apple
2015-02-22 09:48:30 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\Skype
2015-02-21 15:45:50 ----D---- C:\Users\Ginkgo Biloba\AppData\Roaming\XCPCSync.OEM
2015-02-21 15:44:44 ----D---- C:\Program Files (x86)\Research In Motion
2015-02-14 12:28:19 ----D---- C:\Windows\rescache
2015-02-12 23:31:57 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-12 23:31:57 ----D---- C:\Windows\system32\en-US
2015-02-12 12:46:15 ----SD---- C:\Windows\system32\CompatTel
2015-02-12 12:46:15 ----D---- C:\Windows\system32\appraiser
2015-02-12 12:46:14 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-12 12:46:14 ----D---- C:\Windows\system32\cs-CZ
2015-02-12 12:46:14 ----D---- C:\Program Files\Internet Explorer
2015-02-12 12:46:12 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-12 03:00:45 ----D---- C:\Windows\system32\MRT
2015-02-12 02:55:58 ----A---- C:\Windows\system32\MRT.exe
2015-02-11 17:57:17 ----D---- C:\Windows\tracing
2015-02-09 00:51:14 ----D---- C:\Windows\Tasks
2015-02-09 00:45:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-27 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-27 267632]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2010-09-01 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-27 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-27 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-27 436624]
R1 cdrblock;cdrblock; C:\Windows\system32\DRIVERS\cdrblock.sys [2012-10-11 37704]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-27 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-27 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-27 116728]
R2 Sentinel64;Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [2009-09-17 145448]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-10-03 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 rimvndis;BlackBerry Virtual Private Network; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [2014-05-07 17920]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-08-17 1235968]
S1 cdrbsdrv;cdrbsdrv; C:\Windows\system32\drivers\cdrbsdrv.sys []
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 AVCSTRM;AVC Streaming Filter Driver; C:\Windows\system32\DRIVERS\avcstrm.sys [2009-07-14 17664]
S3 blackberryncm;BlackBerryNCM Service; C:\Windows\system32\DRIVERS\blackberryncm6_AMD64.sys [2014-09-08 25088]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2013-03-07 13896]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2013-03-07 9160]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys []
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\SysWOW64\FsUsbExDisk.SYS [2013-04-18 37344]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys []
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys []
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys []
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 MSTAPE;Microsoft AV/C Tape Subunit Device; C:\Windows\system32\DRIVERS\mstape.sys [2009-07-14 56448]
S3 p2usb;Panasonic P2 Series USB Device; C:\Windows\system32\DRIVERS\p2usb.sys [2010-06-01 28672]
S3 pwdrvio;pwdrvio; C:\Windows\system32\drivers\pwdrvio.sys []
S3 pwdspio;pwdspio; C:\Windows\system32\drivers\pwdspio.sys []
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2014-05-06 79872]
S3 TrufosAlt;TrufosAlt; C:\Windows\system32\DRIVERS\TrufosAlt.sys [2015-02-28 390776]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbrndis6;Adaptér USB RNDIS6; C:\Windows\system32\DRIVERS\usb80236.sys [2013-02-12 19968]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2011-02-16 14464]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-27 50344]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\SysWOW64\bgsvcgen.exe [2013-12-06 118784]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-13 935240]
R2 p2csvc;p2csvc; C:\Windows\system32\p2csvc.exe [2008-07-25 67072]
R2 p2csvc32;p2csvc32; C:\Windows\SysWOW64\p2csvc32.exe [2008-07-25 61440]
R2 postgresql-x64-9.2;postgresql-x64-9.2 - PostgreSQL Server 9.2; C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N postgresql-x64-9.2 -D C:/Program Files/PostgreSQL/9.2/data -w []
R2 RIM MDNS;RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [2014-05-07 389632]
R2 RIM Tunnel Service;BlackBerry Link Communication Manager; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [2014-11-28 1348344]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-13 410768]
R3 BlackBerry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2014-10-31 588024]
R3 FlexNet Licensing Service;FlexNet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-11-21 1045840]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-20 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-09 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-11-26 1038088]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-20 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-01-12 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-01-23 834752]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-23 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------