VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Duplicitní IP adresa, kontrola počítače.

https://forum.viry.cz:443/viewtopic.php?t=147574

Stránka 1 z 1

Duplicitní IP adresa, kontrola počítače.

Napsal: 13 led 2016 17:13
od vamvam
Dobrý den. Zde je můj problém:
Čas;Událost;Zdroj;Cíl;Protokol;Název pravidla/červa;Aplikace;Uživatel
13.1.2016 16:54:15;Detekována duplicitní IP adresa v síti;192.168.1.108;192.168.1.101;ARP;;;
13.1.2016 16:31:31;Detekována duplicitní IP adresa v síti;192.168.1.109;192.168.1.101;ARP;;;
13.1.2016 16:31:30;Detekována duplicitní IP adresa v síti;192.168.1.108;192.168.1.101;ARP;;;
12.1.2016 16:26:56;Detekována duplicitní IP adresa v síti;169.254.7.174;192.168.1.101;ARP;;;
9.1.2016 12:55:32;Detekována duplicitní IP adresa v síti;192.168.1.109;192.168.1.101;ARP;;;
9.1.2016 12:18:16;Detekována duplicitní IP adresa v síti;192.168.1.109;192.168.1.101;ARP;;;
29.12.2015 20:05:15;Detekována duplicitní IP adresa v síti;192.168.1.109;192.168.1.101;ARP;;;
Nevím zda to nějak víc popisovat, snad jen to, že mi to našel antivirus. Nejedná se o typ DDoSu nebo něco podobného? Jsem docela zděšený, všiml jsem si toho až dnes a ani jsem nezaregistroval, že mě to už víckrát upozorňovalo. Nevím zda je Lokální IP nebezpečná. 192.168.1.101, tohle je moje local IP. Ale asi chápete moje obavy. Děkuji předem za pomoc!


Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin at 2016-01-13 17:09:20
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 67 GB (15%) free of 451 GB
Total RAM: 8174 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:09:23, on 13.1.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\UMonit.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\Windows\jmesoft\hotkey.exe
C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe
C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
C:\Program Files (x86)\Gaming Keyboard\OSD.exe
C:\windows\SysWOW64\cmd.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera_crashreporter.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe
C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O4 - HKLM\..\Run: [jmekey] C:\windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [Lenovo Eye Distance System] C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe 1
O4 - HKLM\..\Run: [Lenovo Dynamic Brightness System] C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe 1
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10792 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Smart Security\ekrn.exe"
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs

C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\windows\system32\Dwm.exe"
"taskhost.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
C:\Windows\jmesoft\Service.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\SysWOW64\UMonit.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Windows\jmesoft\hotkey.exe"
"C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe" 1
"C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe" 1
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
"C:\Windows\jmesoft\JME_LOAD.exe"
"C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Gaming Keyboard\OSD.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 3440
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
\??\C:\windows\system32\conhost.exe "1879233454248784542-11488175586521912511638695610618282251383948842825760470
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\cmd.exe /c ""C:/Users/Martin/AppData/Local/Akamai/installer_no_upload_silent.exe" & "C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe""
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\34.0.2036.25\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=3816
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=gpu-process --channel="3816.0.1304903241\1345644219" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,16,29,57,67 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.5012 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --ignored=" --type=renderer " /prefetch:822062411
"C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe"
"C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe" --client
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3816.2.556325245\2046397769" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3816.4.975899414\1341872138" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3816.5.1768457343\896334681" /prefetch:673131151
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe"
"C:\Users\Martin\Desktop\Ekura\ekura_launcher.exe"
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3816.9.1430234280\1197691297" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2468 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3816.10.687287444\1185533042" /prefetch:673131151
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe16_ Global\UsGthrCtrlFltPipeMssGthrPipe16 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Martin\Desktop\RSITx64 (1).exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-10-26 11543656]
"UMonit"=C:\windows\SysWOW64\UMonit.exe [2011-05-25 49152]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe []
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2015-12-09 1846016]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-09 2771576]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]
"Cm108Sound"=C:\windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2014-01-03 14069760]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Akamai NetSession Interface"=C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe [2014-10-29 4673432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2015-11-06 3638256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerGameBooster]
C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [2014-02-25 61152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-08-07 53737488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2016-01-12 3014224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"jmekey"=C:\windows\jmesoft\hotkey.exe [2011-06-08 118784]
"jmesoft"=C:\Windows\jmesoft\ServiceLoader.exe [2011-03-16 28672]
"Lenovo Eye Distance System"=C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [2010-09-09 265216]
"Lenovo Dynamic Brightness System"=C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe [2010-10-08 285696]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-05 103720]
"VICTORY Gaming Keyboard"=C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [2013-04-09 270336]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\windows\SysWOW64\tsc2_codec64.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"mixer8"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave9"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-01-13 17:09:20 ----D---- C:\Program Files\trend micro
2016-01-09 22:46:57 ----D---- C:\Program Files\PremiumSoft
2015-12-24 22:22:34 ----D---- C:\ProgramData\ESET
2015-12-24 22:22:29 ----D---- C:\Program Files\ESET
2015-12-17 17:47:08 ----A---- C:\windows\system32\NvRtmpStreamer64.dll

======List of files/folders modified in the last 1 month======

2016-01-13 17:09:23 ----D---- C:\windows\Prefetch
2016-01-13 17:09:20 ----RD---- C:\Program Files
2016-01-13 17:09:17 ----D---- C:\Program Files (x86)\Steam
2016-01-13 17:09:04 ----D---- C:\Users\Martin\AppData\Roaming\TS3Client
2016-01-13 17:06:33 ----D---- C:\windows\Temp
2016-01-13 15:59:01 ----D---- C:\windows\winsxs
2016-01-13 15:58:47 ----D---- C:\windows\system32\catroot2
2016-01-13 15:38:45 ----A---- C:\windows\SYSWOW64\log.txt
2016-01-13 15:37:56 ----SHD---- C:\windows\Installer
2016-01-13 15:37:18 ----D---- C:\windows\system32\config
2016-01-13 15:34:57 ----D---- C:\ProgramData\NVIDIA
2016-01-12 22:58:27 ----D---- C:\Users\Martin\AppData\Roaming\FileZilla
2016-01-09 17:07:18 ----SHD---- C:\System Volume Information
2016-01-08 20:13:08 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2016-01-02 15:23:43 ----D---- C:\windows\SysWOW64
2016-01-02 15:23:39 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2016-01-01 14:16:35 ----D---- C:\windows\system32\drivers
2015-12-27 23:11:22 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-12-27 22:18:12 ----D---- C:\Program Files (x86)\StarCraft II
2015-12-27 22:15:17 ----D---- C:\Program Files (x86)\Battle.net
2015-12-24 22:23:26 ----D---- C:\windows\system32\DriverStore
2015-12-24 22:23:26 ----D---- C:\windows\inf
2015-12-24 22:22:34 ----D---- C:\ProgramData
2015-12-22 21:11:40 ----D---- C:\Program Files (x86)\SpeedFan
2015-12-19 03:02:16 ----SD---- C:\windows\SYSWOW64\GWX
2015-12-19 03:02:16 ----SD---- C:\windows\system32\GWX
2015-12-18 13:55:43 ----D---- C:\Windows
2015-12-17 17:48:12 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-17 17:47:08 ----AD---- C:\windows\System32
2015-12-17 16:20:18 ----D---- C:\Program Files (x86)\Hearthstone

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2015-11-20 69840]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver; C:\windows\system32\drivers\DDCDrv.sys [2008-04-08 20832]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2015-11-20 206312]
R1 EpfwLWF;ESET Personal Firewall; C:\windows\system32\DRIVERS\EpfwLWF.sys [2015-12-18 52872]
R2 ekbdflt;ekbdflt; C:\windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 GeneStor;Genesys Logic Storage Driver; C:\windows\system32\DRIVERS\GeneStor.sys [2011-05-18 58368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-10-26 2530152]
R3 ManyCam;ManyCam Virtual Webcam; C:\windows\system32\DRIVERS\mcvidrv.sys [2013-11-27 42016]
R3 MBAMProtector;MBAMProtector; \??\C:\windows\system32\drivers\mbam.sys [2015-10-05 25816]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\windows\system32\drivers\mcaudrv_x64.sys [2013-12-06 35232]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2015-04-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-09 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 ScreamBAudioSvc;ScreamBee Audio; C:\windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2014-10-08 766632]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2014-10-08 273576]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2014-10-08 29352]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2014-10-08 23208]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2015-08-06 33856]
S3 lmimirr;lmimirr; C:\windows\system32\DRIVERS\lmimirr.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [2016-01-12 192216]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\windows\system32\drivers\mwac.sys [2015-10-05 63704]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 USBPNPA;USB PnP Sound Device Interface; C:\windows\system32\drivers\CM10864.sys [2013-02-01 4333568]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S4 RsFx0103;RsFx0103 Driver; C:\windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015-11-25 2016448]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-11-20 2522616]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-09 1156216]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-10-15 22744]
R2 JME Keyboard;JME Keyboard Driver; C:\Windows\jmesoft\Service.exe [2011-03-16 32768]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-09 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-09 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2015-02-27 76152]
R2 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-02-25 105448]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2014-10-08 534184]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-09 8185464]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2014-10-08 211104]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-06-19 104120]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-06-19 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03 144200]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2015-09-02 8704]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-02 269504]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]
S3 EasyAntiCheat;EasyAntiCheat; C:\windows\syswow64\EasyAntiCheat.exe [2015-05-15 233776]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-19 142336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-11-08 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-11-06 2099208]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-01-12 835152]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 VsEtwService120;Visual Studio ETW Event Collection Service; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [2014-07-22 89232]
S3 VSStandardCollectorService140;Visual Studio Standard Collector Service; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [2015-07-06 52968]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-08-10 1255736]
S4 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Re: Duplicitní IP adresa, kontrola počítače.

Napsal: 13 led 2016 19:03
od Rudy
Zdravím!
Nejedná se o žádný útok, nýbrž o to, že správce sítě přidělil na 2 (nebo i více) místa stejnou IP. Kontaktujte ho.

Re: Duplicitní IP adresa, kontrola počítače.

Napsal: 13 led 2016 19:29
od vamvam
Dobře děkuji mnohokrát, jdu napsat email. :)

Tohle taky není žádný útok, ikdyž je to tak nazvané?

13.1.2016 18:44:08;Detekován útok ARP cache poisoning;192.168.1.108;192.168.1.101;ARP;;;
13.1.2016 18:44:07;Detekován útok ARP cache poisoning;192.168.1.108;192.168.1.101;ARP;;;
13.1.2016 18:44:06;Detekován útok ARP cache poisoning;192.168.1.108;192.168.1.101;ARP;;;

Re: Duplicitní IP adresa, kontrola počítače.

Napsal: 13 led 2016 20:10
od Rudy
Leda, že by někdo na vás útočil z vnitřní sítě. IP 192.168.x.x jsou IP adresami vnitřní sítě. Stát se to samozřejmě může, není to ale moc pravděpodobné. Většina útoků pochází z internetu.

Re: Duplicitní IP adresa, kontrola počítače.

Napsal: 14 led 2016 19:57
od vamvam
Dobře děkuji, zjistil jsem že na mě napojuje moje televize. :D


Jinak. Dnes jsem si stáhl bitvise (SSH připojení[program]) a po pár článcích na internetu jsem vyčetl, že se jedná o virus, i když jejich stránka je licencovaná.....
Jsem si na 99% jistý že v tom virus byl, jelikož se mi hodně zpomalil chod počítače. Mohl bych poprosit o kontrolu popřípadě zjištění co za viry mám a co za vir to byl a jejich odstranění? Normálně se mi až FPSkově seká i Opera. Děkuji. BTW jestli to pomůže, tak v tomhle příspěvku je novej RSIT a nahoře je starej, kdy jsem tento program nenainstaloval, každopádně bych kdyžtak poprosil, jestli by jste mi to radši zkontroloval celé. Ještě jednou děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin at 2016-01-14 19:51:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 62 GB (14%) free of 451 GB
Total RAM: 8174 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:51:32, on 14.1.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18163)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\UMonit.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\Windows\jmesoft\hotkey.exe
C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe
C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
C:\Program Files (x86)\Gaming Keyboard\OSD.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera_crashreporter.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\windows\SysWOW64\cmd.exe
C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe
C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O4 - HKLM\..\Run: [jmekey] C:\windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [Lenovo Eye Distance System] C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe 1
O4 - HKLM\..\Run: [Lenovo Dynamic Brightness System] C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe 1
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11097 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Smart Security\ekrn.exe"
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
C:\Windows\jmesoft\Service.exe
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2724
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
"C:\windows\system32\Dwm.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\windows\Explorer.EXE
\??\C:\windows\system32\conhost.exe "-659018062-385316572768250663-1702220719626016245681535155-1925576025-631452396
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\windows\system32\GWX\GWX.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\SysWOW64\UMonit.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\jmesoft\hotkey.exe"
"C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe" 1
"C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe" 1
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
"C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE"
"C:\Windows\jmesoft\JME_LOAD.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Gaming Keyboard\OSD.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\34.0.2036.25\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=4616
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=gpu-process --channel="4616.0.1385452582\402162823" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,16,29,57,67 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.5012 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.2.1474381364\2123869886" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.3.1725574477\765619116" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.5.1870077923\1774794442" /prefetch:673131151
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Martin\AppData\Local\Steam\htmlcache" -steampid=3512 -buildid=1452563216 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="6656.0.1563774014\162359705" --font-cache-shared-handle=1188 /prefetch:673131151
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"

"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.9.1266861476\963516988" /prefetch:673131151
"C:\Program Files\FileZilla FTP Client\filezilla.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="6656.1.952629298\1862294760" --font-cache-shared-handle=560 /prefetch:673131151
"C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe"
"C:\Users\Martin\Desktop\Ekura\ekura_launcher.exe"
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.30.309405720\85460040" /prefetch:673131151
C:\windows\system32\cmd.exe /c ""C:/Users/Martin/AppData/Local/Akamai/installer_no_upload_silent.exe" & "C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe""
"C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe"
"C:/Users/Martin/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.31.1372339886\1613140665" /prefetch:673131151
taskeng.exe {BB79834F-0D0D-4DCC-9B18-511FED7DF73B}
"C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=2912 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4616.32.418670805\799190793" /prefetch:673131151
C:\windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
taskeng.exe {68064A27-88A7-41C2-A7A0-10B6F6F73D34}
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe29_ Global\UsGthrCtrlFltPipeMssGthrPipe29 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Martin\Desktop\RSITx64 (1).exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-10-26 11543656]
"UMonit"=C:\windows\SysWOW64\UMonit.exe [2011-05-25 49152]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe []
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2015-12-09 1846016]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-09 2771576]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]
"Cm108Sound"=C:\windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2014-01-03 14069760]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Akamai NetSession Interface"=C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe [2014-10-29 4673432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2015-11-06 3638256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerGameBooster]
C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [2014-02-25 61152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-08-07 53737488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2016-01-12 3014224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"jmekey"=C:\windows\jmesoft\hotkey.exe [2011-06-08 118784]
"jmesoft"=C:\Windows\jmesoft\ServiceLoader.exe [2011-03-16 28672]
"Lenovo Eye Distance System"=C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [2010-09-09 265216]
"Lenovo Dynamic Brightness System"=C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe [2010-10-08 285696]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-05 103720]
"VICTORY Gaming Keyboard"=C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [2013-04-09 270336]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\windows\SysWOW64\tsc2_codec64.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"mixer8"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave9"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-01-13 17:09:20 ----D---- C:\Program Files\trend micro
2016-01-13 16:03:07 ----A---- C:\windows\SYSWOW64\mapistub.dll
2016-01-13 16:03:07 ----A---- C:\windows\SYSWOW64\mapi32.dll
2016-01-13 16:03:07 ----A---- C:\windows\SYSWOW64\fixmapi.exe
2016-01-13 16:03:07 ----A---- C:\windows\system32\mapistub.dll
2016-01-13 16:03:07 ----A---- C:\windows\system32\mapi32.dll
2016-01-13 16:03:07 ----A---- C:\windows\system32\fixmapi.exe
2016-01-13 16:03:07 ----A---- C:\windows\system32\aeinv.dll
2016-01-13 16:03:06 ----A---- C:\windows\SYSWOW64\qedit.dll
2016-01-13 16:03:06 ----A---- C:\windows\system32\qedit.dll
2016-01-13 16:03:04 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2016-01-13 16:03:04 ----A---- C:\windows\SYSWOW64\msmpeg2adec.dll
2016-01-13 16:03:04 ----A---- C:\windows\system32\WMVDECOD.DLL
2016-01-13 16:03:04 ----A---- C:\windows\system32\WMSPDMOD.DLL
2016-01-13 16:03:04 ----A---- C:\windows\system32\WMADMOD.DLL
2016-01-13 16:03:04 ----A---- C:\windows\system32\msmpeg2adec.dll
2016-01-13 16:03:03 ----A---- C:\windows\SYSWOW64\WMADMOD.DLL
2016-01-13 16:03:03 ----A---- C:\windows\SYSWOW64\MSMPEG2ENC.DLL
2016-01-13 16:03:03 ----A---- C:\windows\system32\WMVSDECD.DLL
2016-01-13 16:03:03 ----A---- C:\windows\system32\MSMPEG2ENC.DLL
2016-01-13 16:03:03 ----A---- C:\windows\system32\mf.dll
2016-01-13 16:03:02 ----A---- C:\windows\SYSWOW64\WMVSDECD.DLL
2016-01-13 16:03:02 ----A---- C:\windows\SYSWOW64\WMSPDMOD.DLL
2016-01-13 16:03:02 ----A---- C:\windows\SYSWOW64\WMADMOE.DLL
2016-01-13 16:03:02 ----A---- C:\windows\SYSWOW64\mf.dll
2016-01-13 16:03:02 ----A---- C:\windows\system32\wmpmde.dll
2016-01-13 16:03:02 ----A---- C:\windows\system32\WMADMOE.DLL
2016-01-13 16:03:02 ----A---- C:\windows\system32\quartz.dll
2016-01-13 16:03:02 ----A---- C:\windows\system32\mcmde.dll
2016-01-13 16:03:02 ----A---- C:\windows\system32\evr.dll
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\WMVXENCD.DLL
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\WMVENCOD.DLL
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\wmpmde.dll
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\quartz.dll
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\evr.dll
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\devenum.dll
2016-01-13 16:03:01 ----A---- C:\windows\SYSWOW64\COLORCNV.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\WMVXENCD.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\WMVSENCD.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\WMVENCOD.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\WMSPDMOE.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\VIDRESZR.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\MFWMAAEC.DLL
2016-01-13 16:03:01 ----A---- C:\windows\system32\mfplat.dll
2016-01-13 16:03:01 ----A---- C:\windows\system32\COLORCNV.DLL
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\WMVSENCD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\qdvd.dll
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\MPG4DECD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\MP43DECD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\MFWMAAEC.DLL
2016-01-13 16:03:00 ----A---- C:\windows\SYSWOW64\mfplat.dll
2016-01-13 16:03:00 ----A---- C:\windows\system32\RESAMPLEDMO.DLL
2016-01-13 16:03:00 ----A---- C:\windows\system32\MPG4DECD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\system32\MP4SDECD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\system32\MP43DECD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\system32\MP3DMOD.DLL
2016-01-13 16:03:00 ----A---- C:\windows\system32\devenum.dll
2016-01-13 16:02:59 ----A---- C:\windows\SYSWOW64\WMSPDMOE.DLL
2016-01-13 16:02:59 ----A---- C:\windows\SYSWOW64\qasf.dll
2016-01-13 16:02:59 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2016-01-13 16:02:59 ----A---- C:\windows\system32\mfvdsp.dll
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\VIDRESZR.DLL
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\rrinstaller.exe
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\RESAMPLEDMO.DLL
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\MP4SDECD.DLL
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\MP3DMOD.DLL
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\mfvdsp.dll
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\mfps.dll
2016-01-13 16:02:58 ----A---- C:\windows\SYSWOW64\mfpmp.exe
2016-01-13 16:02:58 ----A---- C:\windows\system32\SysFxUI.dll
2016-01-13 16:02:58 ----A---- C:\windows\system32\rrinstaller.exe
2016-01-13 16:02:58 ----A---- C:\windows\system32\qdvd.dll
2016-01-13 16:02:58 ----A---- C:\windows\system32\qasf.dll
2016-01-13 16:02:58 ----A---- C:\windows\system32\msmpeg2vdec.dll
2016-01-13 16:02:58 ----A---- C:\windows\system32\mfps.dll
2016-01-13 16:02:58 ----A---- C:\windows\system32\mfpmp.exe
2016-01-13 16:02:58 ----A---- C:\windows\system32\drivers\portcls.sys
2016-01-13 16:02:57 ----A---- C:\windows\SYSWOW64\mferror.dll
2016-01-13 16:02:57 ----A---- C:\windows\SYSWOW64\ksuser.dll
2016-01-13 16:02:57 ----A---- C:\windows\system32\mferror.dll
2016-01-13 16:02:57 ----A---- C:\windows\system32\ksuser.dll
2016-01-13 16:02:57 ----A---- C:\windows\system32\drivers\drmkaud.sys
2016-01-13 16:02:57 ----A---- C:\windows\system32\drivers\drmk.sys
2016-01-13 16:02:56 ----A---- C:\windows\system32\win32k.sys
2016-01-13 16:02:52 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2016-01-13 16:02:52 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2016-01-13 16:02:52 ----A---- C:\windows\SYSWOW64\iertutil.dll
2016-01-13 16:02:52 ----A---- C:\windows\SYSWOW64\iernonce.dll
2016-01-13 16:02:52 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2016-01-13 16:02:52 ----A---- C:\windows\system32\iertutil.dll
2016-01-13 16:02:52 ----A---- C:\windows\system32\ieetwproxystub.dll
2016-01-13 16:02:52 ----A---- C:\windows\system32\ieetwcollector.exe
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\vbscript.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\urlmon.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\occache.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\mshtml.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2016-01-13 16:02:51 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2016-01-13 16:02:51 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2016-01-13 16:02:51 ----A---- C:\windows\system32\iernonce.dll
2016-01-13 16:02:51 ----A---- C:\windows\system32\ie4uinit.exe
2016-01-13 16:02:50 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2016-01-13 16:02:50 ----A---- C:\windows\SYSWOW64\jscript.dll
2016-01-13 16:02:50 ----A---- C:\windows\SYSWOW64\iesetup.dll
2016-01-13 16:02:50 ----A---- C:\windows\system32\urlmon.dll
2016-01-13 16:02:50 ----A---- C:\windows\system32\occache.dll
2016-01-13 16:02:50 ----A---- C:\windows\system32\ieetwcollectorres.dll
2016-01-13 16:02:50 ----A---- C:\windows\system32\iedkcs32.dll
2016-01-13 16:02:49 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2016-01-13 16:02:49 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2016-01-13 16:02:49 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2016-01-13 16:02:48 ----A---- C:\windows\SYSWOW64\ieui.dll
2016-01-13 16:02:48 ----A---- C:\windows\SYSWOW64\ieframe.dll
2016-01-13 16:02:48 ----A---- C:\windows\system32\msfeeds.dll
2016-01-13 16:02:48 ----A---- C:\windows\system32\dxtrans.dll
2016-01-13 16:02:47 ----A---- C:\windows\system32\iesetup.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\wininet.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\webcheck.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\msrating.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\jscript9.dll
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2016-01-13 16:02:45 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2016-01-13 16:02:45 ----A---- C:\windows\system32\vbscript.dll
2016-01-13 16:02:45 ----A---- C:\windows\system32\jsproxy.dll
2016-01-13 16:02:44 ----A---- C:\windows\system32\mshtmled.dll
2016-01-13 16:02:44 ----A---- C:\windows\system32\ieui.dll
2016-01-13 16:02:44 ----A---- C:\windows\system32\ieframe.dll
2016-01-13 16:02:44 ----A---- C:\windows\system32\dxtmsft.dll
2016-01-13 16:02:43 ----A---- C:\windows\system32\webcheck.dll
2016-01-13 16:02:43 ----A---- C:\windows\system32\mshtmlmedia.dll
2016-01-13 16:02:43 ----A---- C:\windows\system32\jscript9diag.dll
2016-01-13 16:02:43 ----A---- C:\windows\system32\jscript.dll
2016-01-13 16:02:43 ----A---- C:\windows\system32\ieUnatt.exe
2016-01-13 16:02:42 ----A---- C:\windows\system32\wininet.dll
2016-01-13 16:02:42 ----A---- C:\windows\system32\MshtmlDac.dll
2016-01-13 16:02:42 ----A---- C:\windows\system32\jscript9.dll
2016-01-13 16:02:42 ----A---- C:\windows\system32\ieapfltr.dll
2016-01-13 16:02:41 ----A---- C:\windows\system32\msrating.dll
2016-01-13 16:02:41 ----A---- C:\windows\system32\mshtml.dll
2016-01-13 16:00:09 ----A---- C:\windows\SYSWOW64\advapi32.dll
2016-01-13 16:00:09 ----A---- C:\windows\system32\advapi32.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\invagent.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\generaltel.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\devinv.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\CompatTelRunner.exe
2016-01-13 16:00:08 ----A---- C:\windows\system32\appraiser.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\aepic.dll
2016-01-13 16:00:08 ----A---- C:\windows\system32\acmigration.dll
2016-01-13 16:00:07 ----A---- C:\windows\SYSWOW64\gdi32.dll
2016-01-13 16:00:07 ----A---- C:\windows\system32\gdi32.dll
2016-01-13 16:00:03 ----A---- C:\windows\system32\schannel.dll
2016-01-13 16:00:03 ----A---- C:\windows\system32\rpcrt4.dll
2016-01-13 16:00:03 ----A---- C:\windows\system32\ntoskrnl.exe
2016-01-13 16:00:03 ----A---- C:\windows\system32\kerberos.dll
2016-01-13 16:00:02 ----A---- C:\windows\SYSWOW64\kerberos.dll
2016-01-13 16:00:02 ----A---- C:\windows\system32\lsasrv.dll
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\wdigest.dll
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\schannel.dll
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2016-01-13 16:00:01 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\wdigest.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\TSpkg.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\ncrypt.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\msv1_0.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\kernel32.dll
2016-01-13 16:00:01 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2016-01-13 16:00:00 ----A---- C:\windows\SYSWOW64\ntdll.dll
2016-01-13 16:00:00 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2016-01-13 16:00:00 ----A---- C:\windows\SYSWOW64\kernel32.dll
2016-01-13 16:00:00 ----A---- C:\windows\system32\winsrv.dll
2016-01-13 16:00:00 ----A---- C:\windows\system32\ntdll.dll
2016-01-13 16:00:00 ----A---- C:\windows\system32\drivers\ksecdd.sys
2016-01-13 16:00:00 ----A---- C:\windows\system32\cryptbase.dll
2016-01-13 15:59:59 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2016-01-13 15:59:59 ----A---- C:\windows\SYSWOW64\secur32.dll
2016-01-13 15:59:59 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2016-01-13 15:59:59 ----A---- C:\windows\SYSWOW64\cryptbase.dll
2016-01-13 15:59:59 ----A---- C:\windows\SYSWOW64\credssp.dll
2016-01-13 15:59:59 ----A---- C:\windows\system32\sspicli.dll
2016-01-13 15:59:59 ----A---- C:\windows\system32\secur32.dll
2016-01-13 15:59:59 ----A---- C:\windows\system32\ntvdm64.dll
2016-01-13 15:59:59 ----A---- C:\windows\system32\credssp.dll
2016-01-13 15:59:58 ----A---- C:\windows\system32\wow64win.dll
2016-01-13 15:59:58 ----A---- C:\windows\system32\sspisrv.dll
2016-01-13 15:59:58 ----A---- C:\windows\system32\srcore.dll
2016-01-13 15:59:58 ----A---- C:\windows\system32\smss.exe
2016-01-13 15:59:58 ----A---- C:\windows\system32\lsass.exe
2016-01-13 15:59:58 ----A---- C:\windows\system32\KernelBase.dll
2016-01-13 15:59:58 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2016-01-13 15:59:58 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2016-01-13 15:59:58 ----A---- C:\windows\system32\conhost.exe
2016-01-13 15:59:57 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-13 15:59:57 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\wow32.dll
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\sspicli.dll
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\srclient.dll
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\instnm.exe
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\auditpol.exe
2016-01-13 15:59:57 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2016-01-13 15:59:57 ----A---- C:\windows\system32\wow64cpu.dll
2016-01-13 15:59:57 ----A---- C:\windows\system32\wow64.dll
2016-01-13 15:59:57 ----A---- C:\windows\system32\srclient.dll
2016-01-13 15:59:57 ----A---- C:\windows\system32\rstrui.exe
2016-01-13 15:59:57 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2016-01-13 15:59:57 ----A---- C:\windows\system32\csrsrv.dll
2016-01-13 15:59:57 ----A---- C:\windows\system32\auditpol.exe
2016-01-13 15:59:57 ----A---- C:\windows\system32\apisetschema.dll
2016-01-13 15:59:56 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 15:59:56 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 15:59:56 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 15:59:56 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 15:59:56 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-13 15:59:56 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 15:59:55 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 15:59:54 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 15:59:54 ----A---- C:\windows\SYSWOW64\setup16.exe
2016-01-13 15:59:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 15:59:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 15:59:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-13 15:59:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 15:59:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 15:59:53 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 15:59:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-13 15:59:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 15:59:52 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 15:59:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 15:59:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-13 15:59:51 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 15:59:51 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-13 15:59:51 ----A---- C:\windows\SYSWOW64\user.exe
2016-01-13 15:59:51 ----A---- C:\windows\SYSWOW64\msobjs.dll
2016-01-13 15:59:51 ----A---- C:\windows\SYSWOW64\msaudite.dll
2016-01-13 15:59:51 ----A---- C:\windows\SYSWOW64\adtschema.dll
2016-01-13 15:59:51 ----A---- C:\windows\system32\msobjs.dll
2016-01-13 15:59:51 ----A---- C:\windows\system32\msaudite.dll
2016-01-13 15:59:51 ----A---- C:\windows\system32\adtschema.dll
2016-01-09 22:46:57 ----D---- C:\Program Files\PremiumSoft
2015-12-24 22:22:34 ----D---- C:\ProgramData\ESET
2015-12-24 22:22:29 ----D---- C:\Program Files\ESET
2015-12-17 17:47:08 ----A---- C:\windows\system32\NvRtmpStreamer64.dll

======List of files/folders modified in the last 1 month======

2016-01-14 19:50:49 ----RD---- C:\Program Files (x86)
2016-01-14 19:50:36 ----D---- C:\windows\system32\Tasks
2016-01-14 19:33:32 ----SHD---- C:\windows\Installer
2016-01-14 19:22:02 ----D---- C:\windows\Temp
2016-01-14 19:18:21 ----D---- C:\Users\Martin\AppData\Roaming\TS3Client
2016-01-14 18:58:14 ----RSD---- C:\windows\assembly
2016-01-14 17:29:12 ----D---- C:\Program Files (x86)\Steam
2016-01-14 16:23:00 ----D---- C:\Users\Martin\AppData\Roaming\FileZilla
2016-01-14 15:28:20 ----D---- C:\Program Files (x86)\Opera
2016-01-14 15:27:48 ----AD---- C:\windows\System32
2016-01-14 15:27:44 ----A---- C:\windows\system32\PerfStringBackup.INI
2016-01-14 15:27:40 ----D---- C:\windows\inf
2016-01-14 15:24:30 ----A---- C:\windows\SYSWOW64\log.txt
2016-01-14 15:22:06 ----D---- C:\windows\winsxs
2016-01-14 15:21:18 ----D---- C:\windows\system32\config
2016-01-14 15:21:07 ----D---- C:\ProgramData\NVIDIA
2016-01-14 15:17:53 ----D---- C:\windows\SysWOW64
2016-01-14 15:17:42 ----D---- C:\Program Files\Internet Explorer
2016-01-14 15:17:41 ----D---- C:\windows\SYSWOW64\en-US
2016-01-14 15:17:41 ----D---- C:\windows\SYSWOW64\cs-CZ
2016-01-14 15:17:39 ----D---- C:\windows\system32\en-US
2016-01-14 15:17:39 ----D---- C:\windows\system32\cs-CZ
2016-01-14 15:17:36 ----D---- C:\Program Files (x86)\Internet Explorer
2016-01-14 15:17:34 ----SD---- C:\windows\system32\CompatTel
2016-01-14 15:17:33 ----D---- C:\windows\system32\appraiser
2016-01-14 15:17:33 ----D---- C:\windows\AppPatch
2016-01-14 15:17:17 ----D---- C:\windows\system32\drivers
2016-01-14 15:17:10 ----D---- C:\windows\system32\DriverStore
2016-01-14 15:13:20 ----D---- C:\Program Files\Microsoft Silverlight
2016-01-14 15:13:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-01-14 15:12:57 ----D---- C:\windows\PolicyDefinitions
2016-01-13 23:43:30 ----D---- C:\windows\Prefetch
2016-01-13 23:34:44 ----D---- C:\windows\system32\MRT
2016-01-13 23:34:44 ----A---- C:\windows\system32\MRT.exe
2016-01-13 23:30:03 ----SHD---- C:\System Volume Information
2016-01-13 21:03:10 ----D---- C:\windows\DigitalLocker
2016-01-13 17:09:20 ----RD---- C:\Program Files
2016-01-13 15:58:47 ----D---- C:\windows\system32\catroot2
2016-01-08 20:13:08 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2016-01-02 15:23:39 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2015-12-27 23:11:22 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-12-27 22:18:12 ----D---- C:\Program Files (x86)\StarCraft II
2015-12-27 22:15:17 ----D---- C:\Program Files (x86)\Battle.net
2015-12-24 22:22:34 ----D---- C:\ProgramData
2015-12-22 21:11:40 ----D---- C:\Program Files (x86)\SpeedFan
2015-12-19 03:02:16 ----SD---- C:\windows\SYSWOW64\GWX
2015-12-19 03:02:16 ----SD---- C:\windows\system32\GWX
2015-12-18 13:55:43 ----D---- C:\Windows
2015-12-17 17:48:12 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-17 16:20:18 ----D---- C:\Program Files (x86)\Hearthstone

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2015-11-20 69840]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver; C:\windows\system32\drivers\DDCDrv.sys [2008-04-08 20832]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2015-11-20 206312]
R1 EpfwLWF;ESET Personal Firewall; C:\windows\system32\DRIVERS\EpfwLWF.sys [2015-12-18 52872]
R2 ekbdflt;ekbdflt; C:\windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 GeneStor;Genesys Logic Storage Driver; C:\windows\system32\DRIVERS\GeneStor.sys [2011-05-18 58368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-10-26 2530152]
R3 ManyCam;ManyCam Virtual Webcam; C:\windows\system32\DRIVERS\mcvidrv.sys [2013-11-27 42016]
R3 MBAMProtector;MBAMProtector; \??\C:\windows\system32\drivers\mbam.sys [2015-10-05 25816]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\windows\system32\drivers\mcaudrv_x64.sys [2013-12-06 35232]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2015-04-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-09 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 ScreamBAudioSvc;ScreamBee Audio; C:\windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2014-10-08 766632]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2014-10-08 273576]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2014-10-08 29352]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2014-10-08 23208]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2015-08-06 33856]
S3 lmimirr;lmimirr; C:\windows\system32\DRIVERS\lmimirr.sys []
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\windows\system32\drivers\mwac.sys [2015-10-05 63704]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 USBPNPA;USB PnP Sound Device Interface; C:\windows\system32\drivers\CM10864.sys [2013-02-01 4333568]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S4 RsFx0103;RsFx0103 Driver; C:\windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015-11-25 2016448]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-11-20 2522616]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-09 1156216]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2015-09-02 8704]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-10-15 22744]
R2 JME Keyboard;JME Keyboard Driver; C:\Windows\jmesoft\Service.exe [2011-03-16 32768]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-09 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-09 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2015-02-27 76152]
R2 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-02-25 105448]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2014-10-08 534184]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-09 8185464]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2014-10-08 211104]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-01-12 835152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-06-19 104120]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-06-19 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03 144200]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-02 269504]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]
S3 EasyAntiCheat;EasyAntiCheat; C:\windows\syswow64\EasyAntiCheat.exe [2015-05-15 233776]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-19 142336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-12-12 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-11-06 2099208]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 VsEtwService120;Visual Studio ETW Event Collection Service; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [2014-07-22 89232]
S3 VSStandardCollectorService140;Visual Studio Standard Collector Service; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [2015-07-06 52968]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-08-10 1255736]
S4 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Re: Duplicitní IP adresa, kontrola počítače.

Napsal: 14 led 2016 20:35
od Rudy
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz