Trojan:Win32/Sisron a zvysky po nom

Zpráva

adogeon · #1 Příspěvek od **adogeon** » 04 led 2014 19:05

Ahojte,
prisiel som do styku s infikovanym USB a virus mi urobil priecinok Documents and Settings na Win7 a takisto mi v Users porobil .LNK subory.
Presne tekto iste ikonky a .LNK subory boli na tom kluci. Antivirus (Microsoft Security Essentials) ten virus zachytil.
Tu je ten virus.
Teraz ale neviem, ci je to problem, alebo nie, lebo ked mi urobil zasah do C:\. Antivirus uz nenasiel ziadny virus. Prosim Vas, mohli by ste sa mi na to pozriet?

Tu je log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Andy at 2014-01-04 18:56:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 240 GB (56%) free of 432 GB
Total RAM: 4010 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:56:17, on 4. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Andy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: DisplayFusionService - Binary Fortress Software - C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13180 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\WLANExt.exe 30283840
\??\C:\windows\system32\conhost.exe "15803510911450759114-1876511783-21088459451535181301-1170852903-592069220705633756
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\System32\alg.exe
"C:\windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\windows\system32\SearchIndexer.exe /Embedding
taskeng.exe {528CFC86-67D3-4E19-8C8D-6401EFEB3464}
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\windows\system32\conhost.exe "1331799752-202742272839421493-18445496441374585367-169529670815498983201852798033
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4864
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"taskhost.exe"
C:\windows\system32\DllHost.exe /Processid:{A79DB36D-6218-48E6-9EC9-DCBA9A39BF00}
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe51_ Global\UsGthrCtrlFltPipeMssGthrPipe51 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Andy\Documents\RSIT\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-03-09 6669000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-11 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-03-09 4171464]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-11 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-11 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-11 194128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-03-29 167960]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-03-29 391704]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-03-29 418840]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-11-14 13353064]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-22 2538280]
"IntelPAN"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-07-27 1935120]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2011-12-19 114688]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2011-12-19 789920]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-11-08 1028384]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-10-02 9745312]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-10-02 5374880]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2013-12-10 1100248]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2013-04-11 89600]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-08-01 3673696]
"AdobeBridge"= []
"DisplayFusion"=C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [2013-11-27 7952224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2011-12-19 329056]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2013-11-03 2065408]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2010-12-05 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2010-12-05 224352]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
SRS Premium Sound.lnk - C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-03-09 6669000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-03-09 4171464]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe]
"Debugger=""C:\Program Files\Notepad2\Notepad2.exe" /z

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-01-04 18:52:56 ----D---- C:\rsit
2014-01-04 18:52:56 ----D---- C:\Program Files\trend micro
2014-01-04 14:25:53 ----D---- C:\ProgramData\Mozilla
2013-12-22 14:27:34 ----D---- C:\ProgramData\Orbit
2013-12-22 13:20:58 ----D---- C:\Program Files (x86)\Ubisoft
2013-12-20 10:59:04 ----A---- C:\windows\SYSWOW64\XAudio2_7.dll
2013-12-20 10:59:04 ----A---- C:\windows\SYSWOW64\XAPOFX1_5.dll
2013-12-20 10:59:04 ----A---- C:\windows\system32\XAudio2_7.dll
2013-12-20 10:59:04 ----A---- C:\windows\system32\XAPOFX1_5.dll
2013-12-20 10:59:03 ----A---- C:\windows\SYSWOW64\xactengine3_7.dll
2013-12-20 10:59:03 ----A---- C:\windows\system32\xactengine3_7.dll
2013-12-20 10:59:00 ----A---- C:\windows\SYSWOW64\D3DCompiler_43.dll
2013-12-20 10:59:00 ----A---- C:\windows\system32\D3DCompiler_43.dll
2013-12-20 10:58:57 ----A---- C:\windows\SYSWOW64\d3dcsx_43.dll
2013-12-20 10:58:57 ----A---- C:\windows\system32\d3dcsx_43.dll
2013-12-20 10:58:52 ----A---- C:\windows\SYSWOW64\XAudio2_6.dll
2013-12-20 10:58:52 ----A---- C:\windows\SYSWOW64\XAPOFX1_4.dll
2013-12-20 10:58:52 ----A---- C:\windows\system32\XAudio2_6.dll
2013-12-20 10:58:52 ----A---- C:\windows\system32\XAPOFX1_4.dll
2013-12-20 10:58:50 ----A---- C:\windows\SYSWOW64\xactengine3_6.dll
2013-12-20 10:58:50 ----A---- C:\windows\SYSWOW64\X3DAudio1_7.dll
2013-12-20 10:58:50 ----A---- C:\windows\system32\xactengine3_6.dll
2013-12-20 10:58:50 ----A---- C:\windows\system32\X3DAudio1_7.dll
2013-12-20 10:58:48 ----A---- C:\windows\system32\XAudio2_5.dll
2013-12-20 10:58:47 ----A---- C:\windows\SYSWOW64\xactengine3_5.dll
2013-12-20 10:58:47 ----A---- C:\windows\system32\xactengine3_5.dll
2013-12-20 10:58:45 ----A---- C:\windows\SYSWOW64\D3DCompiler_42.dll
2013-12-20 10:58:45 ----A---- C:\windows\system32\D3DCompiler_42.dll
2013-12-20 10:58:39 ----A---- C:\windows\SYSWOW64\d3dcsx_42.dll
2013-12-20 10:58:39 ----A---- C:\windows\system32\d3dcsx_42.dll
2013-12-20 10:58:38 ----A---- C:\windows\SYSWOW64\d3dx11_42.dll
2013-12-20 10:58:38 ----A---- C:\windows\system32\d3dx11_42.dll
2013-12-20 10:58:34 ----A---- C:\windows\SYSWOW64\D3DX9_42.dll
2013-12-20 10:58:34 ----A---- C:\windows\system32\D3DX9_42.dll
2013-12-20 10:58:31 ----A---- C:\windows\system32\d3dx10_41.dll
2013-12-20 10:58:31 ----A---- C:\windows\system32\D3DCompiler_41.dll
2013-12-20 10:58:25 ----A---- C:\windows\SYSWOW64\D3DX9_41.dll
2013-12-20 10:58:25 ----A---- C:\windows\system32\D3DX9_41.dll
2013-12-20 10:58:22 ----A---- C:\windows\SYSWOW64\XAudio2_4.dll
2013-12-20 10:58:22 ----A---- C:\windows\system32\XAudio2_4.dll
2013-12-20 10:58:22 ----A---- C:\windows\system32\XAPOFX1_3.dll
2013-12-20 10:58:21 ----A---- C:\windows\SYSWOW64\xactengine3_4.dll
2013-12-20 10:58:21 ----A---- C:\windows\system32\xactengine3_4.dll
2013-12-20 10:58:20 ----A---- C:\windows\SYSWOW64\X3DAudio1_6.dll
2013-12-20 10:58:20 ----A---- C:\windows\system32\X3DAudio1_6.dll
2013-12-20 10:58:15 ----A---- C:\windows\SYSWOW64\d3dx10_40.dll
2013-12-20 10:58:15 ----A---- C:\windows\SYSWOW64\D3DCompiler_40.dll
2013-12-20 10:58:15 ----A---- C:\windows\system32\d3dx10_40.dll
2013-12-20 10:58:15 ----A---- C:\windows\system32\D3DCompiler_40.dll
2013-12-20 10:58:11 ----A---- C:\windows\SYSWOW64\D3DX9_40.dll
2013-12-20 10:58:11 ----A---- C:\windows\system32\D3DX9_40.dll
2013-12-20 10:58:09 ----A---- C:\windows\SYSWOW64\XAudio2_3.dll
2013-12-20 10:58:09 ----A---- C:\windows\SYSWOW64\XAPOFX1_2.dll
2013-12-20 10:58:09 ----A---- C:\windows\system32\XAudio2_3.dll
2013-12-20 10:58:09 ----A---- C:\windows\system32\XAPOFX1_2.dll
2013-12-20 10:58:07 ----A---- C:\windows\SYSWOW64\xactengine3_3.dll
2013-12-20 10:58:07 ----A---- C:\windows\system32\xactengine3_3.dll
2013-12-20 10:58:05 ----A---- C:\windows\SYSWOW64\X3DAudio1_5.dll
2013-12-20 10:58:05 ----A---- C:\windows\system32\X3DAudio1_5.dll
2013-12-20 10:58:03 ----A---- C:\windows\SYSWOW64\XAudio2_2.dll
2013-12-20 10:58:03 ----A---- C:\windows\SYSWOW64\XAPOFX1_1.dll
2013-12-20 10:58:03 ----A---- C:\windows\system32\XAudio2_2.dll
2013-12-20 10:58:03 ----A---- C:\windows\system32\XAPOFX1_1.dll
2013-12-20 10:58:02 ----A---- C:\windows\SYSWOW64\xactengine3_2.dll
2013-12-20 10:58:02 ----A---- C:\windows\system32\xactengine3_2.dll
2013-12-20 10:57:58 ----A---- C:\windows\SYSWOW64\d3dx10_39.dll
2013-12-20 10:57:58 ----A---- C:\windows\SYSWOW64\D3DCompiler_39.dll
2013-12-20 10:57:58 ----A---- C:\windows\system32\d3dx10_39.dll
2013-12-20 10:57:58 ----A---- C:\windows\system32\D3DCompiler_39.dll
2013-12-20 10:57:54 ----A---- C:\windows\SYSWOW64\D3DX9_39.dll
2013-12-20 10:57:54 ----A---- C:\windows\system32\D3DX9_39.dll
2013-12-20 10:57:51 ----A---- C:\windows\SYSWOW64\XAudio2_1.dll
2013-12-20 10:57:51 ----A---- C:\windows\SYSWOW64\XAPOFX1_0.dll
2013-12-20 10:57:51 ----A---- C:\windows\system32\XAudio2_1.dll
2013-12-20 10:57:51 ----A---- C:\windows\system32\XAPOFX1_0.dll
2013-12-20 10:57:49 ----A---- C:\windows\SYSWOW64\xactengine3_1.dll
2013-12-20 10:57:49 ----A---- C:\windows\SYSWOW64\X3DAudio1_4.dll
2013-12-20 10:57:49 ----A---- C:\windows\system32\xactengine3_1.dll
2013-12-20 10:57:49 ----A---- C:\windows\system32\X3DAudio1_4.dll
2013-12-20 10:57:46 ----A---- C:\windows\SYSWOW64\d3dx10_38.dll
2013-12-20 10:57:46 ----A---- C:\windows\SYSWOW64\D3DCompiler_38.dll
2013-12-20 10:57:46 ----A---- C:\windows\system32\d3dx10_38.dll
2013-12-20 10:57:46 ----A---- C:\windows\system32\D3DCompiler_38.dll
2013-12-20 10:57:42 ----A---- C:\windows\SYSWOW64\D3DX9_38.dll
2013-12-20 10:57:42 ----A---- C:\windows\system32\D3DX9_38.dll
2013-12-20 10:57:40 ----A---- C:\windows\SYSWOW64\XAudio2_0.dll
2013-12-20 10:57:40 ----A---- C:\windows\system32\XAudio2_0.dll
2013-12-20 10:57:38 ----A---- C:\windows\SYSWOW64\xactengine3_0.dll
2013-12-20 10:57:38 ----A---- C:\windows\system32\xactengine3_0.dll
2013-12-20 10:57:37 ----A---- C:\windows\SYSWOW64\X3DAudio1_3.dll
2013-12-20 10:57:37 ----A---- C:\windows\system32\X3DAudio1_3.dll
2013-12-20 10:57:34 ----A---- C:\windows\SYSWOW64\d3dx10_37.dll
2013-12-20 10:57:34 ----A---- C:\windows\SYSWOW64\D3DCompiler_37.dll
2013-12-20 10:57:34 ----A---- C:\windows\system32\d3dx10_37.dll
2013-12-20 10:57:34 ----A---- C:\windows\system32\D3DCompiler_37.dll
2013-12-20 10:57:30 ----A---- C:\windows\SYSWOW64\D3DX9_37.dll
2013-12-20 10:57:30 ----A---- C:\windows\system32\D3DX9_37.dll
2013-12-20 10:57:28 ----A---- C:\windows\SYSWOW64\xactengine2_10.dll
2013-12-20 10:57:28 ----A---- C:\windows\system32\xactengine2_10.dll
2013-12-20 10:57:23 ----A---- C:\windows\SYSWOW64\d3dx10_36.dll
2013-12-20 10:57:23 ----A---- C:\windows\system32\d3dx10_36.dll
2013-12-20 10:57:22 ----A---- C:\windows\SYSWOW64\D3DCompiler_36.dll
2013-12-20 10:57:22 ----A---- C:\windows\system32\D3DCompiler_36.dll
2013-12-20 10:57:18 ----A---- C:\windows\SYSWOW64\d3dx9_36.dll
2013-12-20 10:57:18 ----A---- C:\windows\system32\d3dx9_36.dll
2013-12-20 10:57:16 ----A---- C:\windows\SYSWOW64\xactengine2_9.dll
2013-12-20 10:57:16 ----A---- C:\windows\system32\xactengine2_9.dll
2013-12-20 10:57:11 ----A---- C:\windows\SYSWOW64\d3dx10_35.dll
2013-12-20 10:57:11 ----A---- C:\windows\system32\d3dx10_35.dll
2013-12-20 10:57:10 ----A---- C:\windows\SYSWOW64\D3DCompiler_35.dll
2013-12-20 10:57:10 ----A---- C:\windows\system32\D3DCompiler_35.dll
2013-12-20 10:57:07 ----A---- C:\windows\system32\d3dx9_35.dll
2013-12-20 10:57:05 ----A---- C:\windows\SYSWOW64\xactengine2_8.dll
2013-12-20 10:57:05 ----A---- C:\windows\SYSWOW64\X3DAudio1_2.dll
2013-12-20 10:57:05 ----A---- C:\windows\system32\xactengine2_8.dll
2013-12-20 10:57:05 ----A---- C:\windows\system32\X3DAudio1_2.dll
2013-12-20 10:57:00 ----A---- C:\windows\SYSWOW64\d3dx10_34.dll
2013-12-20 10:57:00 ----A---- C:\windows\SYSWOW64\D3DCompiler_34.dll
2013-12-20 10:57:00 ----A---- C:\windows\system32\d3dx10_34.dll
2013-12-20 10:57:00 ----A---- C:\windows\system32\D3DCompiler_34.dll
2013-12-20 10:56:57 ----A---- C:\windows\SYSWOW64\d3dx9_34.dll
2013-12-20 10:56:57 ----A---- C:\windows\system32\d3dx9_34.dll
2013-12-20 10:56:55 ----A---- C:\windows\SYSWOW64\xinput1_3.dll
2013-12-20 10:56:55 ----A---- C:\windows\system32\xinput1_3.dll
2013-12-20 10:56:53 ----A---- C:\windows\SYSWOW64\xactengine2_7.dll
2013-12-20 10:56:53 ----A---- C:\windows\system32\xactengine2_7.dll
2013-12-20 10:56:50 ----A---- C:\windows\SYSWOW64\d3dx10_33.dll
2013-12-20 10:56:50 ----A---- C:\windows\SYSWOW64\D3DCompiler_33.dll
2013-12-20 10:56:50 ----A---- C:\windows\system32\d3dx10_33.dll
2013-12-20 10:56:50 ----A---- C:\windows\system32\D3DCompiler_33.dll
2013-12-20 10:56:47 ----A---- C:\windows\SYSWOW64\d3dx9_33.dll
2013-12-20 10:56:47 ----A---- C:\windows\system32\d3dx9_33.dll
2013-12-20 10:56:44 ----A---- C:\windows\SYSWOW64\xactengine2_6.dll
2013-12-20 10:56:44 ----A---- C:\windows\system32\xactengine2_6.dll
2013-12-20 10:56:43 ----A---- C:\windows\SYSWOW64\xactengine2_5.dll
2013-12-20 10:56:43 ----A---- C:\windows\system32\xactengine2_5.dll
2013-12-20 10:56:41 ----A---- C:\windows\SYSWOW64\d3dx10.dll
2013-12-20 10:56:41 ----A---- C:\windows\system32\d3dx10.dll
2013-12-20 10:56:35 ----A---- C:\windows\SYSWOW64\xactengine2_4.dll
2013-12-20 10:56:35 ----A---- C:\windows\SYSWOW64\x3daudio1_1.dll
2013-12-20 10:56:35 ----A---- C:\windows\system32\xactengine2_4.dll
2013-12-20 10:56:35 ----A---- C:\windows\system32\x3daudio1_1.dll
2013-12-20 10:56:32 ----A---- C:\windows\SYSWOW64\d3dx9_31.dll
2013-12-20 10:56:32 ----A---- C:\windows\system32\d3dx9_31.dll
2013-12-20 10:56:31 ----A---- C:\windows\SYSWOW64\xactengine2_3.dll
2013-12-20 10:56:31 ----A---- C:\windows\system32\xactengine2_3.dll
2013-12-20 10:56:29 ----A---- C:\windows\SYSWOW64\xinput1_2.dll
2013-12-20 10:56:29 ----A---- C:\windows\system32\xinput1_2.dll
2013-12-20 10:56:27 ----A---- C:\windows\SYSWOW64\xactengine2_2.dll
2013-12-20 10:56:27 ----A---- C:\windows\system32\xactengine2_2.dll
2013-12-20 10:56:23 ----A---- C:\windows\SYSWOW64\xinput1_1.dll
2013-12-20 10:56:23 ----A---- C:\windows\system32\xinput1_1.dll
2013-12-20 10:56:20 ----A---- C:\windows\SYSWOW64\xactengine2_1.dll
2013-12-20 10:56:20 ----A---- C:\windows\system32\xactengine2_1.dll
2013-12-20 10:55:55 ----A---- C:\windows\SYSWOW64\d3dx9_30.dll
2013-12-20 10:55:55 ----A---- C:\windows\system32\d3dx9_30.dll
2013-12-20 10:55:49 ----A---- C:\windows\SYSWOW64\xactengine2_0.dll
2013-12-20 10:55:49 ----A---- C:\windows\SYSWOW64\x3daudio1_0.dll
2013-12-20 10:55:49 ----A---- C:\windows\system32\xactengine2_0.dll
2013-12-20 10:55:49 ----A---- C:\windows\system32\x3daudio1_0.dll
2013-12-20 10:55:45 ----A---- C:\windows\SYSWOW64\d3dx9_29.dll
2013-12-20 10:55:45 ----A---- C:\windows\system32\d3dx9_29.dll
2013-12-20 10:55:41 ----A---- C:\windows\SYSWOW64\d3dx9_28.dll
2013-12-20 10:55:41 ----A---- C:\windows\system32\d3dx9_28.dll
2013-12-20 10:55:37 ----A---- C:\windows\SYSWOW64\d3dx9_27.dll
2013-12-20 10:55:37 ----A---- C:\windows\system32\d3dx9_27.dll
2013-12-20 10:55:31 ----A---- C:\windows\SYSWOW64\d3dx9_26.dll
2013-12-20 10:55:31 ----A---- C:\windows\system32\d3dx9_26.dll
2013-12-20 10:55:26 ----A---- C:\windows\SYSWOW64\d3dx9_25.dll
2013-12-20 10:55:26 ----A---- C:\windows\system32\d3dx9_25.dll
2013-12-20 10:55:17 ----A---- C:\windows\SYSWOW64\d3dx9_24.dll
2013-12-20 10:55:17 ----A---- C:\windows\system32\d3dx9_24.dll
2013-12-20 10:42:54 ----D---- C:\Program Files (x86)\FIFA 13
2013-12-19 19:00:10 ----D---- C:\ProgramData\Origin
2013-12-18 05:03:44 ----A---- C:\windows\SYSWOW64\GPhotos.scr
2013-12-17 19:43:07 ----A---- C:\windows\SYSWOW64\d3dx11_43.dll
2013-12-17 19:43:07 ----A---- C:\windows\system32\d3dx11_43.dll
2013-12-17 19:43:05 ----A---- C:\windows\SYSWOW64\d3dx10_43.dll
2013-12-17 19:43:05 ----A---- C:\windows\system32\d3dx10_43.dll
2013-12-17 19:43:01 ----A---- C:\windows\SYSWOW64\D3DX9_43.dll
2013-12-17 19:43:01 ----A---- C:\windows\system32\D3DX9_43.dll
2013-12-17 19:41:18 ----A---- C:\windows\SYSWOW64\nvaudcap32v.dll
2013-12-17 19:41:18 ----A---- C:\windows\system32\drivers\nvvad64v.sys
2013-12-16 15:16:58 ----A---- C:\windows\system32\drivers\ggsemc.sys
2013-12-16 15:16:58 ----A---- C:\windows\system32\drivers\ggflt.sys
2013-12-16 15:16:05 ----D---- C:\ProgramData\Sony Mobile
2013-12-16 15:15:38 ----D---- C:\Program Files (x86)\Sony Mobile
2013-12-11 13:44:01 ----A---- C:\windows\system32\wmploc.DLL
2013-12-11 13:44:00 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2013-12-11 13:44:00 ----A---- C:\windows\SYSWOW64\wmp.dll
2013-12-11 13:43:59 ----A---- C:\windows\system32\wmp.dll
2013-12-11 13:42:13 ----A---- C:\windows\system32\ieetwcollectorres.dll
2013-12-11 13:42:12 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-12-11 13:42:12 ----A---- C:\windows\system32\jsproxy.dll
2013-12-11 13:42:12 ----A---- C:\windows\system32\ieui.dll
2013-12-11 13:42:11 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-12-11 13:42:11 ----A---- C:\windows\system32\ieUnatt.exe
2013-12-11 13:42:11 ----A---- C:\windows\system32\iesetup.dll
2013-12-11 13:42:11 ----A---- C:\windows\system32\iernonce.dll
2013-12-11 13:42:11 ----A---- C:\windows\system32\ieetwproxystub.dll
2013-12-11 13:42:11 ----A---- C:\windows\system32\ieetwcollector.exe
2013-12-11 13:42:11 ----A---- C:\windows\system32\ie4uinit.exe
2013-12-11 13:42:10 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2013-12-11 13:42:10 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-12-11 13:42:10 ----A---- C:\windows\system32\mshtml.dll
2013-12-11 13:42:10 ----A---- C:\windows\system32\jscript9diag.dll
2013-12-11 13:42:10 ----A---- C:\windows\system32\ieapfltr.dll
2013-12-11 13:42:09 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-12-11 13:42:09 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-12-11 13:42:09 ----A---- C:\windows\system32\iertutil.dll
2013-12-11 13:42:08 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-12-11 13:42:08 ----A---- C:\windows\system32\wininet.dll
2013-12-11 13:42:08 ----A---- C:\windows\system32\urlmon.dll
2013-12-11 13:42:07 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-12-11 13:42:07 ----A---- C:\windows\system32\ieframe.dll
2013-12-11 13:42:06 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-12-11 13:42:06 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-12-11 13:42:05 ----A---- C:\windows\system32\jscript9.dll
2013-12-11 09:56:37 ----A---- C:\windows\SYSWOW64\msieftp.dll
2013-12-11 09:56:37 ----A---- C:\windows\system32\win32k.sys
2013-12-11 09:56:37 ----A---- C:\windows\system32\msieftp.dll
2013-12-11 09:56:36 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-12-11 09:56:36 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-12-11 09:56:36 ----A---- C:\windows\system32\WMPhoto.dll
2013-12-11 09:56:36 ----A---- C:\windows\system32\imagehlp.dll
2013-12-11 09:56:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-12-11 09:56:31 ----A---- C:\windows\system32\tzres.dll
2013-12-11 09:56:28 ----A---- C:\windows\SYSWOW64\wscript.exe
2013-12-11 09:56:28 ----A---- C:\windows\SYSWOW64\scrrun.dll
2013-12-11 09:56:28 ----A---- C:\windows\SYSWOW64\cscript.exe
2013-12-11 09:56:28 ----A---- C:\windows\system32\wscript.exe
2013-12-11 09:56:28 ----A---- C:\windows\system32\scrrun.dll
2013-12-11 09:56:28 ----A---- C:\windows\system32\drivers\portcls.sys
2013-12-11 09:56:28 ----A---- C:\windows\system32\drivers\drmk.sys
2013-12-11 09:56:28 ----A---- C:\windows\system32\cscript.exe
2013-12-10 16:11:22 ----D---- C:\Users\Andy\AppData\Roaming\DisplayFusion
2013-12-09 17:39:08 ----SHD---- C:\Users\Andy\AppData\Roaming\Common
2013-12-09 17:38:46 ----D---- C:\ProgramData\Binary Fortress Software
2013-12-09 17:38:31 ----D---- C:\Program Files (x86)\DisplayFusion

======List of files/folders modified in the last 1 month======

2014-01-04 18:54:47 ----A---- C:\Users\Andy\AppData\Roaming\Notepad2.ini
2014-01-04 18:54:42 ----D---- C:\Users\Andy\AppData\Roaming\uTorrent
2014-01-04 18:52:56 ----RD---- C:\Program Files
2014-01-04 18:50:18 ----D---- C:\Users\Andy\AppData\Roaming\KeePass
2014-01-04 18:44:47 ----D---- C:\windows\Temp
2014-01-04 18:43:43 ----D---- C:\windows\system32\config
2014-01-04 17:12:32 ----D---- C:\Program Files\Speccy
2014-01-04 15:10:44 ----SHD---- C:\System Volume Information
2014-01-04 14:50:58 ----D---- C:\windows\System32
2014-01-04 14:50:58 ----D---- C:\windows\inf
2014-01-04 14:50:58 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-01-04 14:44:56 ----RD---- C:\Program Files (x86)
2014-01-04 14:25:53 ----HD---- C:\ProgramData
2014-01-04 14:25:39 ----D---- C:\windows\Prefetch
2014-01-04 12:38:02 ----D---- C:\ProgramData\VeriFace
2014-01-03 12:26:39 ----A---- C:\windows\SYSWOW64\log.txt
2013-12-24 13:44:03 ----RSD---- C:\windows\Fonts
2013-12-22 13:54:52 ----D---- C:\windows\Logs
2013-12-22 13:54:02 ----RSD---- C:\windows\assembly
2013-12-22 13:20:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-12-20 10:59:10 ----D---- C:\Program Files (x86)\Common Files
2013-12-20 10:59:06 ----D---- C:\windows\SysWOW64
2013-12-18 20:37:55 ----SHD---- C:\windows\Installer
2013-12-18 14:38:26 ----D---- C:\Windows
2013-12-17 19:42:20 ----D---- C:\windows\Microsoft.NET
2013-12-17 19:41:33 ----D---- C:\windows\system32\drivers
2013-12-17 19:41:31 ----D---- C:\windows\system32\DriverStore
2013-12-17 19:41:31 ----D---- C:\windows\system32\catroot
2013-12-16 23:04:20 ----D---- C:\windows\system32\catroot2
2013-12-15 22:38:17 ----D---- C:\Users\Andy\AppData\Roaming\Skype
2013-12-14 21:58:27 ----D---- C:\windows\system32\MRT
2013-12-14 21:55:45 ----A---- C:\windows\system32\MRT.exe
2013-12-12 16:07:26 ----D---- C:\windows\rescache
2013-12-11 22:49:09 ----D---- C:\windows\winsxs
2013-12-11 22:45:36 ----D---- C:\Program Files\Windows Media Player
2013-12-11 22:45:36 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-11 22:45:34 ----D---- C:\Program Files\Internet Explorer
2013-12-11 22:45:34 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-11 22:45:32 ----D---- C:\windows\SYSWOW64\sk-SK
2013-12-11 22:45:32 ----D---- C:\windows\system32\sk-SK
2013-12-11 13:43:45 ----D---- C:\ProgramData\Microsoft Help
2013-12-10 03:13:11 ----A---- C:\windows\SYSWOW64\nvspcap.dll
2013-12-10 03:13:01 ----A---- C:\windows\system32\nvspcap64.dll
2013-12-08 17:12:36 ----SD---- C:\Users\Andy\AppData\Roaming\Microsoft
2013-12-07 21:52:23 ----D---- C:\ProgramData\Skype
2013-12-07 21:52:19 ----RD---- C:\Program Files (x86)\Skype
2013-12-05 09:42:26 ----A---- C:\windows\system32\nvaudcap64v.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2011-12-19 57952]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2013-10-26 39008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2013-11-23 32544]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2011-12-19 13408]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-25 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-12-19 29792]
R3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-02-15 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-02-15 107560]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\drivers\btwavdt.sys [2011-02-15 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-02-15 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2010-12-05 31088]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-11-16 2950632]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-08-03 8604672]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\windows\system32\DRIVERS\psadd.sys [2013-10-03 40760]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-11-30 307304]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-12-22 1407024]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2013-12-16 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2013-12-16 27760]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rtsuvc;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys [2010-12-15 8200552]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 113704]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 19496]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 153128]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 133160]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 34856]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 128552]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 146472]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 VSPerfDrv110;Performance Tools Driver 11.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [2012-07-13 70264]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-02-15 956192]
R2 DisplayFusionService;DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [2013-11-27 1375600]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-07-27 1517328]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-11-23 922912]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-07-27 844560]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-02-11 129624]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-08 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-19 136176]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-26 257416]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [2012-07-25 139776]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-19 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-09-26 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-03-09 30798512]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-27 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-09 565672]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [2012-07-25 126976]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-09-23 1255736]
S4 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 04 led 2014 19:22

Zdravim

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
Spustte a kliknete na Deletion
Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

Provedte aktualizaci
Provedte uplny sken - nic nemazte
MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

adogeon · #3 Příspěvek od **adogeon** » 04 led 2014 23:24

Tu je log z USBFix:

############################## | UsbFix V 7.134 | [Deletion]

User: Andy (Administrator) # ANDY-PC
Updated 06/09/2013 by El Desaparecido
Started at 19:37:30 | 04/01/2014

Website: http://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: eldesaparecido@sosvirus.net

PC: LENOVO (HuronRiver Platform) (x64-based PC)
CPU: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (2300)
RAM -> [Total : 4010 | Free : 1881]
BIOS: Default System BIOS
BOOT: Normal boot

OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 11.0.9600.16476

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 422 Gb (235 Mb free - 56%) [] # NTFS
D:\ -> Fixed drive # 29 Gb (27 Mb free - 92%) [LENOVO] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> Removable drive # 964 Mb (931 Mb free - 97%) [] # NTFS
I:\ -> Removable drive # 7 Gb (3 Mb free - 41%) [] # NTFS

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE | Run : [UpdateP2GShortCut] - "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
HKLM\SOFTWARE | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE | Run : [KeePass 2 PreLoad] - "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [BCSSync] - "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
HKLM\SOFTWARE | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE | Run : [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM\SOFTWARE | Run : [AdobeCS6ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
HKLM\SOFTWARE\wow6432Node | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE\wow6432Node | Run : [UpdateP2GShortCut] - "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
HKLM\SOFTWARE\wow6432Node | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE\wow6432Node | Run : [KeePass 2 PreLoad] - "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [BCSSync] - "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
HKLM\SOFTWARE\wow6432Node | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE\wow6432Node | Run : [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM\SOFTWARE\wow6432Node | Run : [AdobeCS6ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-2924454097-445526181-3704698798-1002\SOFTWARE | Run : [ShowBatteryBar] - "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
HKU\S-1-5-21-2924454097-445526181-3704698798-1002\SOFTWARE | Run : [DAEMON Tools Lite] - "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-2924454097-445526181-3704698798-1002\SOFTWARE | Run : [AdobeBridge] -
HKU\S-1-5-21-2924454097-445526181-3704698798-1002\SOFTWARE | Run : [DisplayFusion] - "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Stopped processes |

Stopped! C:\windows\system32\nvvsvc.exe (928)
Stopped! c:\Program Files\Microsoft Security Client\MsMpEng.exe (124)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1480)
Stopped! C:\windows\system32\nvvsvc.exe (1488)
Stopped! C:\windows\system32\WLANExt.exe (1592)
Stopped! C:\windows\system32\conhost.exe (1600)
Stopped! C:\windows\System32\spoolsv.exe (1796)
Stopped! C:\windows\system32\taskhost.exe (1948)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1220)
Stopped! C:\windows\Explorer.EXE (1296)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (2444)
Stopped! C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (2488)
Stopped! C:\Program Files\Intel\WiFi\bin\EvtEng.exe (2736)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (2840)
Stopped! C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (2972)
Stopped! C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (3020)
Stopped! C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (1164)
Stopped! C:\windows\System32\alg.exe (1364)
Stopped! C:\windows\system32\rundll32.exe (2996)
Stopped! C:\windows\System32\rundll32.exe (3368)
Stopped! C:\Windows\System32\igfxtray.exe (4032)
Stopped! C:\Windows\System32\hkcmd.exe (4052)
Stopped! C:\Windows\System32\igfxpers.exe (4084)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2828)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3776)
Stopped! C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (3848)
Stopped! C:\Program Files\Microsoft Security Client\msseces.exe (3488)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (676)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (408)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (1456)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (4220)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (4404)
Stopped! C:\windows\system32\SearchIndexer.exe (4544)
Stopped! C:\windows\system32\taskeng.exe (4596)
Stopped! C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (4684)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4848)
Stopped! C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (4892)
Stopped! C:\windows\system32\conhost.exe (4904)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (5096)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (4256)
Stopped! C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (5016)
Stopped! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4632)
Stopped! C:\windows\system32\DllHost.exe (4208)
Stopped! C:\windows\SysWOW64\RunDll32.exe (5484)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe (5504)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe (5600)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (5720)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4864)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (696)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5156)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (6760)
Stopped! C:\windows\system32\taskhost.exe (11768)
Stopped! C:\windows\system32\DllHost.exe (11152)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (10852)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8208)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8944)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (10664)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8116)
Stopped! C:\windows\System32\WUDFHost.exe (11388)

################## | Files # Infected Folders |

Deleted ! C:\Users\Andy\AppData\Local\PUTTY.RND
Deleted ! D:\putty.exe

(!) Temporary files deleted.

################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{7ffd51e7-23a9-11e3-9ec9-f0def1b7a5b3}

################## | Listing |

[21/10/2013 - 19:09:41 | SHD ] C:\$RECYCLE.BIN
[01/12/2013 - 02:10:57 | D ] C:\Assassin's Creed IV Black Flag Gold Edition
[28/09/2013 - 21:33:02 | D ] C:\Dev-Cpp
[14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings
[01/11/2013 - 20:26:17 | D ] C:\Drivers
[04/01/2014 - 12:38:04 | N | 566136] C:\FaceProv.log
[19/12/2011 - 12:19:12 | N | 102] C:\FactoryLog.txt
[03/01/2014 - 12:23:47 | ASH | 3153702912] C:\hiberfil.sys
[19/12/2011 - 03:17:52 | D ] C:\Intel
[19/12/2011 - 03:56:10 | N | 64] C:\Lenovo EE Boot Optimizer.log
[19/12/2011 - 03:44:57 | D ] C:\logfile
[23/09/2013 - 13:18:07 | RHD ] C:\MSOCache
[01/10/2013 - 21:37:55 | D ] C:\NVIDIA
[03/01/2014 - 12:23:50 | ASH | 4204937216] C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] C:\PerfLogs
[04/01/2014 - 18:52:56 | D ] C:\Program Files
[04/01/2014 - 14:44:56 | D ] C:\Program Files (x86)
[04/01/2014 - 14:25:53 | HD ] C:\ProgramData
[22/09/2013 - 13:11:54 | SHD ] C:\Recovery
[19/12/2011 - 03:28:02 | N | 2175] C:\RHDSetup.log
[04/01/2014 - 18:53:09 | D ] C:\rsit
[03/10/2013 - 20:44:40 | D ] C:\swtools
[04/01/2014 - 15:10:44 | SHD ] C:\System Volume Information
[04/01/2014 - 19:40:25 | D ] C:\UsbFix
[04/01/2014 - 19:40:38 | A | 10842] C:\UsbFix [Clean 1] ANDY-PC.txt
[19/12/2011 - 04:09:15 | D ] C:\UserGuidePDF
[03/12/2013 - 11:58:27 | D ] C:\Users
[18/12/2013 - 14:38:26 | D ] C:\Windows
[22/09/2013 - 13:16:01 | SHD ] D:\$RECYCLE.BIN
[23/06/2013 - 12:01:03 | N | 713] D:\addfwrs.bat
[19/12/2011 - 04:07:34 | D ] D:\Application
[19/12/2011 - 04:11:27 | D ] D:\drivers
[19/12/2011 - 12:52:53 | N | 28] D:\IPGPLDOK.TXT
[09/09/2013 - 16:58:11 | D ] D:\KeePass
[08/04/2012 - 08:55:53 | D ] D:\Lenovo
[04/01/2014 - 16:06:31 | SHD ] D:\System Volume Information
[04/01/2014 - 15:16:24 | D ] I:\ANDY-PC
[23/10/2013 - 12:13:52 | N | 528] I:\MediaID.bin

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
I:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

Tu je log z MBAM:

Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2014.01.04.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Andy :: ANDY-PC [administrátor]

4. 1. 2014 21:28:06
MBAM-log-2014-01-04 (23-21-07).txt

Typ kontroly: Úplná kontrola (C:\|D:\|G:\|I:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 415475
Uplynutý čas: 1 hod, 25 min, 28 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 2
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Users\Andy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\071NANZT\Offercast2802_PTV_[1].exe (PUP.Optional.Spigot.A) -> Žiadna úloha nevykonaná.

(koniec)

#4 Příspěvek od **vyosek** » 04 led 2014 23:45

Nalezy nemazte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Dejte log z FRSTLauncheru http://forum.viry.cz/viewtopic.php?f=13&t=133100

adogeon · #5 Příspěvek od **adogeon** » 05 led 2014 00:11

Tu sú tie logy:

Log z ADWCleaner:

# AdwCleaner v3.016 - Report created 04/01/2014 at 23:50:20
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Andy - ANDY-PC
# Running from : C:\Users\Andy\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\Program Files (x86)\NCH Software
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Users\Andy\AppData\Roaming\SimilarSites
File Deleted : C:\windows\System32\Tasks\NCH Software

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\NCH Software

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [1732 octets] - [04/01/2014 23:49:27]
AdwCleaner[S0].txt - [1566 octets] - [04/01/2014 23:50:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1626 octets] ##########

Log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Andy (administrator) on ANDY-PC on 04-01-2014 23:57:16
Running from C:\Users\Andy\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) \\?\C:\windows\system32\wbem\WMIADAP.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13353064 2011-11-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2010-12-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-12-19] (Lenovo)
HKLM\...\Run: [OnekeyStudio] - C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2011-12-19] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9745312 2013-10-02] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [5374880 2013-10-02] (Lenovo(beijing) Limited)
HKLM\...\Run: [ShadowPlay] - C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-12-19] (Lenovo)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2065408 2013-11-03] (Dominik Reichl)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-05] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-05] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] ()
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7952224 2013-11-27] (Binary Fortress Software)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-23] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [141336 2013-11-23] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
SearchScopes: HKCU - ${searchCLSID} URL = http://search.live.com/results.aspx?q={ ... rer:source?}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?sourceid=i ... NN_skSK555
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 player.kmpmedia.net
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.137.7_0\McChPlg.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Extension: (AdBlock) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0
CHR Extension: (Google Wallet) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0

==================== Services (Whitelisted) =================

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1375600 2013-11-27] (Binary Fortress Software)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x]

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8200552 2010-12-15] (Realtek Semiconductor Corp.)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 IAStorDataMgrSvc;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 Oasis2Service;
U2 PCCarerServic;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SoftwareService;
U2 Stereo Service;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-04 23:57 - 2014-01-04 23:58 - 00015987 _____ C:\Users\Andy\Desktop\FRST.txt
2014-01-04 23:56 - 2014-01-04 23:56 - 00000000 ____D C:\FRST
2014-01-04 23:55 - 2014-01-04 23:54 - 01931368 _____ (Farbar) C:\Users\Andy\Desktop\FRST64.exe
2014-01-04 23:54 - 2014-01-04 23:54 - 01931368 _____ (Farbar) C:\Users\Andy\Downloads\FRST64.exe
2014-01-04 23:49 - 2014-01-04 23:50 - 00000000 ____D C:\AdwCleaner
2014-01-04 23:49 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Desktop\adwcleaner.exe
2014-01-04 23:48 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Downloads\adwcleaner.exe
2014-01-04 23:43 - 2014-01-04 23:43 - 00041984 _____ C:\Users\Andy\Downloads\Prihlaska-bak-vysk-orientacia.xls
2014-01-04 21:53 - 2014-01-04 22:11 - 00000000 ____D C:\totalcmd
2014-01-04 21:53 - 2014-01-04 21:53 - 00000646 _____ C:\Users\Andy\Desktop\Total Commander 64 bit.lnk
2014-01-04 21:53 - 2014-01-04 21:53 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-04 21:18 - 2014-01-04 21:18 - 04329488 _____ (Ghisler Software GmbH) C:\Users\Andy\Downloads\tcm801x64.exe
2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Malwarebytes
2014-01-04 19:46 - 2014-01-04 19:46 - 00001069 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-04 19:46 - 2014-01-04 19:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 19:46 - 2014-01-04 19:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 19:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-04 19:45 - 2014-01-04 19:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andy\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 19:37 - 2014-01-04 19:40 - 00011863 _____ C:\UsbFix [Clean 1] ANDY-PC.txt
2014-01-04 19:36 - 2014-01-04 19:40 - 00000000 ____D C:\UsbFix
2014-01-04 19:36 - 2014-01-04 19:34 - 01144875 _____ (El Desaparecido - SosVirus.net) C:\Users\Andy\Desktop\UsbFix.exe
2014-01-04 19:34 - 2014-01-04 19:35 - 00000000 ____D C:\Users\Andy\Documents\Viry
2014-01-04 18:52 - 2014-01-04 18:56 - 00000000 ____D C:\Program Files\trend micro
2014-01-04 18:52 - 2014-01-04 18:53 - 00000000 ____D C:\rsit
2014-01-04 17:09 - 2014-01-04 17:10 - 04779896 _____ (Piriform Ltd) C:\Users\Andy\Downloads\spsetup124.exe
2014-01-04 15:30 - 2014-01-04 15:43 - 81932288 _____ C:\Users\Andy\Downloads\MiSecurity7_64.msi
2014-01-04 14:26 - 2014-01-04 14:26 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2014-01-04 14:25 - 2014-01-04 14:25 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-04 14:23 - 2014-01-04 14:23 - 00283112 _____ (Mozilla) C:\Users\Andy\Downloads\Firefox Setup Stub 26.0.exe
2014-01-02 15:52 - 2014-01-02 15:52 - 01530029 _____ C:\Users\Andy\Documents\Into thin air.xps
2014-01-02 15:38 - 2014-01-02 15:43 - 00000000 ____D C:\Users\Andy\Documents\Under the Banner of Heaven, Into Thin Air
2014-01-02 15:22 - 2014-01-02 15:23 - 18374737 _____ C:\Users\Andy\Downloads\book_8592.zip
2013-12-31 18:35 - 2013-12-31 18:36 - 03220992 _____ C:\Users\Andy\Downloads\kvalita.pps
2013-12-29 23:50 - 2013-12-29 23:50 - 00001599 _____ C:\Users\Andy\Desktop\Blacklist_DX11_game.exe - odkaz.lnk
2013-12-28 19:03 - 2013-12-28 19:04 - 07634593 _____ C:\Users\Andy\Downloads\dumbier.zip
2013-12-28 17:33 - 2013-12-28 17:33 - 00083456 _____ C:\Users\Andy\Downloads\web_2013-2014 (1).xls
2013-12-28 17:31 - 2013-12-28 17:31 - 00083456 _____ C:\Users\Andy\Downloads\web_2013-2014.xls
2013-12-28 17:30 - 2013-12-28 17:30 - 00047104 _____ C:\Users\Andy\Downloads\Zoznam_Erasmus_stazistov_STU_2010-2012.xls
2013-12-28 17:29 - 2013-12-28 17:29 - 00030208 _____ C:\Users\Andy\Downloads\Mesacne_granty_Erasmus_studentom_na_studium_a_staze.xls
2013-12-23 20:30 - 2013-12-23 20:30 - 00116736 _____ C:\Users\Andy\Downloads\plusminus.ppt
2013-12-23 17:03 - 2013-12-23 17:03 - 00000000 ____D C:\Users\Andy\Documents\Avicii - Hey Brother (Incl. Syn Cole Remix)-WEB-2013-UKHx
2013-12-22 19:41 - 2013-12-22 19:41 - 00030396 _____ C:\Users\Andy\Downloads\the-hunger-games-2012_english-741919.zip
2013-12-22 14:58 - 2013-12-22 14:58 - 00028700 _____ C:\Users\Andy\Downloads\the-hunger-games-2012_english-609128.zip
2013-12-22 14:27 - 2013-12-22 14:27 - 00000000 ____D C:\Users\Andy\Documents\Ubisoft
2013-12-22 14:27 - 2013-12-22 14:27 - 00000000 ____D C:\ProgramData\Orbit
2013-12-22 13:55 - 2013-12-22 13:55 - 00001201 _____ C:\Users\Andy\Desktop\Uplay.lnk
2013-12-22 13:55 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-22 13:55 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Andy\AppData\Local\Ubisoft Game Launcher
2013-12-22 13:53 - 2013-12-22 13:53 - 00002486 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-12-22 13:33 - 2013-12-22 13:35 - 03605800 _____ (ESET) C:\Users\Andy\Downloads\SysInspector.exe
2013-12-22 13:20 - 2013-12-22 13:54 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-20 11:21 - 2013-12-30 22:25 - 00000000 ____D C:\Users\Andy\Documents\FIFA 13
2013-12-20 10:59 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2013-12-20 10:59 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2013-12-20 10:59 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_7.dll
2013-12-20 10:59 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_7.dll
2013-12-20 10:59 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2013-12-20 10:59 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2013-12-20 10:59 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2013-12-20 10:59 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2013-12-20 10:58 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_43.dll
2013-12-20 10:58 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_43.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_6.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_6.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_6.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_6.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_4.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_4.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_7.dll
2013-12-20 10:58 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_7.dll
2013-12-20 10:58 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_5.dll
2013-12-20 10:58 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_5.dll
2013-12-20 10:58 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_5.dll
2013-12-20 10:58 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_3.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_42.dll
2013-12-20 10:58 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_42.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_4.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_4.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_4.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_4.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_6.dll
2013-12-20 10:58 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_6.dll
2013-12-20 10:58 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_41.dll
2013-12-20 10:58 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_41.dll
2013-12-20 10:58 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_41.dll
2013-12-20 10:58 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_41.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_3.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_3.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_3.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_3.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_2.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_2.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_5.dll
2013-12-20 10:58 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_5.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_40.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_40.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_40.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_40.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_40.dll
2013-12-20 10:58 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_40.dll
2013-12-20 10:58 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_2.dll
2013-12-20 10:58 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_2.dll
2013-12-20 10:58 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_1.dll
2013-12-20 10:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll
2013-12-20 10:58 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_2.dll
2013-12-20 10:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll
2013-12-20 10:57 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll
2013-12-20 10:57 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_39.dll
2013-12-20 10:57 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll
2013-12-20 10:57 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_39.dll
2013-12-20 10:57 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll
2013-12-20 10:57 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_39.dll
2013-12-20 10:57 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_1.dll
2013-12-20 10:57 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_1.dll
2013-12-20 10:57 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_1.dll
2013-12-20 10:57 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_1.dll
2013-12-20 10:57 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_0.dll
2013-12-20 10:57 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_0.dll
2013-12-20 10:57 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_4.dll
2013-12-20 10:57 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_4.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_38.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_38.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_38.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_38.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_38.dll
2013-12-20 10:57 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_38.dll
2013-12-20 10:57 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_0.dll
2013-12-20 10:57 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_0.dll
2013-12-20 10:57 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_0.dll
2013-12-20 10:57 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_0.dll
2013-12-20 10:57 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_3.dll
2013-12-20 10:57 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_3.dll
2013-12-20 10:57 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_37.dll
2013-12-20 10:57 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_37.dll
2013-12-20 10:57 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_37.dll
2013-12-20 10:57 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_37.dll
2013-12-20 10:57 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_37.dll
2013-12-20 10:57 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_37.dll
2013-12-20 10:57 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_10.dll
2013-12-20 10:57 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_10.dll
2013-12-20 10:57 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_2.dll
2013-12-20 10:57 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_2.dll
2013-12-20 10:57 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_36.dll
2013-12-20 10:57 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_36.dll
2013-12-20 10:57 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_36.dll
2013-12-20 10:57 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_36.dll
2013-12-20 10:57 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_36.dll
2013-12-20 10:57 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_36.dll
2013-12-20 10:57 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_9.dll
2013-12-20 10:57 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_9.dll
2013-12-20 10:57 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_35.dll
2013-12-20 10:57 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_35.dll
2013-12-20 10:57 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_35.dll
2013-12-20 10:57 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_35.dll
2013-12-20 10:57 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_35.dll
2013-12-20 10:57 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_8.dll
2013-12-20 10:57 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_8.dll
2013-12-20 10:57 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_34.dll
2013-12-20 10:57 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_34.dll
2013-12-20 10:57 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_34.dll
2013-12-20 10:57 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_34.dll
2013-12-20 10:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_34.dll
2013-12-20 10:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_34.dll
2013-12-20 10:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_7.dll
2013-12-20 10:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_7.dll
2013-12-20 10:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\windows\system32\xinput1_3.dll
2013-12-20 10:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_3.dll
2013-12-20 10:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_33.dll
2013-12-20 10:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_33.dll
2013-12-20 10:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_33.dll
2013-12-20 10:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_33.dll
2013-12-20 10:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_33.dll
2013-12-20 10:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_33.dll
2013-12-20 10:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\windows\system32\x3daudio1_1.dll
2013-12-20 10:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\windows\SysWOW64\x3daudio1_1.dll
2013-12-20 10:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_6.dll
2013-12-20 10:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_6.dll
2013-12-20 10:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_5.dll
2013-12-20 10:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_5.dll
2013-12-20 10:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10.dll
2013-12-20 10:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10.dll
2013-12-20 10:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_31.dll
2013-12-20 10:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_31.dll
2013-12-20 10:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_4.dll
2013-12-20 10:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_4.dll
2013-12-20 10:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\windows\system32\xinput1_2.dll
2013-12-20 10:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_3.dll
2013-12-20 10:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_3.dll
2013-12-20 10:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_2.dll
2013-12-20 10:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_2.dll
2013-12-20 10:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_2.dll
2013-12-20 10:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_1.dll
2013-12-20 10:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_1.dll
2013-12-20 10:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\windows\system32\xinput1_1.dll
2013-12-20 10:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_1.dll
2013-12-20 10:55 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_30.dll
2013-12-20 10:55 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_30.dll
2013-12-20 10:55 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_29.dll
2013-12-20 10:55 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_29.dll
2013-12-20 10:55 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_0.dll
2013-12-20 10:55 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_0.dll
2013-12-20 10:55 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\windows\system32\x3daudio1_0.dll
2013-12-20 10:55 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\windows\SysWOW64\x3daudio1_0.dll
2013-12-20 10:55 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_28.dll
2013-12-20 10:55 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_28.dll
2013-12-20 10:55 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_27.dll
2013-12-20 10:55 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_27.dll
2013-12-20 10:55 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_26.dll
2013-12-20 10:55 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2013-12-20 10:55 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2013-12-20 10:55 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2013-12-20 10:55 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2013-12-20 10:55 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2013-12-20 10:42 - 2013-12-20 10:51 - 00000000 ____D C:\Program Files (x86)\FIFA 13
2013-12-19 20:51 - 2013-12-19 20:51 - 00031232 _____ C:\Users\Andy\Downloads\20131220.xls
2013-12-19 20:24 - 2013-12-19 20:24 - 00047686 _____ C:\Users\Andy\Downloads\darček_pre_Maťu[1].amr
2013-12-19 19:12 - 2013-12-19 19:13 - 16810715 _____ C:\Users\Andy\Downloads\PPI_skuska_materialy (Andrej Zlocha's conflicted copy 2012-03-19).zip
2013-12-19 19:00 - 2013-12-19 19:00 - 00000000 ____D C:\ProgramData\Origin
2013-12-18 21:55 - 2013-12-18 21:55 - 00008092 _____ C:\Users\Andy\Downloads\peoplia.zip
2013-12-18 21:18 - 2013-12-18 21:27 - 50183939 _____ C:\Users\Andy\Downloads\MaterialyEnglishFIIT.zip
2013-12-18 20:37 - 2013-12-18 20:37 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2013-12-18 17:33 - 2013-12-18 17:36 - 19922767 _____ C:\Users\Andy\Downloads\B2test2013.zip
2013-12-18 05:03 - 2013-12-18 05:03 - 04583424 _____ (Google Inc.) C:\windows\SysWOW64\GPhotos.scr
2013-12-17 19:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_43.dll
2013-12-17 19:43 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_43.dll
2013-12-17 19:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_43.dll
2013-12-17 19:43 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_43.dll
2013-12-17 19:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2013-12-17 19:43 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2013-12-17 19:41 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys
2013-12-17 19:41 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll
2013-12-16 21:44 - 2013-12-16 21:44 - 00062094 _____ C:\Users\Andy\Downloads\TahakC
2013-12-16 21:43 - 2013-12-16 21:43 - 00062094 _____ C:\Users\Andy\Downloads\Tahak C
2013-12-16 15:35 - 2013-12-16 15:35 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_ggsemc_01009.Wdf
2013-12-16 15:35 - 2013-12-16 15:35 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2013-12-16 15:16 - 2013-12-16 15:16 - 00027760 _____ (Sony Ericsson Mobile Communications) C:\windows\system32\Drivers\ggsemc.sys
2013-12-16 15:16 - 2013-12-16 15:16 - 00014448 _____ (Sony Ericsson Mobile Communications) C:\windows\system32\Drivers\ggflt.sys
2013-12-16 15:16 - 2013-12-16 15:16 - 00000000 ____D C:\ProgramData\Sony Mobile
2013-12-16 15:15 - 2013-12-16 15:15 - 00000000 ____D C:\Program Files (x86)\Sony Mobile
2013-12-15 20:41 - 2013-12-15 20:43 - 37588098 _____ C:\Users\Andy\Downloads\Riešené-príklady-zo-skrípt.rar
2013-12-11 13:44 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-11 13:44 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-11 13:44 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-11 13:43 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-11 13:42 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-11 13:42 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-11 13:42 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-11 13:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-11 13:42 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-11 13:42 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-11 13:42 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-11 13:42 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-11 13:42 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-11 13:42 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-11 13:42 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-11 13:42 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-11 13:42 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-11 13:42 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-11 13:42 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-11 13:42 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-11 13:42 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-11 13:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-11 13:42 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-11 13:42 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-11 13:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-11 13:42 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-11 13:42 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-11 13:42 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-11 13:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-11 13:42 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-11 13:42 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-11 13:42 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-11 13:42 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-11 13:42 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-11 13:42 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-11 13:37 - 2013-12-11 13:37 - 02118117 _____ C:\Users\Andy\Downloads\Pocasie.rar
2013-12-11 09:56 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-11 09:56 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-11 09:56 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-11 09:56 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-11 09:56 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-11 09:56 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-11 09:56 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-11 09:56 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-11 09:56 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-11 09:56 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-11 09:56 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-11 09:56 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-11 09:56 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-11 09:56 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-11 09:56 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-11 09:56 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-11 09:56 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-11 09:56 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-11 09:56 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-10 16:48 - 2013-12-10 16:49 - 08795024 _____ C:\Users\Andy\Downloads\briss-0.9.zip
2013-12-10 16:32 - 2013-12-10 16:35 - 79917056 _____ C:\Users\Andy\Downloads\strawberry-perl-5.18.1.1-64bit.msi
2013-12-10 16:20 - 2013-12-10 16:20 - 00023552 _____ (Team CRD) C:\Users\Andy\Downloads\svchost.exe
2013-12-10 16:11 - 2013-12-10 16:13 - 00000000 ____D C:\Users\Andy\AppData\Roaming\DisplayFusion
2013-12-10 16:11 - 2013-12-10 16:11 - 00001067 _____ C:\Users\Andy\Desktop\DisplayFusion.lnk
2013-12-10 15:31 - 2013-12-10 15:31 - 00171008 _____ C:\Users\Andy\Downloads\Excel2LaTeX.xla
2013-12-10 11:35 - 2013-12-10 11:35 - 00001558 _____ C:\Users\Andy\Downloads\literatura.bib
2013-12-10 11:34 - 2013-12-10 11:35 - 00002851 _____ C:\Users\Andy\Downloads\clanok.aux
2013-12-10 11:34 - 2013-12-10 11:35 - 00000972 _____ C:\Users\Andy\Downloads\clanok.bbl
2013-12-10 11:34 - 2013-12-10 11:35 - 00000462 _____ C:\Users\Andy\Downloads\clanok.out
2013-12-10 11:34 - 2013-12-10 11:35 - 00000132 _____ C:\Users\Andy\Downloads\clanok.blg
2013-12-10 11:32 - 2013-12-10 11:35 - 00028579 _____ C:\Users\Andy\Downloads\clanok.log
2013-12-10 11:32 - 2013-12-10 11:35 - 00003613 _____ C:\Users\Andy\Downloads\clanok.tex
2013-12-09 17:39 - 2013-12-09 17:39 - 00000000 __SHD C:\Users\Andy\AppData\Roaming\Common
2013-12-09 17:38 - 2013-12-10 16:11 - 00000000 ____D C:\Program Files (x86)\DisplayFusion
2013-12-09 17:38 - 2013-12-09 17:38 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-12-09 17:37 - 2013-12-09 17:37 - 10343200 _____ (Binary Fortress Software ) C:\Users\Andy\Downloads\DisplayFusionSetup-5.1.1.exe
2013-12-09 17:37 - 2013-12-09 17:37 - 00000000 ____D C:\Users\Andy\Documents\DisplayFusion Backups
2013-12-09 08:34 - 2013-12-09 08:34 - 00000200 _____ C:\Users\Andy\Downloads\xsveca.c
2013-12-05 17:29 - 2013-12-05 17:29 - 00002589 _____ C:\Users\Andy\Downloads\tutorial struktury.c
2013-12-05 17:18 - 2013-12-05 17:18 - 00800088 _____ C:\Users\Andy\Downloads\ENG-SVK.jar
2013-12-05 17:18 - 2013-12-05 17:18 - 00673798 _____ C:\Users\Andy\Downloads\KODi_ENG-SVK_v0.61i_MIDP2.0_FULL.jar

==================== One Month Modified Files and Folders =======

2014-01-04 23:58 - 2014-01-04 23:57 - 00015987 _____ C:\Users\Andy\Desktop\FRST.txt
2014-01-04 23:57 - 2009-07-14 06:13 - 00781790 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-04 23:57 - 2009-07-14 05:51 - 00089662 _____ C:\windows\setupact.log
2014-01-04 23:56 - 2014-01-04 23:56 - 00000000 ____D C:\FRST
2014-01-04 23:55 - 2011-12-19 03:03 - 01626437 _____ C:\windows\WindowsUpdate.log
2014-01-04 23:54 - 2014-01-04 23:55 - 01931368 _____ (Farbar) C:\Users\Andy\Desktop\FRST64.exe
2014-01-04 23:54 - 2014-01-04 23:54 - 01931368 _____ (Farbar) C:\Users\Andy\Downloads\FRST64.exe
2014-01-04 23:52 - 2013-10-02 11:29 - 00000436 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-04 23:52 - 2011-12-19 03:56 - 00256503 _____ C:\windows\system32\fastboot.set
2014-01-04 23:52 - 2011-12-19 03:54 - 00567836 _____ C:\FaceProv.log
2014-01-04 23:52 - 2011-12-19 03:54 - 00000000 ____D C:\ProgramData\VeriFace
2014-01-04 23:51 - 2011-12-19 04:05 - 00000946 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 23:51 - 2010-11-21 04:47 - 00095400 _____ C:\windows\PFRO.log
2014-01-04 23:51 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-04 23:50 - 2014-01-04 23:49 - 00000000 ____D C:\AdwCleaner
2014-01-04 23:48 - 2014-01-04 23:49 - 01233962 _____ C:\Users\Andy\Desktop\adwcleaner.exe
2014-01-04 23:48 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Downloads\adwcleaner.exe
2014-01-04 23:43 - 2014-01-04 23:43 - 00041984 _____ C:\Users\Andy\Downloads\Prihlaska-bak-vysk-orientacia.xls
2014-01-04 23:40 - 2011-12-19 04:05 - 00000950 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 23:17 - 2013-10-19 14:38 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2014-01-04 23:07 - 2013-11-26 19:36 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 22:11 - 2014-01-04 21:53 - 00000000 ____D C:\totalcmd
2014-01-04 22:00 - 2013-10-01 20:32 - 00000000 ____D C:\Users\Andy\AppData\Roaming\uTorrent
2014-01-04 21:53 - 2014-01-04 21:53 - 00000646 _____ C:\Users\Andy\Desktop\Total Commander 64 bit.lnk
2014-01-04 21:53 - 2014-01-04 21:53 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-01-04 21:53 - 2013-09-22 18:17 - 00000000 ____D C:\Users\Andy\AppData\Roaming\GHISLER
2014-01-04 21:18 - 2014-01-04 21:18 - 04329488 _____ (Ghisler Software GmbH) C:\Users\Andy\Downloads\tcm801x64.exe
2014-01-04 19:47 - 2014-01-04 19:47 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Malwarebytes
2014-01-04 19:46 - 2014-01-04 19:46 - 00001069 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-04 19:46 - 2014-01-04 19:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 19:46 - 2014-01-04 19:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 19:46 - 2014-01-04 19:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andy\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 19:40 - 2014-01-04 19:37 - 00011863 _____ C:\UsbFix [Clean 1] ANDY-PC.txt
2014-01-04 19:40 - 2014-01-04 19:36 - 00000000 ____D C:\UsbFix
2014-01-04 19:35 - 2014-01-04 19:34 - 00000000 ____D C:\Users\Andy\Documents\Viry
2014-01-04 19:35 - 2013-09-22 18:18 - 00000000 ____D C:\Users\Andy\AppData\Local\GHISLER
2014-01-04 19:34 - 2014-01-04 19:36 - 01144875 _____ (El Desaparecido - SosVirus.net) C:\Users\Andy\Desktop\UsbFix.exe
2014-01-04 19:02 - 2013-09-27 21:21 - 00023978 _____ C:\Users\Andy\AppData\Roaming\Notepad2.ini
2014-01-04 18:56 - 2014-01-04 18:52 - 00000000 ____D C:\Program Files\trend micro
2014-01-04 18:53 - 2014-01-04 18:52 - 00000000 ____D C:\rsit
2014-01-04 18:50 - 2013-09-22 19:09 - 00000000 ____D C:\Users\Andy\AppData\Roaming\KeePass
2014-01-04 17:12 - 2013-10-03 20:56 - 00000000 ____D C:\Program Files\Speccy
2014-01-04 17:10 - 2014-01-04 17:09 - 04779896 _____ (Piriform Ltd) C:\Users\Andy\Downloads\spsetup124.exe
2014-01-04 15:43 - 2014-01-04 15:30 - 81932288 _____ C:\Users\Andy\Downloads\MiSecurity7_64.msi
2014-01-04 15:25 - 2014-01-03 21:20 - 00322829 ____R C:\Users\Andy\Documents\Under the Banner of Heaven_ A Story of Violent Faith - Jon Krakauer.epub
2014-01-04 14:26 - 2014-01-04 14:26 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2014-01-04 14:25 - 2014-01-04 14:25 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-04 14:23 - 2014-01-04 14:23 - 00283112 _____ (Mozilla) C:\Users\Andy\Downloads\Firefox Setup Stub 26.0.exe
2014-01-03 12:32 - 2009-07-14 05:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 12:32 - 2009-07-14 05:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-02 15:52 - 2014-01-02 15:52 - 01530029 _____ C:\Users\Andy\Documents\Into thin air.xps
2014-01-02 15:43 - 2014-01-02 15:38 - 00000000 ____D C:\Users\Andy\Documents\Under the Banner of Heaven, Into Thin Air
2014-01-02 15:23 - 2014-01-02 15:22 - 18374737 _____ C:\Users\Andy\Downloads\book_8592.zip
2014-01-02 13:50 - 2013-09-25 14:40 - 00000000 ____D C:\Users\Andy\Documents\Visual Studio 2012
2013-12-31 20:28 - 2013-09-22 18:20 - 00000000 ____D C:\Users\Andy\Documents\Maťa
2013-12-31 19:57 - 2013-09-23 13:18 - 00000000 ____D C:\Users\Andy\AppData\Local\Microsoft Help
2013-12-31 18:36 - 2013-12-31 18:35 - 03220992 _____ C:\Users\Andy\Downloads\kvalita.pps
2013-12-30 22:25 - 2013-12-20 11:21 - 00000000 ____D C:\Users\Andy\Documents\FIFA 13
2013-12-30 19:27 - 2013-09-22 18:20 - 00000000 ____D C:\Users\Andy\Documents\KeePass
2013-12-29 23:50 - 2013-12-29 23:50 - 00001599 _____ C:\Users\Andy\Desktop\Blacklist_DX11_game.exe - odkaz.lnk
2013-12-28 19:04 - 2013-12-28 19:03 - 07634593 _____ C:\Users\Andy\Downloads\dumbier.zip
2013-12-28 17:33 - 2013-12-28 17:33 - 00083456 _____ C:\Users\Andy\Downloads\web_2013-2014 (1).xls
2013-12-28 17:31 - 2013-12-28 17:31 - 00083456 _____ C:\Users\Andy\Downloads\web_2013-2014.xls
2013-12-28 17:30 - 2013-12-28 17:30 - 00047104 _____ C:\Users\Andy\Downloads\Zoznam_Erasmus_stazistov_STU_2010-2012.xls
2013-12-28 17:29 - 2013-12-28 17:29 - 00030208 _____ C:\Users\Andy\Downloads\Mesacne_granty_Erasmus_studentom_na_studium_a_staze.xls
2013-12-26 10:23 - 2013-09-22 13:13 - 00000000 ____D C:\Users\Andy
2013-12-24 17:16 - 2013-09-22 13:16 - 00114608 _____ C:\Users\Andy\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-24 17:16 - 2009-07-14 05:45 - 05062200 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-23 20:30 - 2013-12-23 20:30 - 00116736 _____ C:\Users\Andy\Downloads\plusminus.ppt
2013-12-23 20:21 - 2013-09-22 13:13 - 00001122 _____ C:\Users\Andy\Desktop\Cyberlink Power2Go.lnk
2013-12-23 17:03 - 2013-12-23 17:03 - 00000000 ____D C:\Users\Andy\Documents\Avicii - Hey Brother (Incl. Syn Cole Remix)-WEB-2013-UKHx
2013-12-22 19:41 - 2013-12-22 19:41 - 00030396 _____ C:\Users\Andy\Downloads\the-hunger-games-2012_english-741919.zip
2013-12-22 14:58 - 2013-12-22 14:58 - 00028700 _____ C:\Users\Andy\Downloads\the-hunger-games-2012_english-609128.zip
2013-12-22 14:27 - 2013-12-22 14:27 - 00000000 ____D C:\Users\Andy\Documents\Ubisoft
2013-12-22 14:27 - 2013-12-22 14:27 - 00000000 ____D C:\ProgramData\Orbit
2013-12-22 13:55 - 2013-12-22 13:55 - 00001201 _____ C:\Users\Andy\Desktop\Uplay.lnk
2013-12-22 13:55 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-22 13:55 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Andy\AppData\Local\Ubisoft Game Launcher
2013-12-22 13:54 - 2013-12-22 13:20 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-22 13:54 - 2011-12-19 04:00 - 00091458 _____ C:\windows\DirectX.log
2013-12-22 13:53 - 2013-12-22 13:53 - 00002486 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-12-22 13:35 - 2013-12-22 13:33 - 03605800 _____ (ESET) C:\Users\Andy\Downloads\SysInspector.exe
2013-12-22 13:20 - 2011-12-19 03:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-20 17:47 - 2013-12-20 10:46 - 00000000 ____D C:\Users\Andy\Documents\Splinter.Cell.Blacklist-RELOADED
2013-12-20 10:51 - 2013-12-20 10:42 - 00000000 ____D C:\Program Files (x86)\FIFA 13
2013-12-19 22:56 - 2013-12-19 19:46 - 00000000 ____D C:\Users\Andy\Documents\FIFA.13-RELOADED
2013-12-19 20:51 - 2013-12-19 20:51 - 00031232 _____ C:\Users\Andy\Downloads\20131220.xls
2013-12-19 20:24 - 2013-12-19 20:24 - 00047686 _____ C:\Users\Andy\Downloads\darček_pre_Maťu[1].amr
2013-12-19 19:13 - 2013-12-19 19:12 - 16810715 _____ C:\Users\Andy\Downloads\PPI_skuska_materialy (Andrej Zlocha's conflicted copy 2012-03-19).zip
2013-12-19 19:00 - 2013-12-19 19:00 - 00000000 ____D C:\ProgramData\Origin
2013-12-18 21:55 - 2013-12-18 21:55 - 00008092 _____ C:\Users\Andy\Downloads\peoplia.zip
2013-12-18 21:27 - 2013-12-18 21:18 - 50183939 _____ C:\Users\Andy\Downloads\MaterialyEnglishFIIT.zip
2013-12-18 20:37 - 2013-12-18 20:37 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2013-12-18 17:36 - 2013-12-18 17:33 - 19922767 _____ C:\Users\Andy\Downloads\B2test2013.zip
2013-12-18 05:03 - 2013-12-18 05:03 - 04583424 _____ (Google Inc.) C:\windows\SysWOW64\GPhotos.scr
2013-12-16 21:44 - 2013-12-16 21:44 - 00062094 _____ C:\Users\Andy\Downloads\TahakC
2013-12-16 21:43 - 2013-12-16 21:43 - 00062094 _____ C:\Users\Andy\Downloads\Tahak C
2013-12-16 15:35 - 2013-12-16 15:35 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_ggsemc_01009.Wdf
2013-12-16 15:35 - 2013-12-16 15:35 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2013-12-16 15:16 - 2013-12-16 15:16 - 00027760 _____ (Sony Ericsson Mobile Communications) C:\windows\system32\Drivers\ggsemc.sys
2013-12-16 15:16 - 2013-12-16 15:16 - 00014448 _____ (Sony Ericsson Mobile Communications) C:\windows\system32\Drivers\ggflt.sys
2013-12-16 15:16 - 2013-12-16 15:16 - 00000000 ____D C:\ProgramData\Sony Mobile
2013-12-16 15:15 - 2013-12-16 15:15 - 00000000 ____D C:\Program Files (x86)\Sony Mobile
2013-12-15 22:38 - 2013-09-29 20:00 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Skype
2013-12-15 22:26 - 2013-10-10 20:26 - 00000000 ____D C:\Users\Andy\Documents\Youcam
2013-12-15 20:43 - 2013-12-15 20:41 - 37588098 _____ C:\Users\Andy\Downloads\Riešené-príklady-zo-skrípt.rar
2013-12-14 21:58 - 2013-09-25 21:24 - 00000000 ____D C:\windows\system32\MRT
2013-12-14 21:55 - 2013-09-25 21:24 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-12 16:07 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-12 12:04 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-11 22:45 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\sk-SK
2013-12-11 22:45 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\sk-SK
2013-12-11 13:43 - 2013-09-23 13:18 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 13:37 - 2013-12-11 13:37 - 02118117 _____ C:\Users\Andy\Downloads\Pocasie.rar
2013-12-10 16:49 - 2013-12-10 16:48 - 08795024 _____ C:\Users\Andy\Downloads\briss-0.9.zip
2013-12-10 16:35 - 2013-12-10 16:32 - 79917056 _____ C:\Users\Andy\Downloads\strawberry-perl-5.18.1.1-64bit.msi
2013-12-10 16:20 - 2013-12-10 16:20 - 00023552 _____ (Team CRD) C:\Users\Andy\Downloads\svchost.exe
2013-12-10 16:13 - 2013-12-10 16:11 - 00000000 ____D C:\Users\Andy\AppData\Roaming\DisplayFusion
2013-12-10 16:11 - 2013-12-10 16:11 - 00001067 _____ C:\Users\Andy\Desktop\DisplayFusion.lnk
2013-12-10 16:11 - 2013-12-09 17:38 - 00000000 ____D C:\Program Files (x86)\DisplayFusion
2013-12-10 15:31 - 2013-12-10 15:31 - 00171008 _____ C:\Users\Andy\Downloads\Excel2LaTeX.xla
2013-12-10 11:35 - 2013-12-10 11:35 - 00001558 _____ C:\Users\Andy\Downloads\literatura.bib
2013-12-10 11:35 - 2013-12-10 11:34 - 00002851 _____ C:\Users\Andy\Downloads\clanok.aux
2013-12-10 11:35 - 2013-12-10 11:34 - 00000972 _____ C:\Users\Andy\Downloads\clanok.bbl
2013-12-10 11:35 - 2013-12-10 11:34 - 00000462 _____ C:\Users\Andy\Downloads\clanok.out
2013-12-10 11:35 - 2013-12-10 11:34 - 00000132 _____ C:\Users\Andy\Downloads\clanok.blg
2013-12-10 11:35 - 2013-12-10 11:32 - 00028579 _____ C:\Users\Andy\Downloads\clanok.log
2013-12-10 11:35 - 2013-12-10 11:32 - 00003613 _____ C:\Users\Andy\Downloads\clanok.tex
2013-12-10 03:13 - 2013-10-29 11:42 - 01100248 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2013-10-29 11:42 - 00982232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll
2013-12-09 17:39 - 2013-12-09 17:39 - 00000000 __SHD C:\Users\Andy\AppData\Roaming\Common
2013-12-09 17:38 - 2013-12-09 17:38 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-12-09 17:37 - 2013-12-09 17:37 - 10343200 _____ (Binary Fortress Software ) C:\Users\Andy\Downloads\DisplayFusionSetup-5.1.1.exe
2013-12-09 17:37 - 2013-12-09 17:37 - 00000000 ____D C:\Users\Andy\Documents\DisplayFusion Backups
2013-12-09 08:34 - 2013-12-09 08:34 - 00000200 _____ C:\Users\Andy\Downloads\xsveca.c
2013-12-07 21:52 - 2013-11-03 19:18 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-07 21:52 - 2013-09-29 20:00 - 00000000 ____D C:\ProgramData\Skype
2013-12-05 21:42 - 2011-12-19 04:06 - 00002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-05 18:17 - 2013-11-13 06:29 - 00000000 ____D C:\Users\Andy\Desktop\mamik
2013-12-05 17:29 - 2013-12-05 17:29 - 00002589 _____ C:\Users\Andy\Downloads\tutorial struktury.c
2013-12-05 17:18 - 2013-12-05 17:18 - 00800088 _____ C:\Users\Andy\Downloads\ENG-SVK.jar
2013-12-05 17:18 - 2013-12-05 17:18 - 00673798 _____ C:\Users\Andy\Downloads\KODi_ENG-SVK_v0.61i_MIDP2.0_FULL.jar
2013-12-05 16:35 - 2011-12-19 04:05 - 00003946 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-05 16:35 - 2011-12-19 04:05 - 00003694 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 09:42 - 2013-12-17 19:41 - 00039200 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys
2013-12-05 09:42 - 2013-12-17 19:41 - 00032544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll
2013-12-05 09:42 - 2013-10-01 21:41 - 00035104 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll

Some content of TEMP:
====================
C:\Users\Andy\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-30 21:00

==================== End Of Log ============================

#6 Příspěvek od **vyosek** » 05 led 2014 08:57

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
SearchScopes: HKCU - ${searchCLSID} URL = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN_skSK555

CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.137.7_0\McChPlg.dll No File

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x]

U2 CLKMSVC10_C3B3B687; 
U2 DriverService; 
U2 IAStorDataMgrSvc; 
U2 idealife Update Service; 
U3 IGRS; 
U2 IviRegMgr; 
U2 Oasis2Service; 
U2 PCCarerServic; 
U2 ReadyComm.DirectRouter; 
U2 RichVideo; 
U2 RtLedService; 
U2 SoftwareService; 
U2 Stereo Service; 

2014-01-04 23:49 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Desktop\adwcleaner.exe
2014-01-04 23:48 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Downloads\adwcleaner.exe
2014-01-04 19:45 - 2014-01-04 19:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andy\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 19:37 - 2014-01-04 19:40 - 00011863 _____ C:\UsbFix [Clean 1] ANDY-PC.txt
2014-01-04 19:36 - 2014-01-04 19:40 - 00000000 ____D C:\UsbFix
2014-01-04 19:36 - 2014-01-04 19:34 - 01144875 _____ (El Desaparecido - SosVirus.net) C:\Users\Andy\Desktop\UsbFix.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

c:\PROGRA~2\mcafee
C:\Users\Andy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\071NANZT\Offercast2802_PTV_[1].exe 
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

adogeon · #7 Příspěvek od **adogeon** » 05 led 2014 13:00

Fixlog.txt:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-01-2014
Ran by Andy at 2014-01-05 12:55:34 Run:1
Running from C:\Users\Andy\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
SearchScopes: HKCU - ${searchCLSID} URL = http://search.live.com/results.aspx?q={ ... rer:source?}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?sourceid=i ... NN_skSK555

CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.137.7_0\McChPlg.dll No File

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x]

U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 IAStorDataMgrSvc;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 Oasis2Service;
U2 PCCarerServic;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SoftwareService;
U2 Stereo Service;

2014-01-04 23:49 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Desktop\adwcleaner.exe
2014-01-04 23:48 - 2014-01-04 23:48 - 01233962 _____ C:\Users\Andy\Downloads\adwcleaner.exe
2014-01-04 19:45 - 2014-01-04 19:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andy\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 19:37 - 2014-01-04 19:40 - 00011863 _____ C:\UsbFix [Clean 1] ANDY-PC.txt
2014-01-04 19:36 - 2014-01-04 19:40 - 00000000 ____D C:\UsbFix
2014-01-04 19:36 - 2014-01-04 19:34 - 01144875 _____ (El Desaparecido - SosVirus.net) C:\Users\Andy\Desktop\UsbFix.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

c:\PROGRA~2\mcafee
C:\Users\Andy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\071NANZT\Offercast2802_PTV_[1].exe
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\UpdatePRCShortCut => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Nvtmru => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GShortCut => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdatePRCShortCut => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BCSSync => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Secondary Start Pages => Value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Secondary Start Pages => Value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search bar => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\${searchCLSID} => Key deleted successfully.
HKCR\CLSID\${searchCLSID} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.137.7_0\McChPlg.dll not found.
McAfee SiteAdvisor Service => Service deleted successfully.
CLKMSVC10_C3B3B687 => Service deleted successfully.
DriverService => Service deleted successfully.
IAStorDataMgrSvc => Service deleted successfully.
idealife Update Service => Service deleted successfully.
IGRS => Service deleted successfully.
IviRegMgr => Service deleted successfully.
Oasis2Service => Service deleted successfully.
PCCarerServic => Service deleted successfully.
ReadyComm.DirectRouter => Service deleted successfully.
RichVideo => Service deleted successfully.
RtLedService => Service deleted successfully.
SoftwareService => Service deleted successfully.
Stereo Service => Service deleted successfully.
C:\Users\Andy\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Andy\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\Andy\Downloads\mbam-setup-1.75.0.1300.exe => Moved successfully.
C:\UsbFix [Clean 1] ANDY-PC.txt => Moved successfully.
C:\UsbFix => Moved successfully.
C:\Users\Andy\Desktop\UsbFix.exe => Moved successfully.
C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
c:\PROGRA~2\mcafee => Moved successfully.
C:\Users\Andy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\071NANZT\Offercast2802_PTV_[1].exe => Moved successfully.
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

==== End of Fixlog ====

#8 Příspěvek od **vyosek** » 05 led 2014 21:55

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

adogeon · #9 Příspěvek od **adogeon** » 05 led 2014 22:21

Naozaj ďakujem pekne. Robíte super robotu.

Budem Vás odporúčať, kde sa dá.
Ak by Vám to nevadilo, mohli by ste mi napísať, či ste videli niečo nezvyčajné, ako pozostatky po vírusoch, alebo som mal v počítači iba nejaké zvyšky po starých aplikáciách?

#10 Příspěvek od **vyosek** » 06 led 2014 14:07

Bylo tam hodne reklaminiho nezadouciho SW, chce to cist co se instaluje jako doprovod - vice zde http://www.viry.cz/pozor-na-to-co-vsech ... -pocitace/

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Trojan:Win32/Sisron a zvysky po nom

Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom

Re: Trojan:Win32/Sisron a zvysky po nom