API tools faq
paste
Guest User

Logvir

a guest
Mar 1st, 2014
178
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.20 KB | None | 0 0
raw download clone embed print report
  1. Logfile of random's system information tool 1.09 (written by random/random)
  2. Run by Michal at 2014-03-01 15:11:00
  3. Microsoft Windows 7 Home Premium Service Pack 1
  4. System drive C: has 416 GB (87%) free of 477 GB
  5. Total RAM: 8094 MB (73% free)
  6.  
  7. Logfile of Trend Micro HijackThis v2.0.4
  8. Scan saved at 15:11:03, on 1.3.2014
  9. Platform: Windows 7 SP1 (WinNT 6.00.3505)
  10. MSIE: Internet Explorer v11.0 (11.00.9600.16518)
  11. Boot mode: Normal
  12.  
  13. Running processes:
  14. C:\Windows\DAODx.exe
  15. C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe
  16. D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTray.exe
  17. C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
  18. D:\Záloha\Other\Monitor.EXE
  19. C:\Program Files\AVAST Software\Avast\AvastUI.exe
  20. C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
  21. C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
  22. D:\Záloha\Other\OSD.exe
  23. C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  24. C:\Program Files (x86)\Skype\Phone\Skype.exe
  25. C:\Program Files\trend micro\Michal.exe
  26.  
  27. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  28. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
  29. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  30. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  31. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
  32. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  33. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  34. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  35. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  36. R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE.dll
  37. O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE.dll
  38. O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  39. O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
  40. O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  41. O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
  42. O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  43. O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE.dll
  44. O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
  45. O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "D:\Záloha\Other\Monitor.exe"
  46. O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
  47. O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  48. O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
  49. O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
  50. O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe" Minimum
  51. O4 - HKCU\..\Run: [Zoner Photo Studio Service 16] "D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXED:\Záloha\Zoner\Photo Studio 16\Program32\ZPSService.exe"
  52. O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE"
  53. O4 - Startup: Dropbox.lnk = Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
  54. O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
  55. O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
  56. O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  57. O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  58. O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  59. O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  60. O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  61. O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
  62. O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
  63. O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
  64. O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
  65. O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  66. O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  67. O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
  68. O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
  69. O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
  70. O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
  71. O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
  72. O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  73. O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
  74. O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
  75. O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
  76. O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  77. O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  78. O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  79. O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  80. O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
  81. O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  82. O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
  83. O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  84. O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
  85. O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  86. O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
  87. O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
  88. O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  89. O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
  90. O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  91. O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
  92. O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
  93. O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
  94. O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
  95. O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  96. O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
  97. O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
  98. O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  99. O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
  100. O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
  101. O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
  102. O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
  103. O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
  104. O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  105.  
  106. --
  107. End of file - 10615 bytes
  108.  
  109. ======Listing Processes======
  110.  
  111. \SystemRoot\System32\smss.exe
  112. %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  113. wininit.exe
  114. %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  115. winlogon.exe
  116. C:\Windows\system32\services.exe
  117. C:\Windows\system32\lsass.exe
  118. C:\Windows\system32\lsm.exe
  119. C:\Windows\system32\svchost.exe -k DcomLaunch
  120. C:\Windows\system32\svchost.exe -k RPCSS
  121. C:\Windows\system32\atiesrxx.exe
  122. C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
  123. C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
  124. C:\Windows\system32\svchost.exe -k LocalService
  125. C:\Windows\system32\svchost.exe -k netsvcs
  126. C:\Windows\system32\svchost.exe -k GPSvcGroup
  127. atieclxx
  128. C:\Windows\system32\svchost.exe -k NetworkService
  129. "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
  130. "C:\Windows\system32\Dwm.exe"
  131. C:\Windows\Explorer.EXE
  132. C:\Windows\System32\spoolsv.exe
  133. "taskhost.exe"
  134. C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
  135. taskeng.exe {709F08E0-7B47-475C-9C18-4B5D25F0ED40}
  136. "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
  137. taskeng.exe {FCB0867B-A168-489A-A169-0F423BDD0D7D}
  138. "C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
  139. C:\Windows\DAODx.exe
  140. "C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
  141. "C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
  142. "C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe" Minimum
  143. "D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTray.exe"
  144. "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
  145. C:\Windows\SysWOW64\PnkBstrA.exe
  146. "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
  147. C:\Windows\system32\svchost.exe -k imgsvc
  148. "C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
  149. "C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
  150. "D:\Záloha\Other\Monitor.EXE"
  151. "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
  152. "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
  153. "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
  154. C:\Windows\System32\svchost.exe -k secsvcs
  155. "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe" HOOK -Dwthx178.dll -IE"DefaultScope" -GC"C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Web Data" -FF"C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\Prefs.js"
  156. "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
  157. "D:\Záloha\Other\OSD.exe"
  158. "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
  159. C:\Windows\system32\SearchIndexer.exe /Embedding
  160. C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
  161. "C:\Program Files\Windows Media Player\wmpnetwk.exe"
  162. C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
  163. "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
  164. "C:\Program Files (x86)\Skype\Phone\Skype.exe"
  165. C:\Windows\system32\wbem\wmiprvse.exe
  166. C:\Windows\System32\svchost.exe -k LocalServicePeerNet
  167. C:\Windows\system32\sppsvc.exe
  168. "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
  169. "C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
  170. "C:\Users\Michal\Desktop\RSITx64.exe"
  171. C:\Windows\system32\wbem\wmiprvse.exe
  172.  
  173. ======Scheduled tasks folder======
  174.  
  175. C:\Windows\tasks\Adobe Flash Player Updater.job
  176. C:\Windows\tasks\AutoKMS.job
  177. C:\Windows\tasks\AutoKMSDaily.job
  178. C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  179. C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  180. C:\Windows\tasks\update-S-1-5-21-3938224926-2978293772-4027795847-1000.job
  181. C:\Windows\tasks\update-sys.job
  182.  
  183. =========Mozilla firefox=========
  184.  
  185. ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default
  186.  
  187. prefs.js - "browser.startup.homepage" - "https://www.google.cz/"
  188.  
  189. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
  190. "Description"=Adobe® Flash® Player 12.0.0.70 Plugin
  191. "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll
  192.  
  193. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
  194. "Description"=ESN Sonar browser plugin
  195. "Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
  196.  
  197. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.3.2]
  198. "Description"=
  199. "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll
  200.  
  201. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
  202. "Description"=
  203. "Path"=disabled
  204.  
  205. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  206. "Description"=Office Authorization plug-in for NPAPI browsers
  207. "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
  208.  
  209. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
  210. "Description"=Microsoft SharePoint Plug-in for Firefox
  211. "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
  212.  
  213. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
  214. "Description"=This plugin detects and launches Pando Media Booster
  215. "Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
  216.  
  217. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
  218. "Description"=Google Update
  219. "Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll
  220.  
  221. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
  222. "Description"=Google Update
  223. "Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll
  224.  
  225. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
  226. "Description"=Handles PDFs in-place in Firefox
  227. "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
  228.  
  229.  
  230. [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
  231. "Description"=Adobe® Flash® Player 12.0.0.70 Plugin
  232. "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll
  233.  
  234. [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
  235. "Description"=Java™ Deployment Toolkit
  236. "Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
  237.  
  238. [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
  239. "Description"=Oracle® Next Generation Java™ Plug-In
  240. "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
  241.  
  242. [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
  243. "Description"=
  244. "Path"=disabled
  245.  
  246. [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  247. "Description"=Office Authorization plug-in for NPAPI browsers
  248. "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
  249.  
  250.  
  251. C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\searchplugins\
  252. ask-search.xml
  253. firmy.cz-092415.xml
  254. mapy.cz-092415.xml
  255. seznam.cz-092415.xml
  256. videa.seznam.cz-092415.xml
  257. yahoo.xml
  258. zbozi.cz-092415.xml
  259.  
  260. ======Registry dump======
  261.  
  262. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
  263. avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-25 1390368]
  264.  
  265. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
  266. SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]
  267.  
  268. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
  269. Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-16 553384]
  270.  
  271. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
  272. avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-25 1390368]
  273.  
  274. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  275. Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
  276.  
  277. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  278. Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-16 210856]
  279.  
  280. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
  281. IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE.dll [2014-02-19 1398592]
  282.  
  283. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
  284. Podpora odkazu pro Adobe PDF Reader - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23 72336]
  285.  
  286. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
  287. SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]
  288.  
  289. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
  290. avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-25 1143168]
  291.  
  292. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  293. Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
  294.  
  295. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  296. {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-25 1390368]
  297. {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-25 1390368]
  298. {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE64.dll [2014-02-19 1997120]
  299.  
  300. [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
  301. {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-25 1143168]
  302. {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.8\iobitappsToolbarIE.dll [2014-02-19 1398592]
  303.  
  304. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  305. "Bloody2"=C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe [2013-08-30 11895808]
  306. "Zoner Photo Studio Service 16"=D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
  307. "Zoner Photo Studio Autoupdate"=D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
  308.  
  309. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Autodesk Sync]
  310. C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2012-02-05 415680]
  311.  
  312. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamWizard]
  313. C:\Program Files (x86)\Common Files\Logitech\QCDRV\BIN\CamWizrd.exe [2004-12-15 180224]
  314.  
  315. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
  316. C:\Users\Michal\AppData\Roaming\Seznam.cz\szninstall.exe -c []
  317.  
  318. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
  319. C:\Users\Michal\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []
  320.  
  321. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
  322. C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
  323.  
  324. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightShot]
  325. C:\Users\Michal\AppData\Local\Skillbrains\lightshot\LightShot.exe [2013-09-27 226592]
  326.  
  327. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair]
  328. C:\Program Files (x86)\Logitech\Video\ISStart.exe [2004-12-14 458752]
  329.  
  330. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
  331. C:\Program Files (x86)\Logitech\Video\LogiTray.exe [2004-12-14 217088]
  332.  
  333. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
  334. C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-02-26 3814736]
  335.  
  336. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MKLOL]
  337. C:\Program Files (x86)\MKJogo\MKLOL\MK.exe [2014-01-24 846536]
  338.  
  339. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
  340. C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
  341.  
  342. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NextLive]
  343. C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]
  344.  
  345. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pokki]
  346. C:\Users\Michal\AppData\Local\Pokki\Engine\Launcher.dll,RunLaunchPlatform []
  347.  
  348. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
  349. C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2014-02-19 1387328]
  350.  
  351. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
  352. C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []
  353.  
  354. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
  355. C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02 20472992]
  356.  
  357. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
  358. d:\steam\steam.exe [2014-01-27 1815976]
  359.  
  360. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
  361. D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
  362.  
  363. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Service 16]
  364. D:\Záloha\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
  365.  
  366. [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Michal^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
  367. C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe [2014-01-03 30714328]
  368.  
  369. [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  370. "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-08-30 766208]
  371. "VICTORY Gaming Keyboard"=D:\Záloha\Other\Monitor.exe [2013-04-09 270336]
  372. "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-25 3767096]
  373. "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
  374. ""= []
  375. "SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2014-02-19 1387328]
  376. "LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-02-26 3814736]
  377.  
  378. C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  379. Dropbox.lnk - C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
  380.  
  381. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  382. WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
  383.  
  384. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
  385. "SecurityProviders"=credssp.dll
  386.  
  387. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
  388.  
  389. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
  390.  
  391. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  392. "ConsentPromptBehaviorAdmin"=5
  393. "ConsentPromptBehaviorUser"=3
  394. "EnableUIADesktopToggle"=0
  395. "PromptOnSecureDesktop"=0
  396. "dontdisplaylastusername"=0
  397. "legalnoticecaption"=
  398. "legalnoticetext"=
  399. "shutdownwithoutlogon"=1
  400. "undockwithoutlogon"=1
  401.  
  402. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  403. "NoDrives"=0
  404. ""=
  405.  
  406. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  407. "NoDrives"=0
  408.  
  409. [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  410.  
  411. [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
  412.  
  413. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
  414. "vidc.mrle"=msrle32.dll
  415. "vidc.msvc"=msvidc32.dll
  416. "msacm.imaadpcm"=imaadp32.acm
  417. "msacm.msg711"=msg711.acm
  418. "msacm.msgsm610"=msgsm32.acm
  419. "msacm.msadpcm"=msadp32.acm
  420. "midimapper"=midimap.dll
  421. "wavemapper"=msacm32.drv
  422. "VIDC.UYVY"=msyuv.dll
  423. "VIDC.YUY2"=msyuv.dll
  424. "VIDC.YVYU"=msyuv.dll
  425. "VIDC.IYUV"=iyuv_32.dll
  426. "vidc.i420"=iyuv_32.dll
  427. "VIDC.YVU9"=tsbyuv.dll
  428. "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
  429. "wave"=wdmaud.drv
  430. "midi"=wdmaud.drv
  431. "mixer"=wdmaud.drv
  432. "aux"=wdmaud.drv
  433. "wave2"=wdmaud.drv
  434. "midi2"=wdmaud.drv
  435. "mixer2"=wdmaud.drv
  436. "aux2"=wdmaud.drv
  437. "wave3"=wdmaud.drv
  438. "midi3"=wdmaud.drv
  439. "mixer3"=wdmaud.drv
  440. "aux3"=wdmaud.drv
  441. "wave1"=wdmaud.drv
  442. "midi1"=wdmaud.drv
  443. "mixer1"=wdmaud.drv
  444. "aux1"=wdmaud.drv
  445. "MSVideo8"=VfWWDM32.dll
  446. "wave4"=wdmaud.drv
  447. "midi4"=wdmaud.drv
  448. "mixer4"=wdmaud.drv
  449. "aux4"=wdmaud.drv
  450.  
  451. ======File associations======
  452.  
  453. .js - edit - C:\Windows\System32\Notepad.exe %1
  454. .scr - open - C:\Windows\system32\notepad.exe "%1"
  455. .scr - install -
  456. .scr - config -
  457.  
  458. ======List of files/folders created in the last 1 month======
  459.  
  460. 2014-03-01 15:11:00 ----D---- C:\rsit
  461. 2014-02-27 22:29:30 ----SHD---- C:\Config.Msi
  462. 2014-02-27 18:37:14 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
  463. 2014-02-27 18:37:09 ----D---- C:\Program Files (x86)\TeamViewer
  464. 2014-02-27 13:48:28 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
  465. 2014-02-23 10:34:48 ----D---- C:\Users\Michal\AppData\Roaming\libraries
  466. 2014-02-23 10:34:25 ----D---- C:\Users\Michal\AppData\Roaming\versions
  467. 2014-02-22 15:58:18 ----D---- C:\Program Files (x86)\Mafia 2 Multiplayer
  468. 2014-02-21 21:24:19 ----D---- C:\Program Files (x86)\IObit Apps Toolbar
  469. 2014-02-21 21:24:19 ----D---- C:\Program Files (x86)\Application Updater
  470. 2014-02-14 21:23:44 ----D---- C:\Windows\SYSWOW64\temp
  471. 2014-02-14 21:23:44 ----D---- C:\ProgramData\PassMark
  472. 2014-02-14 21:23:42 ----D---- C:\Program Files (x86)\BurnInTest
  473. 2014-02-14 14:49:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
  474. 2014-02-12 22:30:09 ----A---- C:\Windows\SYSWOW64\vbscript.dll
  475. 2014-02-12 22:30:09 ----A---- C:\Windows\system32\vbscript.dll
  476. 2014-02-12 22:29:40 ----A---- C:\Windows\SYSWOW64\msrating.dll
  477. 2014-02-12 22:29:40 ----A---- C:\Windows\system32\msrating.dll
  478. 2014-02-12 22:29:39 ----A---- C:\Windows\SYSWOW64\ieui.dll
  479. 2014-02-12 22:29:39 ----A---- C:\Windows\system32\ieui.dll
  480. 2014-02-12 22:29:39 ----A---- C:\Windows\system32\iernonce.dll
  481. 2014-02-12 22:29:39 ----A---- C:\Windows\system32\ieetwcollectorres.dll
  482. 2014-02-12 22:29:39 ----A---- C:\Windows\system32\ie4uinit.exe
  483. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
  484. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
  485. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
  486. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\iesetup.dll
  487. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
  488. 2014-02-12 22:29:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
  489. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\msfeeds.dll
  490. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\jsproxy.dll
  491. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\ieUnatt.exe
  492. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\iesetup.dll
  493. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
  494. 2014-02-12 22:29:38 ----A---- C:\Windows\system32\ieetwcollector.exe
  495. 2014-02-12 22:29:37 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
  496. 2014-02-12 22:29:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
  497. 2014-02-12 22:29:37 ----A---- C:\Windows\system32\mshtml.dll
  498. 2014-02-12 22:29:37 ----A---- C:\Windows\system32\jscript9diag.dll
  499. 2014-02-12 22:29:37 ----A---- C:\Windows\system32\ieapfltr.dll
  500. 2014-02-12 22:29:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
  501. 2014-02-12 22:29:36 ----A---- C:\Windows\SYSWOW64\urlmon.dll
  502. 2014-02-12 22:29:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
  503. 2014-02-12 22:29:36 ----A---- C:\Windows\system32\wininet.dll
  504. 2014-02-12 22:29:36 ----A---- C:\Windows\system32\urlmon.dll
  505. 2014-02-12 22:29:36 ----A---- C:\Windows\system32\iertutil.dll
  506. 2014-02-12 22:29:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
  507. 2014-02-12 22:29:35 ----A---- C:\Windows\system32\ieframe.dll
  508. 2014-02-12 22:29:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
  509. 2014-02-12 22:29:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
  510. 2014-02-12 22:29:34 ----A---- C:\Windows\system32\jscript9.dll
  511. 2014-02-12 16:22:00 ----A---- C:\Windows\system32\msxml3.dll
  512. 2014-02-12 16:21:59 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
  513. 2014-02-12 16:21:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
  514. 2014-02-12 16:21:59 ----A---- C:\Windows\system32\msxml3r.dll
  515. 2014-02-12 16:21:57 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
  516. 2014-02-12 16:21:57 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
  517. 2014-02-12 16:21:57 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
  518. 2014-02-12 16:21:57 ----A---- C:\Windows\system32\RMActivate_isv.exe
  519. 2014-02-12 16:21:57 ----A---- C:\Windows\system32\RMActivate.exe
  520. 2014-02-12 16:21:56 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
  521. 2014-02-12 16:21:56 ----A---- C:\Windows\SYSWOW64\secproc.dll
  522. 2014-02-12 16:21:56 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
  523. 2014-02-12 16:21:56 ----A---- C:\Windows\SYSWOW64\msdrm.dll
  524. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\secproc_ssp.dll
  525. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\secproc_isv.dll
  526. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\secproc.dll
  527. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
  528. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\RMActivate_ssp.exe
  529. 2014-02-12 16:21:56 ----A---- C:\Windows\system32\msdrm.dll
  530. 2014-02-12 16:21:55 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
  531. 2014-02-12 16:21:55 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
  532. 2014-02-12 16:21:55 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
  533. 2014-02-12 16:21:50 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
  534. 2014-02-12 16:21:50 ----A---- C:\Windows\SYSWOW64\d2d1.dll
  535. 2014-02-12 16:21:50 ----A---- C:\Windows\system32\d3d10warp.dll
  536. 2014-02-12 16:21:50 ----A---- C:\Windows\system32\d2d1.dll
  537. 2014-02-09 17:09:34 ----D---- C:\ProgramData\Adobe
  538.  
  539. ======List of files/folders modified in the last 1 month======
  540.  
  541. 2014-03-01 15:11:03 ----D---- C:\Windows\Prefetch
  542. 2014-03-01 15:11:03 ----D---- C:\Program Files\trend micro
  543. 2014-03-01 15:11:02 ----D---- C:\Windows\temp
  544. 2014-03-01 15:10:03 ----D---- C:\Users\Michal\AppData\Roaming\Skype
  545. 2014-03-01 15:07:36 ----D---- C:\Users\Michal\AppData\Roaming\Dropbox
  546. 2014-03-01 15:03:13 ----D---- C:\Windows
  547. 2014-03-01 14:57:59 ----D---- C:\Windows\system32\Tasks
  548. 2014-03-01 14:50:30 ----D---- C:\Windows\system32\config
  549. 2014-03-01 13:42:14 ----D---- C:\Users\Michal\AppData\Roaming\newnext.me
  550. 2014-03-01 12:15:49 ----D---- C:\Users\Michal\AppData\Roaming\vlc
  551. 2014-03-01 09:34:54 ----D---- C:\Windows\Tasks
  552. 2014-02-28 22:09:09 ----D---- C:\Users\Michal\AppData\Roaming\TS3Client
  553. 2014-02-28 16:09:00 ----AD---- C:\ProgramData\TEMP
  554. 2014-02-27 22:30:23 ----SHD---- C:\Windows\Installer
  555. 2014-02-27 22:30:17 ----D---- C:\Windows\SysWOW64
  556. 2014-02-27 22:30:17 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
  557. 2014-02-27 22:30:06 ----D---- C:\Windows\inf
  558. 2014-02-27 22:30:02 ----D---- C:\Windows\System32
  559. 2014-02-27 22:30:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
  560. 2014-02-27 22:29:07 ----SHD---- C:\System Volume Information
  561. 2014-02-27 18:37:14 ----RSD---- C:\Windows\Fonts
  562. 2014-02-27 18:37:09 ----RD---- C:\Program Files (x86)
  563. 2014-02-26 19:09:26 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
  564. 2014-02-25 16:49:41 ----D---- C:\Windows\system32\catroot2
  565. 2014-02-23 11:09:55 ----D---- C:\Users\Michal\AppData\Roaming\.minecraft
  566. 2014-02-22 19:05:00 ----D---- C:\ProgramData\Origin
  567. 2014-02-21 18:16:18 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
  568. 2014-02-16 09:00:40 ----D---- C:\Windows\system32\MRT
  569. 2014-02-16 08:59:19 ----D---- C:\Windows\debug
  570. 2014-02-16 08:59:16 ----A---- C:\Windows\system32\MRT.exe
  571. 2014-02-14 23:34:01 ----D---- C:\Windows\rescache
  572. 2014-02-14 21:23:44 ----D---- C:\ProgramData
  573. 2014-02-14 20:59:08 ----D---- C:\Windows\system32\LogFiles
  574. 2014-02-14 20:57:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
  575. 2014-02-14 15:05:24 ----D---- C:\Windows\Minidump
  576. 2014-02-13 16:58:40 ----D---- C:\Windows\Microsoft.NET
  577. 2014-02-13 16:57:01 ----RSD---- C:\Windows\assembly
  578. 2014-02-13 15:05:58 ----D---- C:\Windows\winsxs
  579. 2014-02-13 15:03:48 ----D---- C:\Windows\SYSWOW64\cs-CZ
  580. 2014-02-13 15:03:48 ----D---- C:\Windows\system32\cs-CZ
  581. 2014-02-13 15:03:47 ----D---- C:\Program Files\Internet Explorer
  582. 2014-02-13 15:03:47 ----D---- C:\Program Files (x86)\Internet Explorer
  583. 2014-02-12 22:34:34 ----D---- C:\ProgramData\Microsoft Help
  584. 2014-02-12 22:31:06 ----D---- C:\Windows\system32\catroot
  585. 2014-02-12 22:30:42 ----A---- C:\Windows\win.ini
  586. 2014-02-11 17:11:33 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
  587. 2014-02-11 17:11:33 ----D---- C:\ProgramData\Autodesk
  588. 2014-02-09 17:10:43 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
  589. 2014-02-09 17:10:04 ----D---- C:\Program Files (x86)\Adobe
  590. 2014-02-07 15:27:59 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
  591.  
  592. ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  593.  
  594. R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-26 65776]
  595. R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-26 207904]
  596. R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
  597. R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-26 92544]
  598. R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-25 1038072]
  599. R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-25 421704]
  600. R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-12-19 64288]
  601. R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-25 283064]
  602. R1 HMFAxCore5decdc700443adec5f3e84408e3098ff;HMFAxCore5decdc700443adec5f3e84408e3098ff; C:\Windows\HMFAxCore5decdc700443adec5f3e84408e3098ff.sys [2013-12-20 115272]
  603. R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-11-20 57512]
  604. R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-25 78648]
  605. R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-08-31 12528640]
  606. R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-08-30 618496]
  607. R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-11-03 130536]
  608. R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-11-03 395752]
  609. R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-01-25 80184]
  610. R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
  611. R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
  612. R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-08-07 4102928]
  613. R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-06-12 726160]
  614. S2 NEWDRIVER;NEWDRIVER; \??\C:\Windows\SysWow64\WinVDEdrv6.sys []
  615. S3 atillk64;atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys []
  616. S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
  617. S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
  618. S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
  619. S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
  620. S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
  621. S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesDriver64.sys []
  622. S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
  623.  
  624. ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  625.  
  626. R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
  627. R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-08-30 239616]
  628. R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-30 344064]
  629. R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2014-02-19 807800]
  630. R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-01-31 19232]
  631. R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-25 50344]
  632. R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-02-26 2224976]
  633. R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-02-26 377616]
  634. R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-06 76888]
  635. R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
  636. S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
  637. S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
  638. S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-08 116648]
  639. S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
  640. S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21 257928]
  641. S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
  642. S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-12-19 1432400]
  643. S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-08 116648]
  644. S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
  645. S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
  646. S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-14 118896]
  647. S3 npggsvc;nProtect GameGuard Service; C:\Windows\syswow64\GameMon.des [2013-06-16 5185328]
  648. S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
  649. S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
  650. S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-01-27 571816]
  651. S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-20 1255736]
  652. S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
  653. S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
  654. S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
  655.  
  656. -----------------EOF-----------------
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!