win 8.1 problem sa internet stranicom - moguc virus ili vec

1

win 8.1 problem sa internet stranicom - moguc virus ili vec

offline
  • Pridružio: 14 Avg 2010
  • Poruke: 185

dakle kad otvorim internet browser, bilo da je chrome ili ie11 stalno mi se pojavljuje kao standardna stranica "do search.com".

dds - kad startujem, pojavi mi se dds is not meant to run in compatibility mode. the program shall now exit.


kako da deinstaliram/da nestane taj do search.

kako god vratim standardni pretrazivac da mi se otvori pri otvaranju browsera, stalno se vraca ovaj do search.

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Pozdrav,

Isprati ovu temu.
http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

Opisi nastali problem i postavi nam DDS izvestaje. Na osnovu izvestaja mozemo ti reci nesto vise.

offline
  • Pridružio: 14 Avg 2010
  • Poruke: 185

pokusah sa DDS-om, ali kad startujem dobijem ovu informaciju:

dds is not meant to run in compatibility mode. the program shall now exit.

kakav kompatibiliti mode? kako da ga startujem??

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Hm...DDS bi trebao da je azuriran i da radi na Windows 8.1.
Probaj ovu advanced verziju DDS-a.


Preuzmi DDS+.exe sa ovog linka i sacuvaj ga na Desktop.

Dvoklikom pokreni DDS+;

klikni na [+] ispred options for dds.txt da bi izlistao opcije.
decekiraj opciju check MBR ukoliko je dostupna.

klikni na dugme Scan;

kada alat zavrsi, otvorice dva izvestaja koja ce biti sacuvana na Desktop-u;
1. DDS.txt
2. Attach.txt

Kopiraj sadrzaj DDS.txt loga u poruku; Attach.txt prilozi uz poruku opcijom Prikaci fajl

offline
  • Pridružio: 14 Avg 2010
  • Poruke: 185

Napisano: 12 Nov 2013 21:22

ali da napisem sta uradih: pojavilo mi se da insalitam update za flash player ili vec kako se zove, ja kliknuh i od tad stalno se ovaj do search pojavljuje.

izbrisah odmah nekakve programe koji su se insalirali, ali ovo je ostalo. nema ga u control panel, programms uninstall.

Dopuna: 12 Nov 2013 21:26

magna86 ::Hm...DDS bi trebao da je azuriran i da radi na Windows 8.1.
Probaj ovu advanced verziju DDS-a.



opet ista informacija Sad

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Preuzmi Farbar-ov Farbar Recovery Scan Tool () sa ove adrese na Desktop:
Postoji 32bit. i 64bit.-na verzija. Potrebno je preuzeti verziju koja je kompatibilna sa tvojim sistemom.
Ako nisi siguran koja verzija se odnosi na tvoj sistem, preuzmi ih obe i pokreni. Samo jedan od njih će raditi na tvom sistemu, to će biti prava verzija.


dvoklikom pokreni program, kada se alat pokrene klikni Yes na disclaimer prozor;
klikni na dugme Scan;
po završetku skeniranja, alat će formirati izveštaj (FRST.txt) u isti direktorijum gde je FRST alat sačuvan;
iskopiraj sadržaj FRST.txt izveštaja u poruku;
po prvom pokretanju, alat bi trebao formirati i dodatni izveštaj (Addition.txt);
okači Addition.txt izveštaj uz poruku koristeći opciju Prikači fajl

offline
  • Pridružio: 14 Avg 2010
  • Poruke: 185

Napisano: 12 Nov 2013 22:31

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01
Ran by M (administrator) on MIKI on 12-11-2013 22:27:38
Running from C:\Users\M\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\WINDOWS\system32\atiesrxx.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\WINDOWS\system32\Hpservice.exe
(ABBYY) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Microsoft Corporation) C:\WINDOWS\WinStore\WSHost.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\syswow64\wwahost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\3983JEFBCreating.BubbleBreaker_1.0.0.10_neutral__vy786dcgg6jz4\PIANO8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-20] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3053808 2013-10-29] (Synaptics Incorporated)
HKCU\...\Run: [ANT Agent] - C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe [14731776 2013-02-15] (GARMIN Corp.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BtTray] - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [371976 2012-09-19] (IVT Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP CoolSense] - C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008 2012-09-14] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [Bonus.SSR.FR11] - C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [934152 2011-11-07] (ABBYY.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe do-search.com/?type=sc&ts=1384205521&from=i.....LZP0EWLZPX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google+) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm\1.2.0.418_0
CHR Extension: (LastPass) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\3.0.6_0
CHR Extension: (Dropbox) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.8_0
CHR Extension: (Evernote Web) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol\1.0.7_0
CHR Extension: (Norton Identity Protection) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Google Wallet) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Awesome New Tab Page 2(EXT)) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\oijkglihmcefogkmgibpajfaiekekllk\1.2.0_0
CHR Extension: (Gmail) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-10-12] (ABBYY)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-12] (Advanced Micro Devices, Inc.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation)
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-10-27] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-22] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20131101.003\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-10-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-10-11] (Symantec Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20131111.002\IDSvia64.sys [521816 2013-10-28] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20131112.002\ENG64.SYS [126040 2013-10-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20131112.002\EX64.SYS [2099288 2013-10-11] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [692832 2012-10-02] (Ralink Technology, Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-25] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-25] (Synaptics Incorporated)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-10-12] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-12 21:40 - 2013-11-12 21:40 - 00000000 ____D C:\FRST
2013-11-12 21:39 - 2013-11-12 21:39 - 01957590 _____ (Farbar) C:\Users\M\Desktop\FRST64.exe
2013-11-12 21:24 - 2013-11-12 21:24 - 00700783 _____ (Swearware) C:\Users\M\Downloads\dds+.exe
2013-11-12 21:22 - 2013-11-12 21:22 - 00700783 _____ (Swearware) C:\Users\M\Desktop\dds+.exe
2013-11-12 21:12 - 2013-11-11 16:41 - 00031345 _____ C:\Users\M\Downloads\Homeland.S03E07 - Gerontion.720p.HDTV.x264-KILLERS.bajone.rs.srt
2013-11-12 20:53 - 2013-11-12 20:55 - 00000866 _____ C:\DelFix.txt
2013-11-12 19:56 - 2013-11-12 19:56 - 00029029 _____ C:\Users\M\Downloads\Homeland - 03x07 - Gerontion HDTV x264 SR.rar
2013-11-12 19:49 - 2013-11-12 19:52 - 125367702 ____R C:\Users\M\Downloads\Mom.S01E08.HDTV.x264-LOL.mp4
2013-11-12 19:49 - 2013-11-12 19:51 - 186814123 ____R C:\Users\M\Downloads\How.I.Met.Your.Mother.S09E09.HDTV.x264-2HD.mp4
2013-11-12 19:49 - 2013-11-12 19:49 - 00005265 _____ C:\Users\M\Downloads\Mom.S01E08.HDTV.x264-LOL.[eztv].torrent
2013-11-12 19:48 - 2013-11-12 19:48 - 00007623 _____ C:\Users\M\Downloads\How.I.Met.Your.Mother.S09E09.HDTV.x264-2HD.[eztv].torrent
2013-11-11 22:28 - 2013-11-12 19:21 - 00000000 ____D C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-11 22:28 - 2013-11-11 23:06 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-11 20:49 - 2013-11-11 21:00 - 508401191 ____R C:\Users\M\Downloads\Downton.Abbey.4x08.HDTV.x264-FoV.mp4
2013-11-11 20:49 - 2013-11-11 20:55 - 226064264 ____R C:\Users\M\Downloads\The.Good.Wife.S05E07.HDTV.x264-LOL.mp4
2013-11-11 20:48 - 2013-11-11 20:55 - 314509154 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E10.HDTV.x264-2HD.mp4
2013-11-11 06:53 - 2013-11-11 22:02 - 00064399 _____ C:\Users\M\Downloads\The Good Wife - 05x07 - The Next Week.LOL.English.C.orig.srt
2013-11-10 18:56 - 2013-11-12 19:22 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 11
2013-11-10 18:53 - 2013-11-12 22:10 - 00667493 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-10 18:49 - 2011-11-07 14:11 - 00000000 ____D C:\Users\M\Downloads\ABBYY FineReader 11.0.102.536 Professional Edition
2013-11-10 18:25 - 2013-11-10 18:25 - 00002764 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2013-11-10 18:25 - 2013-11-10 18:25 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-10 18:25 - 2013-11-10 18:25 - 00000000 ____D C:\Program Files\CCleaner
2013-11-10 13:20 - 2013-11-10 23:15 - 00000000 ____D C:\Users\M\Desktop\500 Zaboravljenih
2013-11-10 13:05 - 2013-11-10 13:05 - 00000000 ____D C:\Users\M\Downloads\boiler
2013-11-10 13:03 - 2013-11-10 13:03 - 00536962 _____ C:\Users\M\Downloads\boiler.zip
2013-11-10 11:11 - 2013-11-10 23:54 - 00000000 ____D C:\Users\M\Downloads\Despicable.Me.2.2013.DVDRip.XviD-iNViNCiBLE
2013-11-10 11:04 - 2013-11-10 15:46 - 00000000 ____D C:\Users\M\Downloads\Paranoia (2013)
2013-11-10 09:57 - 2013-11-10 09:57 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-10 09:57 - 2013-11-10 09:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-11-09 23:41 - 2013-11-09 23:41 - 00289357 _____ C:\Users\M\Downloads\IntrinsicValueSpreadsheet.zip
2013-11-09 23:37 - 2013-11-09 23:37 - 03181056 _____ C:\Users\M\Downloads\trend-following.xls
2013-11-09 23:35 - 2013-11-09 23:35 - 00129024 _____ C:\Users\M\Downloads\meltdown.xls
2013-11-09 23:24 - 2013-11-09 23:24 - 01065984 _____ C:\Users\M\Downloads\Buying-strategies.xls
2013-11-09 23:13 - 2013-11-09 23:13 - 00038912 _____ C:\Users\M\Downloads\ERPDec09.xls
2013-11-09 23:12 - 2013-11-09 23:12 - 00031744 _____ C:\Users\M\Downloads\DiscountedCashFlows.xls
2013-11-09 11:38 - 2013-11-09 11:38 - 00041843 _____ C:\Users\M\Downloads\table.csv
2013-11-09 10:07 - 2013-11-09 10:07 - 00511488 _____ C:\Users\M\Downloads\january-predicts.xls
2013-11-08 22:45 - 2013-11-10 18:08 - 01337232 _____ C:\Users\M\Downloads\CEEPeerD.xlsm
2013-11-08 22:44 - 2013-11-08 22:44 - 00134205 _____ C:\Users\M\Downloads\equities.xlsx
2013-11-08 22:18 - 2013-10-29 17:48 - 00026192 _____ C:\Users\M\Downloads\Homeland.S03E05.HDTV.x264-KILLERS.srt
2013-11-08 22:04 - 2013-11-01 21:08 - 00039114 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E08.HDTV.x264-2HD.srt
2013-11-08 22:04 - 2013-10-26 20:21 - 00047105 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E07.720p.HDTV.x264-KILLERS.srt
2013-11-08 21:43 - 2013-11-08 21:47 - 280197765 ____R C:\Users\M\Downloads\White.Collar.S05E04.HDTV.x264-2HD.mp4
2013-11-07 21:14 - 2013-11-07 21:19 - 329264610 ____R C:\Users\M\Downloads\CSI.S14E07.HDTV.x264-LOL.mp4
2013-11-05 16:37 - 2013-11-06 22:07 - 00041043 _____ C:\Users\M\Downloads\Homeland.S03E06.HDTV.x264-2HD.srt
2013-11-05 16:32 - 2013-11-06 22:06 - 00052497 _____ C:\Users\M\Downloads\Downton_Abbey.4x07.HDTV_x264-FoV.srt
2013-11-04 19:13 - 2013-11-04 19:17 - 318943006 ____R C:\Users\M\Downloads\Downton_Abbey.4x07.HDTV_x264-FoV.mp4
2013-11-04 19:00 - 2013-11-12 19:57 - 360885920 _____ C:\Users\M\Downloads\Homeland.S03E06.HDTV.x264-2HD.mp4
2013-11-04 19:00 - 2013-11-04 19:08 - 350417636 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E09.HDTV.x264-2HD.mp4
2013-11-03 16:01 - 2013-11-03 16:01 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-03 12:51 - 2013-11-03 12:51 - 00003080 _____ C:\WINDOWS\System32\Tasks\Microsoft SkyDrive Auto Update Task-S-1-5-21-432700491-4017870644-2687449469-1002
2013-11-02 20:49 - 2013-11-10 15:43 - 00000000 ____D C:\Users\M\Downloads\R.I.P.D. (2013)
2013-11-02 20:39 - 2013-11-10 09:09 - 00000000 ____D C:\Users\M\Downloads\Despicable Me 2 (2013) [1080p]
2013-11-02 20:30 - 2013-11-10 00:00 - 00000000 ____D C:\Users\M\Downloads\Prisoners 2013 TS XViD-UNiQUE
2013-11-02 15:35 - 2013-11-02 15:35 - 00001795 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-02 15:33 - 2013-11-02 15:34 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-02 15:33 - 2013-11-02 15:34 - 00000000 ____D C:\Program Files\iTunes
2013-11-02 15:33 - 2013-11-02 15:34 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-02 15:33 - 2013-11-02 15:33 - 00000000 ____D C:\Program Files\iPod
2013-11-02 14:33 - 2013-11-02 14:33 - 00000000 ____D C:\Program Files\AMD
2013-11-01 14:42 - 2013-11-01 14:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Drivers\sr-Latn-RS
2013-11-01 14:41 - 2013-11-01 14:41 - 00000000 ____D C:\WINDOWS\system32\Drivers\sr-Latn-RS
2013-11-01 14:41 - 2013-11-01 14:41 - 00000000 ____D C:\WINDOWS\sr-Latn-RS
2013-11-01 13:24 - 2013-11-02 14:21 - 00060464 _____ C:\Users\M\Downloads\White.Collar.S05E03.HDTV.x264-2HD.txt
2013-11-01 12:52 - 2013-11-01 13:11 - 321988035 ____R C:\Users\M\Downloads\White.Collar.S05E03.HDTV.x264-2HD.mp4
2013-11-01 12:45 - 2013-11-03 12:53 - 00060461 _____ C:\Users\M\Downloads\White Collar - 05x03 - One Last Stakeout.2HD.English.C.orig.Addic7ed.com.srt
2013-11-01 10:29 - 2013-11-01 12:52 - 00058874 _____ C:\Users\M\Downloads\White.Collar.S05E01.HDTV.x264-2HD.srt
2013-10-30 21:58 - 2013-11-01 12:12 - 00004298 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2013-10-29 15:25 - 2013-10-29 15:25 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Internet Security
2013-10-29 11:50 - 2013-10-29 11:49 - 01060080 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2013-10-29 11:50 - 2013-10-29 11:49 - 00544496 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2013-10-29 11:50 - 2013-10-29 11:49 - 00495856 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2013-10-29 11:50 - 2013-10-29 11:49 - 00264432 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2013-10-29 11:50 - 2013-10-29 11:49 - 00192240 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo18.dll
2013-10-29 11:50 - 2013-10-29 11:49 - 00151280 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynTPCom.dll
2013-10-29 09:19 - 2013-10-29 09:19 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-10-29 09:13 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-10-29 09:13 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-10-28 19:43 - 2013-11-12 19:27 - 00003898 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A8839A3A-2C06-4EC8-AC66-7675966FEDE7}
2013-10-28 19:29 - 2013-10-28 19:56 - 336956638 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E08.HDTV.x264-2HD.mp4
2013-10-28 19:28 - 2013-10-28 19:38 - 337058443 ____R C:\Users\M\Downloads\Homeland.S03E05.HDTV.x264-KILLERS.mp4
2013-10-28 19:28 - 2013-10-28 19:34 - 251989289 ____R C:\Users\M\Downloads\Downton.Abbey.4x06.HDTV.x264-FoV.mp4
2013-10-27 23:16 - 2013-11-12 20:47 - 00000000 __RDO C:\Users\M\SkyDrive
2013-10-27 23:13 - 2013-10-27 23:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-10-27 23:11 - 2013-11-11 22:32 - 00001662 _____ C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-27 23:10 - 2013-10-27 23:10 - 00000020 ___SH C:\Users\M\ntuser.ini
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-27 23:07 - 2013-10-27 23:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default\Documents\hp.system.package.metadata
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default User\Documents\hp.system.package.metadata
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-27 22:48 - 2013-10-27 22:48 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-10-27 22:46 - 2013-11-10 13:17 - 00000000 ____D C:\Users\M
2013-10-27 22:46 - 2013-10-27 23:07 - 00024768 _____ C:\WINDOWS\diagwrn.xml
2013-10-27 22:46 - 2013-10-27 23:07 - 00024768 _____ C:\WINDOWS\diagerr.xml
2013-10-27 22:46 - 2013-10-27 22:48 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Vorlagen
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Startmenü
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Netzwerkumgebung
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Lokale Einstellungen
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Eigene Dateien
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Druckumgebung
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Documents\Eigene Musik
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Documents\Eigene Bilder
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Local\Verlauf
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Local\Anwendungsdaten
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Anwendungsdaten
2013-10-27 22:46 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-27 22:46 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-10-27 22:46 - 2013-08-22 16:36 - 00000000 ____D C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-27 22:40 - 2013-10-27 22:40 - 01914374 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-10-27 22:38 - 2013-10-27 22:38 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 ____D C:\Program Files\Synaptics
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2013-10-27 22:37 - 2013-10-27 22:57 - 00000000 ____D C:\Program Files\IDT
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-27 22:37 - 2012-08-20 06:45 - 07986176 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNGUI.exe
2013-10-27 22:37 - 2012-08-20 06:45 - 07712768 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNHP.dll
2013-10-27 22:37 - 2012-08-20 06:45 - 06085632 _____ (IDT, Inc.) C:\WINDOWS\system32\stlang64.dll
2013-10-27 22:37 - 2012-08-20 06:45 - 02213376 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNX.dll
2013-10-27 22:37 - 2012-08-20 06:45 - 01821184 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNC64.cpl
2013-10-27 22:37 - 2012-08-20 06:45 - 01664000 _____ (IDT, Inc.) C:\WINDOWS\sttray64.exe
2013-10-27 22:37 - 2012-08-20 06:45 - 00253952 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNJ.exe
2013-10-27 22:37 - 2012-08-20 06:45 - 00224256 _____ (IDT, Inc.) C:\WINDOWS\system32\HPToneCtrls64.dll
2013-10-27 22:35 - 2013-11-10 18:31 - 00000000 ___DC C:\WINDOWS\Panther
2013-10-27 22:35 - 2013-10-27 22:35 - 00000000 __SHD C:\Recovery
2013-10-27 22:32 - 2013-10-27 22:32 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-27 22:32 - 2013-10-27 22:32 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-27 22:32 - 2013-10-27 22:32 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-10-27 22:32 - 2013-10-27 22:32 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-10-27 22:32 - 2013-10-27 22:32 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-27 22:31 - 2013-10-27 22:31 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-10-27 22:27 - 2013-10-27 22:27 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2013-10-27 22:27 - 2013-10-27 22:27 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2013-10-27 22:27 - 2013-10-27 22:27 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files\MSBuild
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\inetpub
2013-10-27 22:26 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-10-27 22:26 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-27 22:26 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-10-27 22:26 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-10-27 22:26 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-27 22:26 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-10-27 10:57 - 2013-07-31 14:25 - 00044427 _____ C:\Users\M\Downloads\Parades.End.1x05.HDTV.x264-FoV.srt
2013-10-27 10:57 - 2013-07-30 21:02 - 00057434 _____ C:\Users\M\Downloads\Parades.End.1x04.HDTV.x264-FoV.srt
2013-10-27 10:56 - 2013-04-06 13:26 - 00060715 _____ C:\Users\M\Downloads\Parades.End.1x03.HDTV.x264-FoV.srt
2013-10-27 10:54 - 2013-08-01 00:38 - 00045911 _____ C:\Users\M\Downloads\Parades.End.1x01.HDTV.x264-FoV.srt
2013-10-27 10:54 - 2013-03-22 21:52 - 00059712 _____ C:\Users\M\Downloads\Parades.End.1x02.HDTV.x264-FoV.srt
2013-10-27 09:40 - 2013-10-27 10:22 - 327740532 ____R C:\Users\M\Downloads\Parades.End.1x03.HDTV.x264-FoV.mp4
2013-10-27 09:40 - 2013-10-27 10:18 - 367470720 ____R C:\Users\M\Downloads\Parades.End.1x02.HDTV.x264-FoV.mp4
2013-10-27 09:39 - 2013-10-27 10:04 - 351212867 ____R C:\Users\M\Downloads\Parades.End.1x05.HDTV.x264-FoV.mp4
2013-10-27 09:39 - 2013-10-27 10:02 - 357867920 ____R C:\Users\M\Downloads\Parades.End.1x04.HDTV.x264-FoV.mp4
2013-10-27 09:39 - 2013-10-27 09:46 - 389568742 ____R C:\Users\M\Downloads\Parades.End.1x01.HDTV.x264-FoV.mp4
2013-10-26 20:10 - 2013-11-01 12:41 - 00000000 ____D C:\Users\M\Downloads\Editgrid
2013-10-26 18:21 - 2013-10-26 20:09 - 00053071 _____ C:\Users\M\Downloads\Downton.Abbey.4x05.HDTV.x264-FoV.srt
2013-10-26 16:30 - 2013-10-26 16:30 - 00000000 ____D C:\Users\M\AppData\Local\Windows Live
2013-10-25 16:09 - 2013-10-25 16:19 - 308418510 ____R C:\Users\M\Downloads\White.Collar.S05E02.HDTV.x264-2HD.mp4
2013-10-24 17:43 - 2013-10-24 18:00 - 1151835199 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E07.720p.HDTV.x264-KILLERS.mkv
2013-10-22 19:24 - 2013-10-22 08:05 - 00032288 _____ C:\Users\M\Downloads\Homeland.S03E04.HDTV.x264-2HD.srt
2013-10-22 17:26 - 2013-10-22 17:30 - 281632102 ____R C:\Users\M\Downloads\Downton.Abbey.4x05.HDTV.x264-FoV.mp4
2013-10-22 17:16 - 2013-10-22 17:32 - 369671747 ____R C:\Users\M\Downloads\Homeland.S03E04.HDTV.x264-2HD.mp4
2013-10-22 17:13 - 2013-10-22 17:26 - 337549083 ____R C:\Users\M\Downloads\White.Collar.S05E01.HDTV.x264-2HD.mp4
2013-10-16 22:19 - 2013-10-16 22:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-16 13:50 - 2013-10-16 22:31 - 00052419 _____ C:\Users\M\Downloads\Downton.Abbey.4x04.HDTV.x264-RiVER.srt
2013-10-15 21:01 - 2013-10-15 21:01 - 00000000 ____D C:\ProgramData\Ant
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Users\M\AppData\Roaming\Garmin
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Program Files\DIFX
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-15 19:34 - 2013-11-01 16:11 - 00000000 ____D C:\Users\M\AppData\Roaming\Apple Computer
2013-10-15 19:34 - 2013-10-15 19:34 - 00000000 ____D C:\Users\M\AppData\Local\Apple Computer
2013-10-15 19:34 - 2013-10-15 08:28 - 00041165 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E06.HDTV.XviD-AFG.srt
2013-10-15 19:34 - 2012-08-21 12:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2013-10-15 19:33 - 2013-10-15 19:33 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Users\M\AppData\Local\Apple
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-15 19:31 - 2013-10-15 19:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-10-14 20:48 - 2013-11-12 20:57 - 00046080 ___SH C:\Users\M\Desktop\Thumbs.db
2013-10-14 20:01 - 2013-10-14 17:18 - 00020494 _____ C:\Users\M\Downloads\Homeland.S03E03.HDTV.x264-ASAP.srt
2013-10-14 19:48 - 2013-10-14 19:52 - 302041543 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E06.HDTV.x264-KILLERS.mp4
2013-10-14 19:47 - 2013-10-14 19:58 - 408637109 ____R C:\Users\M\Downloads\Homeland.S03E03.HDTV.x264-ASAP.mp4
2013-10-14 19:47 - 2013-10-14 19:58 - 272824569 ____R C:\Users\M\Downloads\Downton.Abbey.4x04.HDTV.x264-RiVER.mp4
2013-10-13 12:58 - 2013-08-04 20:48 - 01208667 _____ C:\Users\M\Downloads\IMB_Original.xlsm
2013-10-13 12:51 - 2013-08-24 14:29 - 00122862 _____ C:\Users\M\Downloads\Okey_rub.xlsx
2013-10-13 12:51 - 2013-07-19 19:22 - 00114603 _____ C:\Users\M\Downloads\Okey.xlsx
2013-10-13 12:51 - 2012-07-13 18:50 - 00814511 _____ C:\Users\M\Downloads\Krka 2012.xlsm
2013-10-13 11:44 - 2013-10-13 12:11 - 366102917 ____R C:\Users\M\Downloads\Downton.Abbey.4x01.HDTV.x264-FoV.mp4
2013-10-13 11:44 - 2013-10-13 11:57 - 276464484 ____R C:\Users\M\Downloads\Downton.Abbey.4x02.HDTV.x264-FoV.mp4
2013-10-13 11:44 - 2013-10-13 11:50 - 292733999 ____R C:\Users\M\Downloads\Downton.Abbey.4x03.HDTV.x264-FoV.mp4

==================== One Month Modified Files and Folders =======

2013-11-12 22:10 - 2013-11-10 18:53 - 00667493 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-12 22:04 - 2013-10-11 18:24 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-432700491-4017870644-2687449469-1002
2013-11-12 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-12 21:59 - 2013-10-11 18:51 - 00002403 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-12 21:59 - 2013-10-11 18:49 - 00001110 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-12 21:59 - 2013-10-11 18:49 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-12 21:40 - 2013-11-12 21:40 - 00000000 ____D C:\FRST
2013-11-12 21:39 - 2013-11-12 21:39 - 01957590 _____ (Farbar) C:\Users\M\Desktop\FRST64.exe
2013-11-12 21:24 - 2013-11-12 21:24 - 00700783 _____ (Swearware) C:\Users\M\Downloads\dds+.exe
2013-11-12 21:22 - 2013-11-12 21:22 - 00700783 _____ (Swearware) C:\Users\M\Desktop\dds+.exe
2013-11-12 20:57 - 2013-10-14 20:48 - 00046080 ___SH C:\Users\M\Desktop\Thumbs.db
2013-11-12 20:55 - 2013-11-12 20:53 - 00000866 _____ C:\DelFix.txt
2013-11-12 20:51 - 2013-09-30 05:14 - 01980870 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-12 20:51 - 2013-09-30 04:56 - 00842568 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-12 20:51 - 2013-09-30 04:56 - 00191764 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-12 20:49 - 2013-10-11 19:11 - 00000000 ____D C:\Users\M\AppData\Roaming\uTorrent
2013-11-12 20:47 - 2013-10-27 23:16 - 00000000 __RDO C:\Users\M\SkyDrive
2013-11-12 20:47 - 2012-09-26 08:53 - 00000950 _____ C:\WINDOWS\SysWOW64\bscs.ini
2013-11-12 20:44 - 2013-05-13 16:57 - 00003620 _____ C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
2013-11-12 20:44 - 2013-05-13 16:57 - 00000043 _____ C:\WINDOWS\SysWOW64\LOCALDEVICE.INI
2013-11-12 20:43 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-12 20:42 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-12 20:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-11-12 19:57 - 2013-11-04 19:00 - 360885920 _____ C:\Users\M\Downloads\Homeland.S03E06.HDTV.x264-2HD.mp4
2013-11-12 19:56 - 2013-11-12 19:56 - 00029029 _____ C:\Users\M\Downloads\Homeland - 03x07 - Gerontion HDTV x264 SR.rar
2013-11-12 19:52 - 2013-11-12 19:49 - 125367702 ____R C:\Users\M\Downloads\Mom.S01E08.HDTV.x264-LOL.mp4
2013-11-12 19:51 - 2013-11-12 19:49 - 186814123 ____R C:\Users\M\Downloads\How.I.Met.Your.Mother.S09E09.HDTV.x264-2HD.mp4
2013-11-12 19:49 - 2013-11-12 19:49 - 00005265 _____ C:\Users\M\Downloads\Mom.S01E08.HDTV.x264-LOL.[eztv].torrent
2013-11-12 19:48 - 2013-11-12 19:48 - 00007623 _____ C:\Users\M\Downloads\How.I.Met.Your.Mother.S09E09.HDTV.x264-2HD.[eztv].torrent
2013-11-12 19:27 - 2013-10-28 19:43 - 00003898 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A8839A3A-2C06-4EC8-AC66-7675966FEDE7}
2013-11-12 19:22 - 2013-11-10 18:56 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 11
2013-11-12 19:21 - 2013-11-11 22:28 - 00000000 ____D C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-11 23:06 - 2013-11-11 22:28 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-11 22:34 - 2013-10-12 09:15 - 00002546 _____ C:\Users\M\Desktop\Chrome-App-Übersicht.lnk
2013-11-11 22:34 - 2012-09-07 16:33 - 00420944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp100.dll
2013-11-11 22:32 - 2013-10-27 23:11 - 00001662 _____ C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-11 22:03 - 2013-10-11 20:48 - 00161532 _____ C:\Users\M\Desktop\Mappe1.xlsx
2013-11-11 22:02 - 2013-11-11 06:53 - 00064399 _____ C:\Users\M\Downloads\The Good Wife - 05x07 - The Next Week.LOL.English.C.orig.srt
2013-11-11 21:00 - 2013-11-11 20:49 - 508401191 ____R C:\Users\M\Downloads\Downton.Abbey.4x08.HDTV.x264-FoV.mp4
2013-11-11 20:55 - 2013-11-11 20:49 - 226064264 ____R C:\Users\M\Downloads\The.Good.Wife.S05E07.HDTV.x264-LOL.mp4
2013-11-11 20:55 - 2013-11-11 20:48 - 314509154 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E10.HDTV.x264-2HD.mp4
2013-11-11 20:47 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-11 16:41 - 2013-11-12 21:12 - 00031345 _____ C:\Users\M\Downloads\Homeland.S03E07 - Gerontion.720p.HDTV.x264-KILLERS.bajone.rs.srt
2013-11-10 23:54 - 2013-11-10 11:11 - 00000000 ____D C:\Users\M\Downloads\Despicable.Me.2.2013.DVDRip.XviD-iNViNCiBLE
2013-11-10 23:15 - 2013-11-10 13:20 - 00000000 ____D C:\Users\M\Desktop\500 Zaboravljenih
2013-11-10 22:45 - 2013-10-11 18:10 - 00000000 ____D C:\Users\M\AppData\Local\Packages
2013-11-10 18:56 - 2013-10-12 19:32 - 00000000 ____D C:\Users\M\AppData\Local\ABBYY
2013-11-10 18:56 - 2013-10-12 19:32 - 00000000 ____D C:\ProgramData\ABBYY
2013-11-10 18:31 - 2013-10-27 22:35 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-10 18:25 - 2013-11-10 18:25 - 00002764 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2013-11-10 18:25 - 2013-11-10 18:25 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-10 18:25 - 2013-11-10 18:25 - 00000000 ____D C:\Program Files\CCleaner
2013-11-10 18:08 - 2013-11-08 22:45 - 01337232 _____ C:\Users\M\Downloads\CEEPeerD.xlsm
2013-11-10 15:46 - 2013-11-10 11:04 - 00000000 ____D C:\Users\M\Downloads\Paranoia (2013)
2013-11-10 15:43 - 2013-11-02 20:49 - 00000000 ____D C:\Users\M\Downloads\R.I.P.D. (2013)
2013-11-10 13:21 - 2013-10-12 20:15 - 00000000 ____D C:\Users\M\Documents\abby
2013-11-10 13:17 - 2013-10-27 22:46 - 00000000 ____D C:\Users\M
2013-11-10 13:05 - 2013-11-10 13:05 - 00000000 ____D C:\Users\M\Downloads\boiler
2013-11-10 13:03 - 2013-11-10 13:03 - 00536962 _____ C:\Users\M\Downloads\boiler.zip
2013-11-10 09:57 - 2013-11-10 09:57 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-10 09:57 - 2013-11-10 09:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-11-10 09:09 - 2013-11-02 20:39 - 00000000 ____D C:\Users\M\Downloads\Despicable Me 2 (2013) [1080p]
2013-11-10 00:00 - 2013-11-02 20:30 - 00000000 ____D C:\Users\M\Downloads\Prisoners 2013 TS XViD-UNiQUE
2013-11-09 23:41 - 2013-11-09 23:41 - 00289357 _____ C:\Users\M\Downloads\IntrinsicValueSpreadsheet.zip
2013-11-09 23:37 - 2013-11-09 23:37 - 03181056 _____ C:\Users\M\Downloads\trend-following.xls
2013-11-09 23:35 - 2013-11-09 23:35 - 00129024 _____ C:\Users\M\Downloads\meltdown.xls
2013-11-09 23:24 - 2013-11-09 23:24 - 01065984 _____ C:\Users\M\Downloads\Buying-strategies.xls
2013-11-09 23:13 - 2013-11-09 23:13 - 00038912 _____ C:\Users\M\Downloads\ERPDec09.xls
2013-11-09 23:12 - 2013-11-09 23:12 - 00031744 _____ C:\Users\M\Downloads\DiscountedCashFlows.xls
2013-11-09 11:38 - 2013-11-09 11:38 - 00041843 _____ C:\Users\M\Downloads\table.csv
2013-11-09 10:07 - 2013-11-09 10:07 - 00511488 _____ C:\Users\M\Downloads\january-predicts.xls
2013-11-08 22:44 - 2013-11-08 22:44 - 00134205 _____ C:\Users\M\Downloads\equities.xlsx
2013-11-08 21:47 - 2013-11-08 21:43 - 280197765 ____R C:\Users\M\Downloads\White.Collar.S05E04.HDTV.x264-2HD.mp4
2013-11-07 21:19 - 2013-11-07 21:14 - 329264610 ____R C:\Users\M\Downloads\CSI.S14E07.HDTV.x264-LOL.mp4
2013-11-06 22:07 - 2013-11-05 16:37 - 00041043 _____ C:\Users\M\Downloads\Homeland.S03E06.HDTV.x264-2HD.srt
2013-11-06 22:06 - 2013-11-05 16:32 - 00052497 _____ C:\Users\M\Downloads\Downton_Abbey.4x07.HDTV_x264-FoV.srt
2013-11-04 19:17 - 2013-11-04 19:13 - 318943006 ____R C:\Users\M\Downloads\Downton_Abbey.4x07.HDTV_x264-FoV.mp4
2013-11-04 19:08 - 2013-11-04 19:00 - 350417636 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E09.HDTV.x264-2HD.mp4
2013-11-03 16:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-11-03 16:01 - 2013-11-03 16:01 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-03 16:00 - 2013-10-11 20:49 - 00000000 ____D C:\Users\M\Documents\Youcam
2013-11-03 12:53 - 2013-11-01 12:45 - 00060461 _____ C:\Users\M\Downloads\White Collar - 05x03 - One Last Stakeout.2HD.English.C.orig.Addic7ed.com.srt
2013-11-03 12:51 - 2013-11-03 12:51 - 00003080 _____ C:\WINDOWS\System32\Tasks\Microsoft SkyDrive Auto Update Task-S-1-5-21-432700491-4017870644-2687449469-1002
2013-11-02 15:35 - 2013-11-02 15:35 - 00001795 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-02 15:34 - 2013-11-02 15:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-02 15:34 - 2013-11-02 15:33 - 00000000 ____D C:\Program Files\iTunes
2013-11-02 15:34 - 2013-11-02 15:33 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-02 15:33 - 2013-11-02 15:33 - 00000000 ____D C:\Program Files\iPod
2013-11-02 14:33 - 2013-11-02 14:33 - 00000000 ____D C:\Program Files\AMD
2013-11-02 14:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2013-11-02 14:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2013-11-02 14:21 - 2013-11-01 13:24 - 00060464 _____ C:\Users\M\Downloads\White.Collar.S05E03.HDTV.x264-2HD.txt
2013-11-02 08:43 - 2013-10-11 20:37 - 00405504 ___SH C:\Users\M\Downloads\Thumbs.db
2013-11-01 21:08 - 2013-11-08 22:04 - 00039114 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E08.HDTV.x264-2HD.srt
2013-11-01 16:11 - 2013-10-15 19:34 - 00000000 ____D C:\Users\M\AppData\Roaming\Apple Computer
2013-11-01 14:42 - 2013-11-01 14:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Drivers\sr-Latn-RS
2013-11-01 14:42 - 2013-09-30 04:59 - 00000000 ____D C:\Program Files\Windows Journal
2013-11-01 14:42 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-11-01 14:42 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-11-01 14:42 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2013-11-01 14:42 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\servicing
2013-11-01 14:41 - 2013-11-01 14:41 - 00000000 ____D C:\WINDOWS\system32\Drivers\sr-Latn-RS
2013-11-01 14:41 - 2013-11-01 14:41 - 00000000 ____D C:\WINDOWS\sr-Latn-RS
2013-11-01 14:41 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-11-01 14:41 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-11-01 14:41 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\slmgr
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ___SD C:\WINDOWS\system32\dsc
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-11-01 14:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-11-01 14:41 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-11-01 14:41 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-11-01 13:11 - 2013-11-01 12:52 - 321988035 ____R C:\Users\M\Downloads\White.Collar.S05E03.HDTV.x264-2HD.mp4
2013-11-01 13:02 - 2013-10-12 09:38 - 00000052 _____ C:\WINDOWS\SysWOW64\DOErrors.log
2013-11-01 13:01 - 2013-10-12 09:38 - 00000000 _____ C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-01 12:57 - 2013-05-13 16:55 - 00000000 ____D C:\WINDOWS\Hewlett-Packard
2013-11-01 12:56 - 2012-08-04 01:02 - 00000000 ____D C:\SWSetup
2013-11-01 12:53 - 2013-05-13 17:18 - 00000000 ____D C:\ProgramData\CyberLink
2013-11-01 12:52 - 2013-11-01 10:29 - 00058874 _____ C:\Users\M\Downloads\White.Collar.S05E01.HDTV.x264-2HD.srt
2013-11-01 12:49 - 2013-05-13 17:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2013-11-01 12:49 - 2013-05-13 17:14 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2013-11-01 12:49 - 2013-05-13 17:14 - 00029480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3a.dll
2013-11-01 12:49 - 2013-05-13 15:52 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-01 12:41 - 2013-10-26 20:10 - 00000000 ____D C:\Users\M\Downloads\Editgrid
2013-11-01 12:12 - 2013-10-30 21:58 - 00004298 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2013-10-29 22:43 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-10-29 17:48 - 2013-11-08 22:18 - 00026192 _____ C:\Users\M\Downloads\Homeland.S03E05.HDTV.x264-KILLERS.srt
2013-10-29 15:25 - 2013-10-29 15:25 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Internet Security
2013-10-29 15:24 - 2013-05-13 17:36 - 00003234 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2013-10-29 12:12 - 2013-05-13 15:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-29 11:49 - 2013-10-29 11:50 - 01060080 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2013-10-29 11:49 - 2013-10-29 11:50 - 00544496 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2013-10-29 11:49 - 2013-10-29 11:50 - 00495856 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2013-10-29 11:49 - 2013-10-29 11:50 - 00264432 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2013-10-29 11:49 - 2013-10-29 11:50 - 00192240 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo18.dll
2013-10-29 11:49 - 2013-10-29 11:50 - 00151280 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynTPCom.dll
2013-10-29 09:54 - 2013-05-13 16:50 - 00004290 _____ C:\WINDOWS\system32\RaCoInst.log
2013-10-29 09:19 - 2013-10-29 09:19 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-10-28 19:56 - 2013-10-28 19:29 - 336956638 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E08.HDTV.x264-2HD.mp4
2013-10-28 19:38 - 2013-10-28 19:28 - 337058443 ____R C:\Users\M\Downloads\Homeland.S03E05.HDTV.x264-KILLERS.mp4
2013-10-28 19:34 - 2013-10-28 19:28 - 251989289 ____R C:\Users\M\Downloads\Downton.Abbey.4x06.HDTV.x264-FoV.mp4
2013-10-28 00:08 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-10-27 23:13 - 2013-10-27 23:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-10-27 23:11 - 2013-10-11 18:15 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-27 23:11 - 2013-10-11 18:15 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-27 23:10 - 2013-10-27 23:10 - 00000020 ___SH C:\Users\M\ntuser.ini
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-27 23:08 - 2013-10-27 23:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-27 23:08 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-10-27 23:08 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-10-27 23:07 - 2013-10-27 23:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-10-27 23:07 - 2013-10-27 22:46 - 00024768 _____ C:\WINDOWS\diagwrn.xml
2013-10-27 23:07 - 2013-10-27 22:46 - 00024768 _____ C:\WINDOWS\diagerr.xml
2013-10-27 23:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-10-27 23:01 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-10-27 23:01 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-10-27 22:57 - 2013-10-27 22:37 - 00000000 ____D C:\Program Files\IDT
2013-10-27 22:57 - 2013-10-12 09:15 - 00000000 ____D C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-10-27 22:57 - 2013-10-11 18:59 - 00000000 ____D C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2013-10-27 22:57 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew
2013-10-27 22:57 - 2013-05-13 23:39 - 00000000 ____D C:\WINDOWS\en-GB
2013-10-27 22:57 - 2013-05-13 16:02 - 00000000 ____D C:\WINDOWS\de
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default\Documents\hp.system.package.metadata
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default User\Documents\hp.system.package.metadata
2013-10-27 22:54 - 2013-10-27 22:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-27 22:54 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2013-10-27 22:54 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-10-27 22:54 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2013-10-27 22:54 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\winrm
2013-10-27 22:54 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-10-27 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2013-10-27 22:54 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-10-27 22:54 - 2013-05-13 16:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-10-27 22:54 - 2013-05-13 15:57 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2013-10-27 22:54 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-10-27 22:53 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-10-27 22:53 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-10-27 22:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-10-27 22:53 - 2012-08-03 23:29 - 00000000 ____D C:\ProgramData\PRICache
2013-10-27 22:52 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-10-27 22:52 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-10-27 22:48 - 2013-10-27 22:48 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-10-27 22:48 - 2013-10-27 22:46 - 00000000 ___RD C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-10-27 22:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Vorlagen
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Startmenü
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Netzwerkumgebung
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Lokale Einstellungen
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Eigene Dateien
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Druckumgebung
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Documents\Eigene Musik
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Documents\Eigene Bilder
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Local\Verlauf
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\AppData\Local\Anwendungsdaten
2013-10-27 22:46 - 2013-10-27 22:46 - 00000000 _SHDL C:\Users\M\Anwendungsdaten
2013-10-27 22:40 - 2013-10-27 22:40 - 01914374 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-10-27 22:38 - 2013-10-27 22:38 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 ____D C:\Program Files\Synaptics
2013-10-27 22:38 - 2013-10-27 22:38 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-10-27 22:37 - 2013-10-27 22:37 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-27 22:35 - 2013-10-27 22:35 - 00000000 __SHD C:\Recovery
2013-10-27 22:33 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-10-27 22:32 - 2013-10-27 22:32 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-27 22:32 - 2013-10-27 22:32 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-27 22:32 - 2013-10-27 22:32 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-10-27 22:32 - 2013-10-27 22:32 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-10-27 22:32 - 2013-10-27 22:32 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-10-27 22:32 - 2013-10-27 22:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-27 22:32 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-10-27 22:32 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-27 22:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-10-27 22:31 - 2013-10-27 22:31 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-10-27 22:27 - 2013-10-27 22:27 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2013-10-27 22:27 - 2013-10-27 22:27 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2013-10-27 22:27 - 2013-10-27 22:27 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files\MSBuild
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-10-27 22:27 - 2013-10-27 22:27 - 00000000 ____D C:\inetpub
2013-10-27 22:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2013-10-27 22:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2013-10-27 21:23 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-27 10:22 - 2013-10-27 09:40 - 327740532 ____R C:\Users\M\Downloads\Parades.End.1x03.HDTV.x264-FoV.mp4
2013-10-27 10:18 - 2013-10-27 09:40 - 367470720 ____R C:\Users\M\Downloads\Parades.End.1x02.HDTV.x264-FoV.mp4
2013-10-27 10:04 - 2013-10-27 09:39 - 351212867 ____R C:\Users\M\Downloads\Parades.End.1x05.HDTV.x264-FoV.mp4
2013-10-27 10:02 - 2013-10-27 09:39 - 357867920 ____R C:\Users\M\Downloads\Parades.End.1x04.HDTV.x264-FoV.mp4
2013-10-27 09:46 - 2013-10-27 09:39 - 389568742 ____R C:\Users\M\Downloads\Parades.End.1x01.HDTV.x264-FoV.mp4
2013-10-27 09:06 - 2013-05-13 15:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-10-26 20:21 - 2013-11-08 22:04 - 00047105 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E07.720p.HDTV.x264-KILLERS.srt
2013-10-26 20:09 - 2013-10-26 18:21 - 00053071 _____ C:\Users\M\Downloads\Downton.Abbey.4x05.HDTV.x264-FoV.srt
2013-10-26 16:30 - 2013-10-26 16:30 - 00000000 ____D C:\Users\M\AppData\Local\Windows Live
2013-10-25 16:19 - 2013-10-25 16:09 - 308418510 ____R C:\Users\M\Downloads\White.Collar.S05E02.HDTV.x264-2HD.mp4
2013-10-24 18:00 - 2013-10-24 17:43 - 1151835199 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E07.720p.HDTV.x264-KILLERS.mkv
2013-10-23 12:01 - 2013-10-29 09:13 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-10-23 09:59 - 2013-10-29 09:13 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-10-22 17:32 - 2013-10-22 17:16 - 369671747 ____R C:\Users\M\Downloads\Homeland.S03E04.HDTV.x264-2HD.mp4
2013-10-22 17:30 - 2013-10-22 17:26 - 281632102 ____R C:\Users\M\Downloads\Downton.Abbey.4x05.HDTV.x264-FoV.mp4
2013-10-22 17:26 - 2013-10-22 17:13 - 337549083 ____R C:\Users\M\Downloads\White.Collar.S05E01.HDTV.x264-2HD.mp4
2013-10-22 08:05 - 2013-10-22 19:24 - 00032288 _____ C:\Users\M\Downloads\Homeland.S03E04.HDTV.x264-2HD.srt
2013-10-16 22:31 - 2013-10-16 13:50 - 00052419 _____ C:\Users\M\Downloads\Downton.Abbey.4x04.HDTV.x264-RiVER.srt
2013-10-16 22:19 - 2013-10-16 22:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-15 21:01 - 2013-10-15 21:01 - 00000000 ____D C:\ProgramData\Ant
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Users\M\AppData\Roaming\Garmin
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Program Files\DIFX
2013-10-15 21:00 - 2013-10-15 21:00 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-10-15 20:54 - 2013-10-11 18:49 - 00004082 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 20:54 - 2013-10-11 18:49 - 00003846 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 19:34 - 2013-10-15 19:34 - 00000000 ____D C:\Users\M\AppData\Local\Apple Computer
2013-10-15 19:33 - 2013-10-15 19:33 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Users\M\AppData\Local\Apple
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-15 19:32 - 2013-05-13 16:50 - 00000000 ____D C:\ProgramData\Apple
2013-10-15 19:31 - 2013-10-15 19:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-10-15 17:09 - 2013-05-13 17:36 - 00002501 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-10-15 17:09 - 2013-05-13 17:35 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64
2013-10-15 08:28 - 2013-10-15 19:34 - 00041165 _____ C:\Users\M\Downloads\Boardwalk.Empire.S04E06.HDTV.XviD-AFG.srt
2013-10-14 20:22 - 2013-10-12 11:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-14 19:58 - 2013-10-14 19:47 - 408637109 ____R C:\Users\M\Downloads\Homeland.S03E03.HDTV.x264-ASAP.mp4
2013-10-14 19:58 - 2013-10-14 19:47 - 272824569 ____R C:\Users\M\Downloads\Downton.Abbey.4x04.HDTV.x264-RiVER.mp4
2013-10-14 19:52 - 2013-10-14 19:48 - 302041543 ____R C:\Users\M\Downloads\Boardwalk.Empire.S04E06.HDTV.x264-KILLERS.mp4
2013-10-14 17:18 - 2013-10-14 20:01 - 00020494 _____ C:\Users\M\Downloads\Homeland.S03E03.HDTV.x264-ASAP.srt
2013-10-13 12:44 - 2013-10-09 18:01 - 00051834 _____ C:\Users\M\Downloads\Downton.Abbey.4x03.HDTV.x264-FoV.srt
2013-10-13 12:44 - 2013-10-01 12:45 - 00050782 _____ C:\Users\M\Downloads\Downton.Abbey.4x02.HDTV.x264-FoV.srt
2013-10-13 12:43 - 2013-09-25 04:13 - 00067652 _____ C:\Users\M\Downloads\Downton.Abbey.4x01.HDTV.x264-FoV.srt
2013-10-13 12:11 - 2013-10-13 11:44 - 366102917 ____R C:\Users\M\Downloads\Downton.Abbey.4x01.HDTV.x264-FoV.mp4
2013-10-13 11:57 - 2013-10-13 11:44 - 276464484 ____R C:\Users\M\Downloads\Downton.Abbey.4x02.HDTV.x264-FoV.mp4
2013-10-13 11:50 - 2013-10-13 11:44 - 292733999 ____R C:\Users\M\Downloads\Downton.Abbey.4x03.HDTV.x264-FoV.mp4
2013-10-13 08:09 - 2013-10-12 11:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Works

Some content of TEMP:
====================
C:\Users\M\AppData\Local\Temp\IMsetup.exe
C:\Users\M\AppData\Local\Temp\mgsqlite3.dll
C:\Users\M\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-12 20:36

==================== End Of Log ============================

Dopuna: 12 Nov 2013 22:33

mycity.rs/must-login.png

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Zasto si pokretao DelFix program? Znas li cemu je taj alat namenjen?
Citat:2013-11-12 20:55 - 2013-11-12 20:53 - 00000866 _____ C:\DelFix.txt
Pokretao si alat danas, tj. veceras, par minuta pre otvaranje teme u Ambulanti.




1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:
Start
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://do-search.com/?type=sc&ts=1384205521&from=i.....LZP0EWLZPX
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
C:\Users\M\AppData\Local\Temp\IMsetup.exe
C:\Users\M\AppData\Local\Temp\mgsqlite3.dll
C:\Users\M\AppData\Local\Temp\Quarantine.exe
File: C:\Windows\system32\inetsrv\w3logsvc.dll
CMD: ipconfig /flushdns
End

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.



------- Potom -------



Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

Dvoklikom pokreni program.
Klikni na dugme [Scan] i pricekaj da program zavrsi.
Klikni na dugme [Clean]
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok


Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"

Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt


=========================================


Arrow Da li je problem nestao?

offline
  • Pridružio: 14 Avg 2010
  • Poruke: 185

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2013 01
Ran by M at 2013-11-12 23:01:49 Run:1
Running from C:\Users\M\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = do-search.com/?type=hp&ts=1384205521&from=i.....LZP0EWLZPX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = do-search.com/web/?type=ds&ts=1384205521&fr.....0EWLZPX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe do-search.com/?type=sc&ts=1384205521&from=i.....LZP0EWLZPX
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = rover.ebay.com/rover/1/5221-29880-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - {F9B981AC-E4C2-476C-81CB-302D8CF05E45} URL = amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&.....-keywords={searchTerms}
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
C:\Users\M\AppData\Local\Temp\IMsetup.exe
C:\Users\M\AppData\Local\Temp\mgsqlite3.dll
C:\Users\M\AppData\Local\Temp\Quarantine.exe
File: C:\Windows\system32\inetsrv\w3logsvc.dll
CMD: ipconfig /flushdns
End
*****************

HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key deleted successfully.
HKCR\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key deleted successfully.
HKCR\CLSID\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key deleted successfully.
HKCR\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key deleted successfully.
HKCR\CLSID\{F9B981AC-E4C2-476C-81CB-302D8CF05E45} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
C:\Users\M\AppData\Local\Temp\IMsetup.exe => Moved successfully.
C:\Users\M\AppData\Local\Temp\mgsqlite3.dll => Moved successfully.
C:\Users\M\AppData\Local\Temp\Quarantine.exe => Moved successfully.

========================= File: C:\Windows\system32\inetsrv\w3logsvc.dll ========================

MD5: 8E553C859C83784DEC08B10AFC3EAC92
Creation and modification date: 2013-10-27 22:27 - 2013-10-27 22:27
Size: 0076800
Attributes: ----A
Company Name: Microsoft Corporation
Internal Name: w3logsvc.dll
Original Name: w3logsvc.dll
Product Name: Internet Information Services
Description: IIS Logging Service
File Version: 8.5.9600.16384 (winblue_rtm.130821-1623)
Product Version: 8.5.9600.16384
Copyright: © Microsoft Corporation. All rights reserved.

====== End Of File: ======


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= End of CMD: =========


==== End of Fixlog ====

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Nastavicemo sutra.

Ko je trenutno na forumu
 

Ukupno su 605 korisnika na forumu :: 7 registrovanih, 0 sakrivenih i 598 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: bojank, dragoljub11987, Georgius, Mixelotti, pein, stankolich, trundle