UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0
Version: 03-07-2013 02 (ATTENTION: FRST version is 655 days old)
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3148672089-1231676138-3016609725-1000\...\Run: [ASRock A-Tuning] => [X]
Startup: C:\Users\Igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Download RIDE-RELOADED Torrent - KickassTorrents (1).lnk [2015-03-27]
ShortcutTarget: Download RIDE-RELOADED Torrent - KickassTorrents (1).lnk C:\ProgramData\{9f9de1fa-9dd3-4363-9f9d-de1fa9dd87ea}\Download RIDE-RELOADED Torrent - KickassTorrents (1).exe (No File)
Toolbar: HKU\S-1-5-21-3148672089-1231676138-3016609725-1000 No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-04-18 14:06 - 2015-04-18 14:06 - 00000000 ____D () C:\ProgramData\21ea8c90000055ae
EmptyTemp:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
HKLM-x32\...\Run: [windows COM Host] => C:\ProgramData\335936624.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"
C:\ProgramData\335936624.exe
HKU\S-1-5-21-3148672089-1231676138-3016609725-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\335936624.exe <===== ATTENTION
IFEO\avcenter.exe: [Debugger] nsjw.exe
IFEO\avguard.exe: [Debugger] nsjw.exe
IFEO\avp.exe: [Debugger] nsjw.exe
IFEO\bdagent.exe: [Debugger] nsjw.exe
IFEO\ccuac.exe: [Debugger] nsjw.exe
IFEO\ComboFix.exe: [Debugger] nsjw.exe
IFEO\egui.exe: [Debugger] nsjw.exe
IFEO\hijackthis.exe: [Debugger] nsjw.exe
IFEO\keyscrambler.exe: [Debugger] nsjw.exe
IFEO\mbam.exe: [Debugger] nsjw.exe
IFEO\MpCmdRun.exe: [Debugger] nsjw.exe
IFEO\MSASCui.exe: [Debugger] nsjw.exe
IFEO\MsMpEng.exe: [Debugger] nsjw.exe
IFEO\msseces.exe: [Debugger] nsjw.exe
IFEO\spybotsd.exe: [Debugger] nsjw.exe
IFEO\wireshark.exe: [Debugger] nsjw.exe
IFEO\zlclient.exe: [Debugger] nsjw.exe
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found
CHR Extension: (BetaFish Adblocker) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-19]
S2 MBAMService; "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" [X]
2015-05-02 20:21 - 2015-05-09 23:15 - 00000000 ___HD () C:\{$3483-6183-1568-3845$}
C:\Users\Igor\AppData\Roaming\msconfig.ini
EmptyTemp:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
InternetURL: C:\Users\Igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\google.com.url C:\ProgramData\335936624.exe
C:\ProgramData\335936624.exe
Task: {1CBC4B99-6A09-4BDB-AD5E-A3D694BA8AB9} - System32\Tasks\FRAPS => D:\Fraps\fraps.exe [2013-02-26] (Beepa P/L)
Reboot:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
DeleteQuarantine:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36
Zarejestrowani użytkownicy: Brak zarejestrowanych użytkowników