I am not sure if i am infected

MarcosGuerrero · December 4, 2013

I have port scanning attacks every day , and i am afraid if i have infected or not . Here the logs

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer:

Run by Chifo at 22:21:54 on 2013-12-03

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.34.3082.18.4094.2362 [GMT -3:00]

.

AV: Bitdefender Antivirus *Enabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Bitdefender Antispyware *Enabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}

FW: Bitdefender Cortafuegos *Disabled* {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files\Bitdefender\Bitdefender\vsserv.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\atieclxx.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe

C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe

C:\Program Files\PostgreSQL\9.2\bin\postgres.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Bitdefender\Bitdefender\bdagent.exe

C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe

C:\Windows\System32\WUDFHost.exe

C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe

C:\Users\Chifo\AppData\Local\FluxSoftware\Flux\flux.exe

C:\Users\Chifo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Rainmeter\Rainmeter.exe

C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Bitdefender\Bitdefender\seccenter.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = about:blank

mWinlogon: Userinit = userinit.exe,

BHO: Bitdefender Wallet: {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

uRun: [bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"

uRun: [Agente de aplicación Bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"

uRun: [f.lux] "C:\Users\Chifo\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow

uRun: [spotify Web Helper] "C:\Users\Chifo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

mRun: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a

mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

dRun: [bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"

dRun: [bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard

dRun: [Agente de aplicación Bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"

StartupFolder: C:\Users\Chifo\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~1\Microsoft Office\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~1\Microsoft Office\Office14\ONBttnIE.dll/105

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

TCP: NameServer = 200.42.4.207 200.49.130.44

TCP: Interfaces\{ABF73E47-1D58-4A04-AEA6-544B27F67DD2} : DHCPNameServer = 200.42.4.207 200.49.130.44

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: Bitdefender Wallet: {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll

x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-Run: [bdagent] "C:\Program Files\Bitdefender\Bitdefender\bdagent.exe"

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

.

============= SERVICES / DRIVERS ===============

.

R0 amd_sata;amd_sata;C:\Windows\System32\drivers\amd_sata.sys [2013-6-27 82240]

R0 amd_xata;amd_xata;C:\Windows\System32\drivers\amd_xata.sys [2013-6-27 42304]

R0 avc3;avc3;C:\Windows\System32\drivers\avc3.sys [2013-11-20 727592]

R0 gzflt;gzflt;C:\Windows\System32\drivers\gzflt.sys [2013-11-20 150256]

R1 AppleCharger;AppleCharger;C:\Windows\System32\drivers\AppleCharger.sys [2013-11-20 21104]

R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [2013-11-20 93600]

R1 bdfwfpf;bdfwfpf;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2013-11-20 103504]

R1 BDVEDISK;BDVEDISK;C:\Windows\System32\drivers\bdvedisk.sys [2013-11-20 76944]

R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]

R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]

R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2013-10-10 144152]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-10-8 239616]

R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-10-8 344064]

R2 AODDriver4.2;AODDriver4.2;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-11-20 57512]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-11-30 418376]

R2 postgresql-x64-9.2;postgresql-x64-9.2 - PostgreSQL Server 9.2;C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N "postgresql-x64-9.2" -D "C:/Program Files/PostgreSQL/9.2/data" -w --> C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N postgresql-x64-9.2 [?]

R2 UPDATESRV;Bitdefender Desktop Update Service;C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [2013-11-20 67320]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-7-5 96256]

R3 avchv;avchv Function Driver;C:\Windows\System32\drivers\avchv.sys [2013-11-20 261056]

R3 avckf;avckf;C:\Windows\System32\drivers\avckf.sys [2013-11-20 601360]

R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2013-11-20 283064]

R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;C:\Windows\System32\drivers\EtronHub3.sys [2011-1-26 39808]

R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;C:\Windows\System32\drivers\EtronXHCI.sys [2011-1-26 64256]

R3 KeyScrambler;KeyScrambler;C:\Windows\System32\drivers\keyscrambler.sys [2013-11-20 222200]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-11-30 25928]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-11-20 413800]

R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2013-11-20 58536]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]

S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-11-30 701512]

S2 SafeBox;SafeBox;C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe [2013-11-20 94624]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]

S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]

S3 bdfwfpf_pc;bdfwfpf_pc;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [2013-11-20 121928]

S3 BDSandBox;BDSandBox;C:\Windows\System32\drivers\bdsandbox.sys [2013-11-20 82824]

S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-11-21 111616]

S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-11-20 20992]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-11-20 59392]

S3 WatAdminSvc;Servicio de tecnologías de activación de Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-11-20 1255736]

S4 BdDesktopParental;Bitdefender Desktop Parental Control;C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [2013-11-20 77120]

.

=============== Created Last 30 ================

.

2013-12-02 20:41:39 -------- d-----w- C:\Program Files (x86)\TableNinja

2013-11-30 22:48:17 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-11-30 22:48:17 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-26 23:00:27 -------- d-----w- C:\Windows\Migration

2013-11-26 17:12:29 -------- d-----w- C:\Program Files\CPUID

2013-11-26 17:01:10 -------- d-----w- C:\Program Files (x86)\FinalWire

2013-11-26 01:57:08 -------- d-----w- C:\Users\Chifo\AppData\Roaming\MPC-HC

2013-11-26 01:55:55 -------- d-----w- C:\Program Files\MPC-HC

2013-11-22 14:39:53 -------- d-----w- C:\Users\Chifo\AppData\Local\Equilab

2013-11-21 23:22:45 -------- d-----w- C:\Users\Chifo\AppData\Roaming\postgresql

2013-11-21 16:13:30 -------- d-----w- C:\Program Files (x86)\Flopzilla

2013-11-21 15:37:32 -------- d-----w- C:\Program Files\Paint.NET

2013-11-21 15:37:23 -------- d-----w- C:\Users\Chifo\AppData\Local\Paint.NET

2013-11-21 15:36:16 -------- d-----w- C:\ProgramData\Licenses

2013-11-21 15:36:13 129872 ----a-w- C:\Windows\SysWow64\MSSTDFMT.DLL

2013-11-21 15:36:13 1070352 ----a-w- C:\Windows\SysWow64\MSCOMCTL.OCX

2013-11-21 15:36:12 -------- d-----w- C:\Program Files (x86)\SpywareBlaster

2013-11-21 15:35:55 -------- d-----w- C:\Users\Chifo\AppData\Roaming\SUPERAntiSpyware.com

2013-11-21 15:35:37 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com

2013-11-21 15:35:37 -------- d-----w- C:\Program Files\SUPERAntiSpyware

2013-11-21 15:10:45 -------- d-----w- C:\Users\Chifo\AppData\Roaming\Malwarebytes

2013-11-21 15:09:51 -------- d-----w- C:\ProgramData\Malwarebytes

2013-11-21 14:27:30 -------- d-----w- C:\Users\Chifo\AppData\Local\Adobe

2013-11-21 14:17:51 -------- d-----w- C:\Users\Chifo\AppData\Local\ElevatedDiagnostics

2013-11-21 13:53:14 -------- d-----w- C:\Users\Chifo\AppData\Roaming\Rainmeter

2013-11-21 13:53:13 -------- d-----w- C:\Program Files\Rainmeter

2013-11-21 13:20:13 -------- d-----w- C:\Windows\AutoKMS

2013-11-21 13:18:25 -------- d-----w- C:\ProgramData\Microsoft Toolkit

2013-11-21 12:52:28 -------- d-----w- C:\StarsHelper

2013-11-21 12:37:43 2871808 ----a-w- C:\Windows\explorer.exe

2013-11-21 12:37:43 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe

2013-11-21 12:37:39 67072 ----a-w- C:\Windows\splwow64.exe

2013-11-21 12:37:39 559104 ----a-w- C:\Windows\System32\spoolsv.exe

2013-11-21 12:37:35 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys

2013-11-21 12:37:35 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys

2013-11-21 12:37:35 52736 ----a-w- C:\Windows\System32\drivers\usbehci.sys

2013-11-21 12:37:35 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys

2013-11-21 12:37:35 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys

2013-11-21 12:37:35 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys

2013-11-21 12:37:35 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys

2013-11-21 12:37:32 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll

2013-11-21 12:37:32 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll

2013-11-21 02:56:10 58536 ----a-w- C:\Windows\System32\drivers\usbfilter.sys

2013-11-21 02:44:24 -------- d-----w- C:\Program Files\CCleaner

2013-11-21 02:27:37 1887232 ----a-w- C:\Windows\System32\d3d11.dll

2013-11-21 02:27:37 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll

2013-11-21 02:04:30 859648 ----a-w- C:\Windows\System32\IKEEXT.DLL

2013-11-21 02:04:29 830464 ----a-w- C:\Windows\System32\nshwfp.dll

2013-11-21 02:04:29 656896 ----a-w- C:\Windows\SysWow64\nshwfp.dll

2013-11-21 02:04:29 324096 ----a-w- C:\Windows\System32\FWPUCLNT.DLL

2013-11-21 02:04:29 216576 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL

2013-11-21 02:03:15 30720 ----a-w- C:\Windows\System32\cryptdlg.dll

2013-11-21 02:03:15 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll

2013-11-21 02:03:00 81920 ----a-w- C:\Windows\SysWow64\davclnt.dll

2013-11-21 02:03:00 259584 ----a-w- C:\Windows\System32\WebClnt.dll

2013-11-21 02:03:00 205824 ----a-w- C:\Windows\SysWow64\WebClnt.dll

2013-11-21 02:03:00 140800 ----a-w- C:\Windows\System32\drivers\mrxdav.sys

2013-11-21 02:03:00 102400 ----a-w- C:\Windows\System32\davclnt.dll

2013-11-21 02:01:56 983488 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-11-21 02:01:56 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-11-21 02:01:56 144384 ----a-w- C:\Windows\System32\cdd.dll

2013-11-21 02:01:20 124112 ----a-w- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll

2013-11-21 02:01:20 102608 ----a-w- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

2013-11-21 02:01:14 3155968 ----a-w- C:\Windows\System32\win32k.sys

2013-11-21 01:58:40 155584 ----a-w- C:\Windows\System32\drivers\ataport.sys

2013-11-21 01:58:34 1888768 ----a-w- C:\Windows\System32\WMVDECOD.DLL

2013-11-21 01:58:34 1620992 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL

2013-11-21 01:58:12 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2013-11-21 01:58:12 2048 ----a-w- C:\Windows\System32\tzres.dll

2013-11-21 01:56:54 936448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll

2013-11-21 01:56:54 1367040 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll

2013-11-21 01:55:33 751104 ----a-w- C:\Windows\System32\win32spl.dll

2013-11-21 01:55:33 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll

2013-11-21 01:55:26 903168 ----a-w- C:\Windows\SysWow64\certutil.exe

2013-11-21 01:55:26 52224 ----a-w- C:\Windows\System32\certenc.dll

2013-11-21 01:55:26 43008 ----a-w- C:\Windows\SysWow64\certenc.dll

2013-11-21 01:55:26 1192448 ----a-w- C:\Windows\System32\certutil.exe

2013-11-21 01:54:05 70144 ----a-w- C:\Windows\System32\appinfo.dll

2013-11-21 01:54:05 111448 ----a-w- C:\Windows\System32\consent.exe

2013-11-21 01:53:44 48640 ----a-w- C:\Windows\System32\wwanprotdim.dll

2013-11-21 01:53:44 230400 ----a-w- C:\Windows\System32\wwansvc.dll

2013-11-21 01:51:10 68608 ----a-w- C:\Windows\System32\taskhost.exe

2013-11-21 01:50:08 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

2013-11-21 01:50:08 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

2013-11-21 01:50:08 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

2013-11-21 01:50:08 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

2013-11-21 01:19:16 -------- d-----w- C:\Program Files\Microsoft Synchronization Services

2013-11-21 01:19:05 -------- d-----w- C:\Windows\PCHEALTH

2013-11-21 01:19:05 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition

2013-11-21 01:17:49 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8

2013-11-21 01:17:35 -------- d-----w- C:\Program Files\Microsoft Analysis Services

2013-11-21 01:17:35 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services

2013-11-21 01:17:28 -------- d-----w- C:\Users\Chifo\AppData\Local\Microsoft Help

2013-11-21 01:15:35 283064 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys

2013-11-21 01:15:33 -------- d-----w- C:\Users\Chifo\AppData\Roaming\DAEMON Tools Lite

2013-11-21 01:15:31 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Lite

2013-11-21 01:14:28 -------- d-----w- C:\ProgramData\DAEMON Tools Lite

2013-11-21 00:08:09 -------- d-----w- C:\Windows\System32\SPReview

2013-11-21 00:07:54 -------- d-----w- C:\Windows\System32\EventProviders

2013-11-21 00:04:59 399872 ----a-w- C:\Windows\System32\dpx.dll

2013-11-21 00:04:59 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll

2013-11-21 00:04:32 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll

2013-11-21 00:04:32 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll

2013-11-21 00:02:56 529408 ----a-w- C:\Windows\System32\wbemcomn.dll

2013-11-20 23:45:48 96768 ----a-w- C:\Windows\System32\fsutil.exe

2013-11-20 23:45:48 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe

2013-11-20 23:45:48 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys

2013-11-20 23:45:48 2565632 ----a-w- C:\Windows\System32\esent.dll

2013-11-20 23:45:48 189824 ----a-w- C:\Windows\System32\drivers\storport.sys

2013-11-20 23:45:48 1699328 ----a-w- C:\Windows\SysWow64\esent.dll

2013-11-20 23:45:48 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys

2013-11-20 23:45:48 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys

2013-11-20 23:38:50 -------- d-----w- C:\Users\Chifo\AppData\Local\StarsHelper

2013-11-20 22:32:38 -------- d-----w- C:\ProgramData\Samsung

2013-11-20 22:32:38 -------- d-----w- C:\Program Files (x86)\Samsung

2013-11-20 22:32:10 81408 ----a-w- C:\Windows\System32\imagehlp.dll

2013-11-20 22:32:10 5120 ----a-w- C:\Windows\SysWow64\wmi.dll

2013-11-20 22:32:10 5120 ----a-w- C:\Windows\System32\wmi.dll

2013-11-20 22:32:10 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys

2013-11-20 22:32:10 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll

2013-11-20 22:23:58 -------- d-----w- C:\Windows\pss

2013-11-20 22:22:58 -------- d-----w- C:\Windows\System32\MRT

2013-11-20 22:17:53 -------- d-----w- C:\Users\Chifo\AppData\Local\AMD

2013-11-20 22:17:42 -------- d-----w- C:\Users\Chifo\AppData\Roaming\QFX Software

2013-11-20 22:17:42 -------- d-----w- C:\ProgramData\QFX Software

2013-11-20 22:17:40 -------- d-----w- C:\Users\Chifo\AppData\Local\ATI

2013-11-20 22:15:52 -------- d-----w- C:\Windows\SysWow64\wbem\en-US

2013-11-20 22:15:51 -------- d-----w- C:\Windows\System32\wbem\en-US

2013-11-20 22:15:49 -------- d-----w- C:\Windows\SysWow64\Wat

2013-11-20 22:15:49 -------- d-----w- C:\Windows\System32\Wat

2013-11-20 22:15:39 0 ----a-w- C:\Windows\ativpsrm.bin

2013-11-20 22:12:38 -------- d-----w- C:\Users\Chifo\AppData\Roaming\uTorrent

2013-11-20 22:08:54 -------- d-----w- C:\Users\Chifo\AppData\Local\PokerStars

2013-11-20 22:08:42 -------- d-----w- C:\Program Files (x86)\PokerStars

2013-11-20 22:02:15 -------- d-----w- C:\Program Files\PostgreSQL

2013-11-20 21:58:47 223752 ----a-w- C:\Windows\System32\drivers\fvevol.sys

2013-11-20 21:58:06 -------- d-----r- C:\Program Files (x86)\Skype

2013-11-20 21:56:03 -------- d-----w- C:\Users\Chifo\AppData\Local\In The Money

2013-11-20 21:56:03 -------- d-----w- C:\HMArchive

2013-11-20 21:55:45 -------- d-----w- C:\ProgramData\XHEO INC

2013-11-20 21:55:18 -------- d-----w- C:\Users\Chifo\AppData\Roaming\HEM Data

2013-11-20 21:55:18 -------- d-----w- C:\Users\Chifo\AppData\Local\IsolatedStorage

2013-11-20 21:55:13 -------- d-----w- C:\Users\Chifo\AppData\Local\FluxSoftware

2013-11-20 21:54:48 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys

2013-11-20 21:54:48 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll

2013-11-20 21:54:48 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys

2013-11-20 21:54:48 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll

2013-11-20 21:54:47 744448 ----a-w- C:\Windows\System32\WUDFx.dll

2013-11-20 21:54:47 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll

2013-11-20 21:54:47 229888 ----a-w- C:\Windows\System32\WUDFHost.exe

2013-11-20 21:53:37 9728 ----a-w- C:\Windows\System32\Wdfres.dll

2013-11-20 21:53:37 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys

2013-11-20 21:53:37 2560 ----a-w- C:\Windows\System32\drivers\es-ES\wdf01000.sys.mui

2013-11-20 21:52:16 -------- d-----w- C:\Program Files (x86)\PokerStrategy.com

2013-11-20 21:52:04 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2013-11-20 21:51:56 3717632 ----a-w- C:\Windows\System32\mstscax.dll

2013-11-20 21:51:55 44032 ----a-w- C:\Windows\System32\tsgqec.dll

2013-11-20 21:51:55 36864 ----a-w- C:\Windows\SysWow64\tsgqec.dll

2013-11-20 21:51:55 3217408 ----a-w- C:\Windows\SysWow64\mstscax.dll

2013-11-20 21:51:55 158720 ----a-w- C:\Windows\System32\aaclient.dll

2013-11-20 21:51:55 131584 ----a-w- C:\Windows\SysWow64\aaclient.dll

2013-11-20 21:51:28 -------- d-----w- C:\Program Files (x86)\RVG Software

2013-11-20 21:51:17 -------- d-----w- C:\Program Files (x86)\PSQLINSTALL

2013-11-20 21:47:35 19968 ----a-w- C:\Windows\System32\drivers\usb8023.sys

2013-11-20 21:47:17 -------- d-----w- C:\Users\Chifo\AppData\Local\Downloaded Installations

2013-11-20 21:47:14 376688 ----a-w- C:\Windows\System32\drivers\netio.sys

2013-11-20 21:47:14 288088 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS

2013-11-20 21:46:24 362496 ----a-w- C:\Windows\System32\wow64win.dll

2013-11-20 21:46:24 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

2013-11-20 21:46:24 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

2013-11-20 21:44:23 2002432 ----a-w- C:\Windows\System32\msxml6.dll

2013-11-20 21:44:23 1882624 ----a-w- C:\Windows\System32\msxml3.dll

2013-11-20 21:44:23 1389568 ----a-w- C:\Windows\SysWow64\msxml6.dll

2013-11-20 21:44:22 2048 ----a-w- C:\Windows\SysWow64\msxml3r.dll

2013-11-20 21:44:22 2048 ----a-w- C:\Windows\System32\msxml3r.dll

2013-11-20 21:44:22 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll

2013-11-20 21:43:09 478208 ----a-w- C:\Windows\System32\dpnet.dll

2013-11-20 21:43:09 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

2013-11-20 21:43:09 3072 ----a-w- C:\Windows\System32\dpnaddr.dll

2013-11-20 21:43:09 2560 ----a-w- C:\Windows\SysWow64\dpnaddr.dll

2013-11-20 21:42:32 95744 ----a-w- C:\Windows\System32\synceng.dll

2013-11-20 21:42:32 78336 ----a-w- C:\Windows\SysWow64\synceng.dll

2013-11-20 21:41:58 715776 ----a-w- C:\Windows\System32\kerberos.dll

2013-11-20 21:41:58 542208 ----a-w- C:\Windows\SysWow64\kerberos.dll

2013-11-20 21:41:27 503808 ----a-w- C:\Windows\System32\srcore.dll

2013-11-20 21:41:26 43008 ----a-w- C:\Windows\SysWow64\srclient.dll

2013-11-20 21:41:26 296960 ----a-w- C:\Windows\System32\rstrui.exe

2013-11-20 21:41:12 59392 ----a-w- C:\Windows\System32\browcli.dll

2013-11-20 21:41:12 41984 ----a-w- C:\Windows\SysWow64\browcli.dll

2013-11-20 21:41:12 136704 ----a-w- C:\Windows\System32\browser.dll

2013-11-20 21:39:55 3216384 ----a-w- C:\Windows\System32\msi.dll

2013-11-20 21:39:55 2342400 ----a-w- C:\Windows\SysWow64\msi.dll

2013-11-20 21:39:55 -------- d-----w- C:\Program Files (x86)\TableScan Turbo

2013-11-20 21:39:48 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys

2013-11-20 21:38:51 -------- d-----w- C:\Users\Chifo\AppData\Local\Spotify

2013-11-20 21:38:01 -------- d-----w- C:\Users\Chifo\AppData\Roaming\Spotify

2013-11-20 21:37:50 509952 ----a-w- C:\Windows\System32\ntshrui.dll

2013-11-20 21:37:50 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll

2013-11-20 21:37:39 515584 ----a-w- C:\Windows\System32\timedate.cpl

2013-11-20 21:37:39 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl

2013-11-20 21:37:28 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll

2013-11-20 21:37:28 634880 ----a-w- C:\Windows\System32\msvcrt.dll

2013-11-20 21:37:18 395776 ----a-w- C:\Windows\System32\webio.dll

2013-11-20 21:37:18 314880 ----a-w- C:\Windows\SysWow64\webio.dll

2013-11-20 21:37:08 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll

2013-11-20 21:37:08 366592 ----a-w- C:\Windows\System32\qdvd.dll

2013-11-20 21:37:08 1572864 ----a-w- C:\Windows\System32\quartz.dll

2013-11-20 21:37:08 1328128 ----a-w- C:\Windows\SysWow64\quartz.dll

2013-11-20 21:36:59 77312 ----a-w- C:\Windows\System32\packager.dll

2013-11-20 21:36:59 67072 ----a-w- C:\Windows\SysWow64\packager.dll

2013-11-20 21:34:59 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys

2013-11-20 21:33:59 142336 ----a-w- C:\Windows\System32\poqexec.exe

2013-11-20 21:26:23 -------- d-----w- C:\Program Files (x86)\AMD AVT

2013-11-20 21:26:21 -------- d-----w- C:\Program Files (x86)\Common Files\ATI Technologies

2013-11-20 21:26:03 -------- d-----w- C:\ProgramData\AMD

2013-11-20 21:25:48 -------- d-----w- C:\Program Files\Common Files\ATI Technologies

2013-11-20 21:25:16 -------- d-----w- C:\Program Files (x86)\ATI Technologies

2013-11-20 21:23:55 -------- d-----w- C:\ProgramData\Package Cache

2013-11-20 21:22:41 -------- d-----w- C:\Program Files\ATI Technologies

2013-11-20 21:21:43 -------- d-----w- C:\AMD

2013-11-20 21:20:45 763418 ----a-w- C:\ProgramData\1384981561.bdinstall.bin

2013-11-20 21:20:01 1721576 ----a-w- C:\Windows\System32\WdfCoInstaller01009.dll

2013-11-20 21:20:00 -------- d-----w- C:\ProgramData\BDLogging

2013-11-20 21:19:44 76944 ----a-w- C:\Windows\System32\drivers\bdvedisk.sys

2013-11-20 21:19:21 93600 ----a-w- C:\Windows\System32\drivers\BdfNdisf6.sys

2013-11-20 21:19:21 82824 ----a-w- C:\Windows\System32\drivers\bdsandbox.sys

2013-11-20 21:19:21 511328 ----a-w- C:\Windows\capicom.dll

2013-11-20 21:19:19 727592 ----a-w- C:\Windows\System32\drivers\avc3.sys

2013-11-20 21:19:19 601360 ----a-w- C:\Windows\System32\drivers\avckf.sys

2013-11-20 21:19:19 261056 ----a-w- C:\Windows\System32\drivers\avchv.sys

2013-11-20 21:14:14 222200 ----a-w- C:\Windows\System32\drivers\keyscrambler.sys

2013-11-20 21:14:13 -------- d-----w- C:\Program Files (x86)\KeyScrambler

2013-11-20 21:10:05 -------- d-----w- C:\Users\Chifo\AppData\Roaming\Bitdefender

2013-11-20 21:10:01 3271472 ---ha-w- C:\bdr-bz01

2013-11-20 21:09:29 -------- d-----w- C:\Users\Chifo\AppData\Roaming\KeePass

2013-11-20 21:06:40 150256 ----a-w- C:\Windows\System32\drivers\gzflt.sys

2013-11-20 21:06:40 -------- d-----w- C:\ProgramData\Bitdefender

2013-11-20 21:06:39 389240 ----a-w- C:\Windows\System32\drivers\trufos.sys

2013-11-20 21:06:39 -------- d-----w- C:\Program Files\Bitdefender

2013-11-20 21:06:01 -------- d-----w- C:\Users\Chifo\AppData\Roaming\QuickScan

2013-11-20 21:05:34 -------- d-----w- C:\Program Files\Common Files\Bitdefender

2013-11-20 21:05:33 -------- d-----w- C:\Program Files (x86)\Common Files\Bitdefender

2013-11-20 21:02:39 -------- d-----w- C:\Users\Chifo\AppData\Local\Google

2013-11-20 21:02:34 -------- d-----w- C:\Users\Chifo\AppData\Local\Deployment

2013-11-20 21:02:34 -------- d-----w- C:\Users\Chifo\AppData\Local\Apps

2013-11-20 20:59:06 -------- d-----w- C:\Program Files (x86)\KeePass Password Safe 2

2013-11-20 20:58:44 -------- d-----w- C:\Users\Chifo\AppData\Local\Programs

2013-11-20 20:55:16 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll

2013-11-20 20:55:16 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys

2013-11-20 20:55:16 20992 ----a-w- C:\Windows\System32\drivers\rdpvideominiport.sys

2013-11-20 20:55:16 162816 ----a-w- C:\Windows\System32\rdpudd.dll

2013-11-20 20:55:16 1031680 ----a-w- C:\Windows\System32\rdpcore.dll

2013-11-20 19:48:27 31272 ----a-w- C:\Windows\System32\AppleChargerSrv.exe

2013-11-20 19:48:27 21104 ----a-w- C:\Windows\System32\drivers\AppleCharger.sys

2013-11-20 19:48:27 -------- d-----w- C:\Program Files\GIGABYTE

2013-11-20 19:48:27 -------- d-----w- C:\Program Files (x86)\GIGABYTE

2013-11-20 19:48:26 753664 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll

2013-11-20 19:48:26 69714 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll

2013-11-20 19:48:26 63488 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ISBEW64.exe

2013-11-20 19:48:26 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe

2013-11-20 19:48:26 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll

2013-11-20 19:48:26 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll

2013-11-20 19:48:26 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll

2013-11-20 19:48:26 184320 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll

2013-11-20 19:46:48 -------- d-sh--w- C:\Windows\Installer

2013-11-20 19:46:46 70200 ----a-w- C:\Windows\System32\drivers\amdsata.sys

2013-11-20 19:46:46 28728 ----a-w- C:\Windows\System32\drivers\amdxata.sys

2013-11-20 19:46:45 16440 ----a-w- C:\Windows\System32\drivers\AtiPcie.sys

2013-11-20 19:45:30 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll

2013-11-20 19:45:30 413800 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys

2013-11-20 19:45:29 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll

2013-11-20 19:44:01 -------- d-----w- C:\Windows\SysWow64\RTCOM

2013-11-20 19:44:01 -------- d-----w- C:\Program Files\Realtek

2013-11-20 13:43:37 -------- d-----w- C:\Windows\Panther

.

==================== Find3M ====================

.

2013-11-21 02:28:34 9728 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-11-21 01:01:54 175616 ----a-w- C:\Windows\System32\msclmd.dll

2013-11-21 01:01:54 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll

2013-10-08 14:01:14 78432 ----a-w- C:\Windows\System32\atimpc64.dll

2013-10-08 14:01:14 78432 ----a-w- C:\Windows\System32\amdpcom64.dll

2013-10-08 14:01:12 71704 ----a-w- C:\Windows\SysWow64\atimpc32.dll

2013-10-08 14:01:12 71704 ----a-w- C:\Windows\SysWow64\amdpcom32.dll

2013-10-08 14:01:06 142792 ----a-w- C:\Windows\System32\atiuxp64.dll

2013-10-08 14:01:06 125824 ----a-w- C:\Windows\SysWow64\atiuxpag.dll

2013-10-08 14:01:04 97984 ----a-w- C:\Windows\SysWow64\atiu9pag.dll

2013-10-08 14:01:04 114488 ----a-w- C:\Windows\System32\atiu9p64.dll

2013-10-08 14:01:02 1237200 ----a-w- C:\Windows\System32\aticfx64.dll

2013-10-08 14:01:00 1030128 ----a-w- C:\Windows\SysWow64\aticfx32.dll

2013-10-08 14:00:56 9464840 ----a-w- C:\Windows\System32\atidxx64.dll

2013-10-08 14:00:52 8215992 ----a-w- C:\Windows\SysWow64\atidxx32.dll

2013-10-08 14:00:46 6176008 ----a-w- C:\Windows\SysWow64\atiumdva.dll

2013-10-08 14:00:42 6189416 ----a-w- C:\Windows\SysWow64\atiumdag.dll

2013-10-08 14:00:36 6767240 ----a-w- C:\Windows\System32\atiumd6a.dll

2013-10-08 14:00:32 7256496 ----a-w- C:\Windows\System32\atiumd64.dll

2013-10-08 13:58:42 12534784 ----a-w- C:\Windows\System32\drivers\atikmdag.sys

2013-10-08 13:39:22 229376 ----a-w- C:\Windows\System32\clinfo.exe

2013-10-08 13:39:10 1187342 ----a-w- C:\Windows\System32\amdocl_as64.exe

2013-10-08 13:39:10 1061902 ----a-w- C:\Windows\System32\amdocl_ld64.exe

2013-10-08 13:39:08 995342 ----a-w- C:\Windows\SysWow64\amdocl_as32.exe

2013-10-08 13:39:08 798734 ----a-w- C:\Windows\SysWow64\amdocl_ld32.exe

2013-10-08 13:39:06 98816 ----a-w- C:\Windows\System32\OpenVideo64.dll

2013-10-08 13:38:58 83456 ----a-w- C:\Windows\SysWow64\OpenVideo.dll

2013-10-08 13:38:58 127488 ----a-w- C:\Windows\System32\coinst_13.152.1.8.dll

2013-10-08 13:38:52 86528 ----a-w- C:\Windows\System32\OVDecode64.dll

2013-10-08 13:38:48 73216 ----a-w- C:\Windows\SysWow64\OVDecode.dll

2013-10-08 13:38:30 28192256 ----a-w- C:\Windows\System32\amdocl64.dll

2013-10-08 13:36:22 23761408 ----a-w- C:\Windows\SysWow64\amdocl.dll

2013-10-08 13:34:34 63488 ----a-w- C:\Windows\System32\OpenCL.dll

2013-10-08 13:34:28 57344 ----a-w- C:\Windows\SysWow64\OpenCL.dll

2013-10-08 13:17:50 25385984 ----a-w- C:\Windows\System32\atio6axx.dll

2013-10-08 13:13:44 368640 ----a-w- C:\Windows\System32\atiapfxx.exe

2013-10-08 13:13:34 62464 ----a-w- C:\Windows\System32\aticalrt64.dll

2013-10-08 13:13:32 52224 ----a-w- C:\Windows\SysWow64\aticalrt.dll

2013-10-08 13:13:26 55808 ----a-w- C:\Windows\System32\aticalcl64.dll

2013-10-08 13:13:24 49152 ----a-w- C:\Windows\SysWow64\aticalcl.dll

2013-10-08 13:13:08 15716352 ----a-w- C:\Windows\System32\aticaldd64.dll

2013-10-08 13:09:52 14302208 ----a-w- C:\Windows\SysWow64\aticaldd.dll

2013-10-08 13:00:30 21400064 ----a-w- C:\Windows\SysWow64\atioglxx.dll

2013-10-08 12:54:10 442368 ----a-w- C:\Windows\System32\atidemgy.dll

2013-10-08 12:53:58 26112 ----a-w- C:\Windows\System32\atimuixx.dll

2013-10-08 12:53:50 576512 ----a-w- C:\Windows\System32\atieclxx.exe

2013-10-08 12:52:58 239616 ----a-w- C:\Windows\System32\atiesrxx.exe

2013-10-08 12:51:30 190976 ----a-w- C:\Windows\System32\atitmm64.dll

2013-10-08 12:28:36 784384 ----a-w- C:\Windows\System32\atiadlxx.dll

2013-10-08 12:28:26 594944 ----a-w- C:\Windows\SysWow64\atiadlxy.dll

2013-10-08 12:28:12 75264 ----a-w- C:\Windows\System32\atig6pxx.dll

2013-10-08 12:28:08 69632 ----a-w- C:\Windows\SysWow64\atiglpxx.dll

2013-10-08 12:28:08 69632 ----a-w- C:\Windows\System32\atiglpxx.dll

2013-10-08 12:28:04 100352 ----a-w- C:\Windows\System32\atig6txx.dll

2013-10-08 12:27:56 96768 ----a-w- C:\Windows\SysWow64\atigktxx.dll

2013-10-08 12:27:46 619008 ----a-w- C:\Windows\System32\drivers\atikmpag.sys

2013-10-08 12:24:54 43520 ----a-w- C:\Windows\System32\drivers\ati2erec.dll

2013-10-08 11:50:12 51200 ----a-w- C:\Windows\System32\kdbsdk64.dll

2013-10-08 11:45:08 38912 ----a-w- C:\Windows\SysWow64\kdbsdk32.dll

2013-10-05 20:25:35 1474048 ----a-w- C:\Windows\System32\crypt32.dll

2013-10-05 19:57:25 1168384 ----a-w- C:\Windows\SysWow64\crypt32.dll

2013-10-04 02:28:31 190464 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll

2013-10-04 02:25:17 197120 ----a-w- C:\Windows\System32\credui.dll

2013-10-04 02:24:49 1930752 ----a-w- C:\Windows\System32\authui.dll

2013-10-04 01:58:50 152576 ----a-w- C:\Windows\SysWow64\SmartcardCredentialProvider.dll

2013-10-04 01:56:25 168960 ----a-w- C:\Windows\SysWow64\credui.dll

2013-10-04 01:56:00 1796096 ----a-w- C:\Windows\SysWow64\authui.dll

2013-10-03 02:23:48 404480 ----a-w- C:\Windows\System32\gdi32.dll

2013-10-03 02:00:44 311808 ----a-w- C:\Windows\SysWow64\gdi32.dll

2013-09-28 01:09:10 497152 ----a-w- C:\Windows\System32\drivers\afd.sys

2013-09-25 02:26:40 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys

2013-09-25 02:26:40 154560 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2013-09-25 02:23:33 28672 ----a-w- C:\Windows\System32\sspisrv.dll

2013-09-25 02:23:33 135680 ----a-w- C:\Windows\System32\sspicli.dll

2013-09-25 02:23:01 28160 ----a-w- C:\Windows\System32\secur32.dll

2013-09-25 02:22:59 340992 ----a-w- C:\Windows\System32\schannel.dll

2013-09-25 02:21:50 307200 ----a-w- C:\Windows\System32\ncrypt.dll

2013-09-25 02:21:07 1447936 ----a-w- C:\Windows\System32\lsasrv.dll

2013-09-25 01:58:17 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

2013-09-25 01:57:26 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

2013-09-25 01:57:24 247808 ----a-w- C:\Windows\SysWow64\schannel.dll

2013-09-25 01:56:42 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

2013-09-25 01:03:24 30720 ----a-w- C:\Windows\System32\lsass.exe

2013-09-12 00:21:54 863344 ----a-w- C:\Windows\SysWow64\msvcr110_clr0400.dll

2013-09-12 00:21:54 501872 ----a-w- C:\Windows\SysWow64\msvcp110_clr0400.dll

2013-09-12 00:21:54 28776 ----a-w- C:\Windows\SysWow64\aspnet_counters.dll

2013-09-12 00:21:54 18000 ----a-w- C:\Windows\SysWow64\msvcr100_clr0400.dll

2013-09-11 22:39:06 855664 ----a-w- C:\Windows\System32\msvcr110_clr0400.dll

2013-09-11 22:39:06 614000 ----a-w- C:\Windows\System32\msvcp110_clr0400.dll

2013-09-11 22:39:06 30312 ----a-w- C:\Windows\System32\aspnet_counters.dll

2013-09-11 22:39:06 18000 ----a-w- C:\Windows\System32\msvcr100_clr0400.dll

2013-09-08 02:30:37 1903552 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-09-08 02:27:14 327168 ----a-w- C:\Windows\System32\mswsock.dll

2013-09-08 02:03:58 231424 ----a-w- C:\Windows\SysWow64\mswsock.dll

.

============= FINISH: 22:22:09,25 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume1

Install Date: 20/11/2013 13:49:30

System Uptime: 03/12/2013 21:04:39 (1 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. | | GA-870A-USB3

Processor: AMD Phenom II X4 B60 Processor | Socket M2 | 3400/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 119 GiB total, 75,825 GiB free.

D: is FIXED (NTFS) - 931 GiB total, 909,846 GiB free.

E: is CDROM ()

F: is Removable

G: is Removable

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP25: 26/11/2013 19:59:42 - Windows Update

RP26: 26/11/2013 20:13:12 - Windows Update

RP27: 02/12/2013 17:41:33 - Installed TableNinja

.

==== Installed Programs ======================

.

Adobe Reader XI (11.0.05) - Español

AIDA64 Extreme v4.00

AMD Accelerated Video Transcoding

AMD Catalyst Control Center

AMD Catalyst Install Manager

AMD Drag and Drop Transcoding

AMD Fuel

AMD Media Foundation Decoders

AMD USB Filter Driver

Bitdefender Total Security

Catalyst Control Center - Branding

Catalyst Control Center Graphics Previews Common

Catalyst Control Center Localization All

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

CCleaner

CPUID CPU-Z 1.67.1

DAEMON Tools Lite

Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

Etron USB3.0 Host Controller

f.lux

Flopzilla

Google Chrome

Google Update Helper

Holdem Manager

KeePass Password Safe 2.24

KeyScrambler

Malwarebytes Anti-Malware versión 1.75.0.1300

Microsoft .NET Framework 4.5.1

Microsoft .NET Framework 4.5.1 (ESN)

Microsoft .NET Framework 4.5.1 (español)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Groove MUI (English) 2010

Microsoft Office InfoPath MUI (English) 2010

Microsoft Office Office 32-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 32-bit MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Word MUI (English) 2010

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727

MPC-HC 1.7.1 (64-bit)

ON_OFF Charge B11.0110.1

Paint.NET v3.5.11

PokerStars

PokerStrategy.com Equilab

PostgreSQL 9.2

Rainmeter

Realtek Ethernet Controller Driver

Realtek HDMI Audio Driver for ATI

Realtek High Definition Audio Driver

Samsung Magician

Security Update for Microsoft Excel 2010 (KB2826033) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2553284) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2687423) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2760781) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2826023) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2826035) 64-Bit Edition

Security Update for Microsoft Outlook 2010 (KB2837597) 64-Bit Edition

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition

Skype™ 6.11

Spotify

SpywareBlaster 5.0

SUPERAntiSpyware

TableNinja

TableScan Turbo v1.0.10

Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition

Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition

Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition

Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition

Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition

Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition

Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition

Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition

Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition

Update for Microsoft Word 2010 (KB2827323) 64-Bit Edition

WinRAR 5.00 (64-bit)

.

==== Event Viewer Messages From Past Week ========

.

03/12/2013 21:05:08, Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1068" al intentar iniciar el servicio SafeBox con argumentos "" para ejecutar el servidor: {F681ABD0-41DE-46C8-9ED3-D0F4EBA19111}

03/12/2013 21:04:43, Error: NetBT [4311] - Error de inicialización; no se puede crear el dispositivo del controlador. Use la cadena "50E5493B36B7" para identificar la interfaz con errores de inicialización. Representa la dirección MAC de la interfaz con errores o el Identificador de interfaz único global (GUID), si NetBT no pudo asignar de GUID a direcciones MAC. Si no estaban disponibles ni la dirección MAC ni el GUID, la cadena representa el nombre de un dispositivo de clúster.

03/12/2013 20:33:44, Error: NetBT [4311] - Error de inicialización; no se puede crear el dispositivo del controlador. Use la cadena "50E5493B36B7" para identificar la interfaz con errores de inicialización. Representa la dirección MAC de la interfaz con errores o el Identificador de interfaz único global (GUID), si NetBT no pudo asignar de GUID a direcciones MAC. Si no estaban disponibles ni la dirección MAC ni el GUID, la cadena representa el nombre de un dispositivo de clúster.

03/12/2013 15:01:24, Error: NetBT [4311] - Error de inicialización; no se puede crear el dispositivo del controlador. Use la cadena "50E5493B36B7" para identificar la interfaz con errores de inicialización. Representa la dirección MAC de la interfaz con errores o el Identificador de interfaz único global (GUID), si NetBT no pudo asignar de GUID a direcciones MAC. Si no estaban disponibles ni la dirección MAC ni el GUID, la cadena representa el nombre de un dispositivo de clúster.

03/12/2013 10:55:33, Error: NetBT [4311] - Error de inicialización; no se puede crear el dispositivo del controlador. Use la cadena "50E5493B36B7" para identificar la interfaz con errores de inicialización. Representa la dirección MAC de la interfaz con errores o el Identificador de interfaz único global (GUID), si NetBT no pudo asignar de GUID a direcciones MAC. Si no estaban disponibles ni la dirección MAC ni el GUID, la cadena representa el nombre de un dispositivo de clúster.

.

==== End Of File ===========================

AdvancedSetup · December 10, 2013

Sorry for the delay. It looks like your post was somehow overlooked. If you still need assistance with this please let me know.

AdvancedSetup · December 16, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Sign In

I am not sure if i am infected

Recommended Posts

MarcosGuerrero

Link to post

Share on other sites

AdvancedSetup

Link to post

Share on other sites

AdvancedSetup

Link to post

Share on other sites

Recently Browsing 0 members

Browse

Activity

Personal

Business

Business Modules

Partners

Learn

Start here

Type of malware/attacks

How does it get on my computer?

Scams and grifts

Support

Important Information