Inactive BSOD because of Virus?

[Inactive] BSOD because of Virus?

I have multiple BSOD's.
After placing the the problem here: http://www.windowsbbs.com/windows-7/103234-bsod-tunnel-sys.html, I was directed by the administrator to process these 5 steps and look for help at this place.
During step 3, I had a BSOD 2 times.

Malwarebytes Anti-Malware log:


Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.01.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Milos :: MILOS-PC [administrator]

8/1/2012 1:22:24 PM
mbam-log-2012-08-01 (13-22-24).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 182018
Time elapsed: 5 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

 

GMER log:

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-08-01 14:12:00
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 Hitachi_HDS721050CLA362 rev.JP2OA3MA
Running: dt53w8h9.exe; Driver: C:\Users\Milos\AppData\Local\Temp\kgloypog.sys


---- System - GMER 1.0.15 ----

SSDT 8E3F067E ZwCreateSection
SSDT 8E3F0688 ZwRequestWaitReplyPort
SSDT 8E3F0683 ZwSetContextThread
SSDT 8E3F068D ZwSetSecurityObject
SSDT 8E3F0692 ZwSystemDebugControl
SSDT 8E3F061F ZwTerminateProcess

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82C813C9 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82CBAD52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 82CC1EAC 4 Bytes [7E, 06, 3F, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 82CC2208 4 Bytes [88, 06, 3F, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 82CC224C 4 Bytes [83, 06, 3F, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 82CC22C8 4 Bytes [8D, 06, 3F, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 82CC231C 4 Bytes [92, 06, 3F, 8E]
.text ...

---- User code sections - GMER 1.0.15 ----

.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtCreateFile + 6 77C655CE 4 Bytes [28, 00, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtCreateFile + B 77C655D3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 1 Byte [28]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 4 Bytes [28, 03, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtMapViewOfSection + B 77C65C33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenFile + 6 77C65CDE 4 Bytes [68, 00, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenFile + B 77C65CE3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenProcess + 6 77C65D8E 4 Bytes [A8, 01, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenProcess + B 77C65D93 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenProcessToken + B 77C65DA3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenProcessTokenEx + 6 77C65DAE 4 Bytes [A8, 02, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenProcessTokenEx + B 77C65DB3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenThread + 6 77C65E0E 4 Bytes [68, 01, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenThread + B 77C65E13 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenThreadToken + 6 77C65E1E 4 Bytes [68, 02, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenThreadToken + B 77C65E23 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtOpenThreadTokenEx + B 77C65E33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtQueryAttributesFile + 6 77C65F3E 4 Bytes [A8, 00, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtQueryAttributesFile + B 77C65F43 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtQueryFullAttributesFile + B 77C65FF3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtSetInformationFile + 6 77C6663E 4 Bytes [28, 01, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtSetInformationFile + B 77C66643 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtSetInformationThread + 6 77C6669E 4 Bytes [28, 02, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtSetInformationThread + B 77C666A3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 1 Byte [68]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 4 Bytes [68, 03, 2E, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2704] ntdll.dll!NtUnmapViewOfSection + B 77C669C3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtCreateFile + 6 77C655CE 4 Bytes [28, 00, 23, 00] {SUB [EAX], AL; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtCreateFile + B 77C655D3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 1 Byte [28]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 4 Bytes [28, 03, 23, 00] {SUB [EBX], AL; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtMapViewOfSection + B 77C65C33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenFile + 6 77C65CDE 4 Bytes [68, 00, 23, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenFile + B 77C65CE3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenProcess + 6 77C65D8E 4 Bytes [A8, 01, 23, 00] {TEST AL, 0x1; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenProcess + B 77C65D93 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenProcessToken + B 77C65DA3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenProcessTokenEx + 6 77C65DAE 4 Bytes [A8, 02, 23, 00] {TEST AL, 0x2; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenProcessTokenEx + B 77C65DB3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenThread + 6 77C65E0E 4 Bytes [68, 01, 23, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenThread + B 77C65E13 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenThreadToken + 6 77C65E1E 4 Bytes [68, 02, 23, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenThreadToken + B 77C65E23 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtOpenThreadTokenEx + B 77C65E33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtQueryAttributesFile + 6 77C65F3E 4 Bytes [A8, 00, 23, 00] {TEST AL, 0x0; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtQueryAttributesFile + B 77C65F43 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtQueryFullAttributesFile + B 77C65FF3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtSetInformationFile + 6 77C6663E 4 Bytes [28, 01, 23, 00] {SUB [ECX], AL; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtSetInformationFile + B 77C66643 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtSetInformationThread + 6 77C6669E 4 Bytes [28, 02, 23, 00] {SUB [EDX], AL; AND EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtSetInformationThread + B 77C666A3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 1 Byte [68]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 4 Bytes [68, 03, 23, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2752] ntdll.dll!NtUnmapViewOfSection + B 77C669C3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtCreateFile + 6 77C655CE 4 Bytes [28, 00, 29, 00] {SUB [EAX], AL; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtCreateFile + B 77C655D3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 1 Byte [28]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 4 Bytes [28, 03, 29, 00] {SUB [EBX], AL; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtMapViewOfSection + B 77C65C33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenFile + 6 77C65CDE 4 Bytes [68, 00, 29, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenFile + B 77C65CE3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenProcess + 6 77C65D8E 4 Bytes [A8, 01, 29, 00] {TEST AL, 0x1; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenProcess + B 77C65D93 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenProcessToken + B 77C65DA3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenProcessTokenEx + 6 77C65DAE 4 Bytes [A8, 02, 29, 00] {TEST AL, 0x2; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenProcessTokenEx + B 77C65DB3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenThread + 6 77C65E0E 4 Bytes [68, 01, 29, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenThread + B 77C65E13 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenThreadToken + 6 77C65E1E 4 Bytes [68, 02, 29, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenThreadToken + B 77C65E23 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtOpenThreadTokenEx + B 77C65E33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtQueryAttributesFile + 6 77C65F3E 4 Bytes [A8, 00, 29, 00] {TEST AL, 0x0; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtQueryAttributesFile + B 77C65F43 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtQueryFullAttributesFile + B 77C65FF3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtSetInformationFile + 6 77C6663E 4 Bytes [28, 01, 29, 00] {SUB [ECX], AL; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtSetInformationFile + B 77C66643 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtSetInformationThread + 6 77C6669E 4 Bytes [28, 02, 29, 00] {SUB [EDX], AL; SUB [EAX], EAX}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtSetInformationThread + B 77C666A3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 1 Byte [68]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 4 Bytes [68, 03, 29, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[2996] ntdll.dll!NtUnmapViewOfSection + B 77C669C3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtCreateFile + 6 77C655CE 4 Bytes [28, 00, 18, 00] {SUB [EAX], AL; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtCreateFile + B 77C655D3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 1 Byte [28]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 4 Bytes [28, 03, 18, 00] {SUB [EBX], AL; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtMapViewOfSection + B 77C65C33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenFile + 6 77C65CDE 4 Bytes [68, 00, 18, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenFile + B 77C65CE3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenProcess + 6 77C65D8E 4 Bytes [A8, 01, 18, 00] {TEST AL, 0x1; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenProcess + B 77C65D93 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenProcessToken + B 77C65DA3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenProcessTokenEx + 6 77C65DAE 4 Bytes [A8, 02, 18, 00] {TEST AL, 0x2; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenProcessTokenEx + B 77C65DB3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenThread + 6 77C65E0E 4 Bytes [68, 01, 18, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenThread + B 77C65E13 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenThreadToken + 6 77C65E1E 4 Bytes [68, 02, 18, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenThreadToken + B 77C65E23 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtOpenThreadTokenEx + B 77C65E33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtQueryAttributesFile + 6 77C65F3E 4 Bytes [A8, 00, 18, 00] {TEST AL, 0x0; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtQueryAttributesFile + B 77C65F43 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtQueryFullAttributesFile + B 77C65FF3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtSetInformationFile + 6 77C6663E 4 Bytes [28, 01, 18, 00] {SUB [ECX], AL; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtSetInformationFile + B 77C66643 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtSetInformationThread + 6 77C6669E 4 Bytes [28, 02, 18, 00] {SUB [EDX], AL; SBB [EAX], AL}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtSetInformationThread + B 77C666A3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 1 Byte [68]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 4 Bytes [68, 03, 18, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3776] ntdll.dll!NtUnmapViewOfSection + B 77C669C3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtCreateFile + 6 77C655CE 4 Bytes [28, 00, 0B, 00] {SUB [EAX], AL; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtCreateFile + B 77C655D3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 1 Byte [28]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtMapViewOfSection + 6 77C65C2E 4 Bytes [28, 03, 0B, 00] {SUB [EBX], AL; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtMapViewOfSection + B 77C65C33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenFile + 6 77C65CDE 4 Bytes [68, 00, 0B, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenFile + B 77C65CE3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenProcess + 6 77C65D8E 4 Bytes [A8, 01, 0B, 00] {TEST AL, 0x1; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenProcess + B 77C65D93 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenProcessToken + B 77C65DA3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenProcessTokenEx + 6 77C65DAE 4 Bytes [A8, 02, 0B, 00] {TEST AL, 0x2; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenProcessTokenEx + B 77C65DB3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenThread + 6 77C65E0E 4 Bytes [68, 01, 0B, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenThread + B 77C65E13 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenThreadToken + 6 77C65E1E 4 Bytes [68, 02, 0B, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenThreadToken + B 77C65E23 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtOpenThreadTokenEx + B 77C65E33 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtQueryAttributesFile + 6 77C65F3E 4 Bytes [A8, 00, 0B, 00] {TEST AL, 0x0; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtQueryAttributesFile + B 77C65F43 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtQueryFullAttributesFile + B 77C65FF3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtSetInformationFile + 6 77C6663E 4 Bytes [28, 01, 0B, 00] {SUB [ECX], AL; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtSetInformationFile + B 77C66643 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtSetInformationThread + 6 77C6669E 4 Bytes [28, 02, 0B, 00] {SUB [EDX], AL; OR EAX, [EAX]}
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtSetInformationThread + B 77C666A3 1 Byte [E2]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 1 Byte [68]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtUnmapViewOfSection + 6 77C669BE 4 Bytes [68, 03, 0B, 00]
.text C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe[3788] ntdll.dll!NtUnmapViewOfSection + B 77C669C3 1 Byte [E2]

---- Devices - GMER 1.0.15 ----

Device \Driver\ACPI_HAL \Device\00000049 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

---- Files - GMER 1.0.15 ----

File C:\Users\Milos\Desktop\101MSDCF 0 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF 0 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00319.JPG 1983875 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00343.JPG 2705339 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00302.JPG 2392540 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00303.JPG 2153124 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00304.JPG 2146750 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00305.JPG 2588589 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00306.JPG 2602868 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00307.JPG 2568371 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00308.JPG 2639389 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00309.JPG 2687237 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00310.JPG 2454618 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00311.JPG 2659016 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00312.JPG 2663833 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00313.JPG 2574675 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00314.JPG 2503517 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00315.JPG 2831543 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00316.JPG 2325824 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00317.JPG 2396381 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00318.JPG 2210564 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00344.JPG 2706727 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00345.JPG 2530346 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00348.JPG 2474680 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00349.JPG 2398213 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00350.JPG 2452633 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00351.JPG 2446894 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00352.JPG 2487281 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00355.JPG 2236438 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00356.JPG 2094565 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00357.JPG 2142593 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00358.JPG 1994003 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00346.MPG 1042185 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00346.THM 7864 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00347.MPG 3137760 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00347.THM 8219 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00359.MPG 354274979 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\MOV00359.THM 4165 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00320.JPG 2817807 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00321.JPG 2545677 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00322.JPG 2439169 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00323.JPG 2664826 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00324.JPG 2476091 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00325.JPG 2473856 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00326.JPG 2193706 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00327.JPG 1962065 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00328.JPG 1858058 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00329.JPG 2027839 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00330.JPG 1946998 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00331.JPG 2528850 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00332.JPG 2247204 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00333.JPG 2719741 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00334.JPG 2759434 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00335.JPG 2142448 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00336.JPG 2145421 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00337.JPG 2339472 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00338.JPG 2781486 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00339.JPG 2394705 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00340.JPG 2598371 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00341.JPG 2850439 bytes
File C:\Users\Milos\Desktop\101MSDCF\101MSDCF\DSC00342.JPG 2752573 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00140.JPG 2820965 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00141.JPG 2242150 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00142.JPG 2478840 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00143.JPG 2663850 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00144.JPG 2345863 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00145.JPG 2502390 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00146.JPG 2487287 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00147.JPG 2325415 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00148.JPG 2311319 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00149.JPG 2190953 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00150.JPG 2368616 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00151.JPG 2268607 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00162.JPG 2453435 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00165.JPG 2349180 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00166.JPG 1926716 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00167.JPG 2188942 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00168.JPG 2591741 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00170.JPG 1912091 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00171.JPG 2018046 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00172.JPG 526957 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00173.JPG 518862 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00174.JPG 515211 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00175.JPG 524123 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00176.JPG 544059 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00177.JPG 556635 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00178.JPG 1948870 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00179.JPG 2607765 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00180.JPG 2642742 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00182.JPG 2360918 bytes

 

File C:\Users\Milos\Desktop\101MSDCF\DSC00183.JPG 2231159 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00184.JPG 2191191 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00185.JPG 2083021 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00186.JPG 2036021 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00187.JPG 2523960 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00189.JPG 2526977 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00190.JPG 2158840 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00191.JPG 2297351 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00192.JPG 2249964 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00193.JPG 2278595 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00194.JPG 2651484 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00195.JPG 2596580 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00196.JPG 2862192 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00197.JPG 2632629 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00198.JPG 2602372 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00199.JPG 2550897 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00200.JPG 2601837 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00201.JPG 2334536 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00202.JPG 2411187 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00203.JPG 2450560 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00204.JPG 2323947 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00205.JPG 2228057 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00207.JPG 2163006 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00208.JPG 2580992 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00209.JPG 2646712 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00210.JPG 2612346 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00211.JPG 2432628 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00212.JPG 2553633 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00213.JPG 2482697 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00214.JPG 2500043 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00215.JPG 2437803 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00216.JPG 2384421 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00217.JPG 2670323 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00218.JPG 2562041 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00219.JPG 2490087 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00220.JPG 2602352 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00221.JPG 2816749 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00222.JPG 2786075 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00223.JPG 2570656 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00225.JPG 2448049 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00226.JPG 2214941 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00227.JPG 2354410 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00228.JPG 2221930 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00229.JPG 2272141 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00230.JPG 2204949 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00231.JPG 2141491 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00232.JPG 2197581 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00233.JPG 2021657 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00234.JPG 2151326 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00235.JPG 1979153 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00236.JPG 2202178 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00237.JPG 2203403 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00238.JPG 2159891 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00239.JPG 2030582 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00240.JPG 1775418 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00241.JPG 1866849 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00243.JPG 2140619 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00244.JPG 1842479 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00245.JPG 1998825 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00246.JPG 1846750 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00247.JPG 2314845 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00248.JPG 2567813 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00249.JPG 2228203 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00250.JPG 2319039 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00251.JPG 1964455 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00252.JPG 2003000 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00253.JPG 1983828 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00254.JPG 2228210 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00255.JPG 2162786 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00256.JPG 2436490 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00257.JPG 2640818 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00258.JPG 2599919 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00259.JPG 2546284 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00169.JPG 2205231 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00188.JPG 2580058 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00206.JPG 2055861 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00224.JPG 2643106 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00242.JPG 2257680 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00260.JPG 2637151 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00278.JPG 2453942 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00296.JPG 2120670 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00314.JPG 2142232 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00261.JPG 2485073 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00262.JPG 2733326 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00263.JPG 2625781 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00264.JPG 2175599 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00265.JPG 2119186 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00266.JPG 2212550 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00267.JPG 2064737 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00268.JPG 2330860 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00269.JPG 2521566 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00270.JPG 1779072 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00271.JPG 2374965 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00272.JPG 2139160 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00273.JPG 2491147 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00274.JPG 2751757 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00275.JPG 2567326 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00276.JPG 2628224 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00277.JPG 2407402 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00279.JPG 2402296 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00280.JPG 2628311 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00281.JPG 2415085 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00282.JPG 2346187 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00283.JPG 2690760 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00284.JPG 2603423 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00285.JPG 2804417 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00286.JPG 2219542 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00287.JPG 2671102 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00288.JPG 2715040 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00289.JPG 2437435 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00290.JPG 2362804 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00291.JPG 2271390 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00292.JPG 2213276 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00293.JPG 2281366 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00294.JPG 2179712 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00295.JPG 2042778 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00297.JPG 2124590 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00298.JPG 2176111 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00299.JPG 2112233 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00300.JPG 2315145 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00301.JPG 1941962 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00302.JPG 2514692 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00303.JPG 2380279 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00304.JPG 2723991 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00305.JPG 2186709 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00306.JPG 2523232 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00307.JPG 2220093 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00308.JPG 2176640 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00309.JPG 2246278 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00310.JPG 2290190 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00311.JPG 2581765 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00312.JPG 2477879 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00313.JPG 2666350 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00315.JPG 2074381 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00316.JPG 2324948 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00317.JPG 2678771 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00318.JPG 2365313 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00319.JPG 2409288 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00320.JPG 2618212 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00321.JPG 2616143 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00322.JPG 2554044 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00323.JPG 2415424 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00324.JPG 2211399 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00325.JPG 2271923 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00326.JPG 2388693 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00327.JPG 2554312 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00328.JPG 2658601 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00329.JPG 2676901 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00330.JPG 2539441 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00331.JPG 2531312 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00332.JPG 2475009 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00333.JPG 2251943 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00334.JPG 2323669 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00335.JPG 2495002 bytes
File C:\Users\Milos\Desktop\101MSDCF\DSC00336.JPG 2442802 bytes
File C:\Users\Milos\Desktop\101MSDCF\MOV00044.MP4 130704 bytes
File C:\Users\Milos\Desktop\101MSDCF\MOV00181.MPG 59721691 bytes
File C:\Users\Milos\Desktop\101MSDCF\MOV00181.THM 3863 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA 0 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000010.JPG 1071511 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000031.JPG 1123037 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000011.JPG 913816 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000012.JPG 819283 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000013.JPG 783925 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000014.JPG 816735 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000015 (2).JPG 1037617 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000015.JPG 682558 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000016 (2).JPG 1043799 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000016.JPG 700232 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000017 (2).JPG 1026548 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000017.JPG 757512 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000018.JPG 915956 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000019 (2).JPG 782452 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000019.JPG 839184 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000020.JPG 757966 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000021.JPG 1062607 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000022.JPG 1060860 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000023.JPG 814274 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000025 (2).JPG 801835 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000025.JPG 626311 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000026.JPG 1034987 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000027.JPG 1044878 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000028.JPG 1027956 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000029 (2).JPG 811907 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000029.JPG 648818 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000030 (2).JPG 780153 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000030.JPG 1134630 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000031 (2).JPG 1066383 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000001.JPG 740102 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000002.JPG 918184 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000007 (2).JPG 804034 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000007.JPG 904163 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000008 (2).JPG 745691 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000008.JPG 887801 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000009 (2).JPG 901032 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000009.JPG 1027325 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000010 (2).JPG 918512 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000032 (2).JPG 857882 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000032.JPG 1084532 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000033 (2).JPG 837389 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000033.JPG 1072842 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000034 (2).JPG 841536 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000034.JPG 817766 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000035 (2).JPG 1078289 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000035.JPG 695375 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000036 (2).JPG 806342 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000036.JPG 626267 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000037 (2).JPG 735825 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000037.JPG 591978 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000038.JPG 590146 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000039.JPG 736565 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000040.JPG 894155 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000041.JPG 770259 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000042.JPG 854730 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000043.JPG 754988 bytes
File C:\Users\Milos\Desktop\101MSDCF\NATASA\CNV000044.JPG 633623 bytes

---- EOF - GMER 1.0.15 ----

 

MBR log:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-01 15:57:23
-----------------------------
15:57:23.635 OS Version: Windows 6.1.7601 Service Pack 1
15:57:23.635 Number of processors: 2 586 0x170A
15:57:23.637 ComputerName: MILOS-PC UserName: Milos
15:57:24.491 Initialize success
15:57:29.867 AVAST engine defs: 12080100
15:57:35.150 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
15:57:35.155 Disk 0 Vendor: Hitachi_HDS721050CLA362 JP2OA3MA Size: 476940MB BusType: 3
15:57:35.184 Disk 0 MBR read successfully
15:57:35.190 Disk 0 MBR scan
15:57:35.212 Disk 0 Windows 7 default MBR code
15:57:35.232 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
15:57:35.258 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 95299 MB offset 206848
15:57:35.333 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 381539 MB offset 195379200
15:57:35.374 Disk 0 scanning sectors +976771072
15:57:35.531 Disk 0 scanning C:\Windows\system32\drivers
15:57:48.048 Service scanning
15:58:18.171 Modules scanning
15:58:28.048 Disk 0 trace - called modules:
15:58:28.068 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
15:58:28.074 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85e2fa38]
15:58:28.080 3 CLASSPNP.SYS[88dad59e] -> nt!IofCallDriver -> [0x85d5a400]
15:58:28.085 5 ACPI.sys[838ac3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0x85d57908]
15:58:28.609 AVAST engine scan C:\Windows
15:58:30.539 AVAST engine scan C:\Windows\system32
16:02:06.994 AVAST engine scan C:\Windows\system32\drivers
16:02:23.299 AVAST engine scan C:\Users\Milos
16:03:20.133 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:03:20.150 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-01 15:57:23
-----------------------------
15:57:23.635 OS Version: Windows 6.1.7601 Service Pack 1
15:57:23.635 Number of processors: 2 586 0x170A
15:57:23.637 ComputerName: MILOS-PC UserName: Milos
15:57:24.491 Initialize success
15:57:29.867 AVAST engine defs: 12080100
15:57:35.150 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
15:57:35.155 Disk 0 Vendor: Hitachi_HDS721050CLA362 JP2OA3MA Size: 476940MB BusType: 3
15:57:35.184 Disk 0 MBR read successfully
15:57:35.190 Disk 0 MBR scan
15:57:35.212 Disk 0 Windows 7 default MBR code
15:57:35.232 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
15:57:35.258 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 95299 MB offset 206848
15:57:35.333 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 381539 MB offset 195379200
15:57:35.374 Disk 0 scanning sectors +976771072
15:57:35.531 Disk 0 scanning C:\Windows\system32\drivers
15:57:48.048 Service scanning
15:58:18.171 Modules scanning
15:58:28.048 Disk 0 trace - called modules:
15:58:28.068 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
15:58:28.074 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85e2fa38]
15:58:28.080 3 CLASSPNP.SYS[88dad59e] -> nt!IofCallDriver -> [0x85d5a400]
15:58:28.085 5 ACPI.sys[838ac3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0x85d57908]
15:58:28.609 AVAST engine scan C:\Windows
15:58:30.539 AVAST engine scan C:\Windows\system32
16:02:06.994 AVAST engine scan C:\Windows\system32\drivers
16:02:23.299 AVAST engine scan C:\Users\Milos
16:03:20.133 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:03:20.150 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "
16:05:30.839 AVAST engine scan C:\ProgramData
16:06:23.293 Scan finished successfully
16:34:41.212 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:34:41.222 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-01 15:57:23
-----------------------------
15:57:23.635 OS Version: Windows 6.1.7601 Service Pack 1
15:57:23.635 Number of processors: 2 586 0x170A
15:57:23.637 ComputerName: MILOS-PC UserName: Milos
15:57:24.491 Initialize success
15:57:29.867 AVAST engine defs: 12080100
15:57:35.150 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
15:57:35.155 Disk 0 Vendor: Hitachi_HDS721050CLA362 JP2OA3MA Size: 476940MB BusType: 3
15:57:35.184 Disk 0 MBR read successfully
15:57:35.190 Disk 0 MBR scan
15:57:35.212 Disk 0 Windows 7 default MBR code
15:57:35.232 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
15:57:35.258 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 95299 MB offset 206848
15:57:35.333 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 381539 MB offset 195379200
15:57:35.374 Disk 0 scanning sectors +976771072
15:57:35.531 Disk 0 scanning C:\Windows\system32\drivers
15:57:48.048 Service scanning
15:58:18.171 Modules scanning
15:58:28.048 Disk 0 trace - called modules:
15:58:28.068 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
15:58:28.074 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85e2fa38]
15:58:28.080 3 CLASSPNP.SYS[88dad59e] -> nt!IofCallDriver -> [0x85d5a400]
15:58:28.085 5 ACPI.sys[838ac3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0x85d57908]
15:58:28.609 AVAST engine scan C:\Windows
15:58:30.539 AVAST engine scan C:\Windows\system32
16:02:06.994 AVAST engine scan C:\Windows\system32\drivers
16:02:23.299 AVAST engine scan C:\Users\Milos
16:03:20.133 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:03:20.150 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "
16:05:30.839 AVAST engine scan C:\ProgramData
16:06:23.293 Scan finished successfully
16:34:41.212 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:34:41.222 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "
16:34:54.702 Disk 0 MBR has been saved successfully to "C:\Users\Milos\Desktop\MBR.dat "
16:34:54.711 The log file has been saved successfully to "C:\Users\Milos\Desktop\aswMBR.txt "
DDS log:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1
Run by Milos at 15:54:50 on 2012-08-01
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.2013.1319 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\WinFLService.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
C:\Windows\system32\viakaraokesrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\NewSoftware's\Folder Lock\FLComServCtrl.exe
C:\Program Files\NewSoftware's\Folder Lock\FLComServ.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe
c:\program files\windows defender\MpCmdRun.exe
C:\Users\Milos\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=ded9cf610000000000006c626dce8549&tlver=1.4.19.19&ss=1&affID=17981
mSearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=ded9cf610000000000006c626dce8549&tlver=1.4.19.19&ss=1&affID=17981
uURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: KMPlayer Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll
TB: KMPlayer Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
uRun: [FLBackup] c:\program files\newsoftware's\folder lock\FLComServCtrl.exe
mRun: [HDAudDeck] c:\program files\via\viaudioi\vdeck\VDeck.exe -r
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [<NO NAME>]
mRun: [LVCOMSX] "c:\program files\common files\logishrd\lcommgr\LVComSX.exe "
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe "
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{BB8B8A32-6E1C-473D-8677-A4F7EE82E8EE} : DhcpNameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxdev.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
IFEO: cldma.exe - "c:\program files\tuneup utilities 2012\TUAutoReactivator32.exe "
IFEO: powerdvd.exe - "c:\program files\tuneup utilities 2012\TUAutoReactivator32.exe "
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\milos\appdata\roaming\mozilla\firefox\profiles\2jvz930v.default\
FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=ded9cf610000000000006c626dce8549&tlver=1.4.19.19&instlRef=sst&ss=1&affID=17981&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll
FF - plugin: c:\users\milos\appdata\local\google\update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_268.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-7-27 36000]
R1 WinFLAdrv;WinFLAdrv;c:\windows\system32\WinFLAdrv.sys [2012-5-17 29584]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\avira\antivir desktop\sched.exe [2012-7-27 86224]
R2 AntiVirService;Avira Realtime Protection;c:\program files\avira\antivir desktop\avguard.exe [2012-7-27 110032]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-7-27 83392]
R2 FLService;FLService;c:\windows\system32\WinFLService.exe [2012-5-17 91736]
R2 NEWDRIVER;NEWDRIVER;c:\windows\system32\WinVDEdrv6.sys [2012-5-17 188176]
R2 PanService;PandoraService;c:\program files\pandora.tv\panservice\PandoraService.exe [2012-5-18 624856]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe [2012-7-5 3048136]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2012\TuneUpUtilitiesService32.exe [2012-4-5 1529152]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\ViakaraokeSrv.exe [2012-7-27 27760]
R2 WinVDEDrv;WinVDEDrv;c:\windows\system32\WinVDEdrv.sys [2012-5-17 228112]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2012-7-26 68208]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2012\TuneUpUtilitiesDriver32.sys [2012-3-29 10064]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-4-2 1804400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-5-3 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-19 250056]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-5-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-28 113120]
S3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files\msi\live update 5\msibios32_100507.sys [2012-8-1 25912]
S3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files\msi\live update 5\NTIOLib.sys [2012-8-1 7680]
S3 NTIOLib_1_0_6;NTIOLib_1_0_6;c:\program files\setup files\ms7592vq80\NTIOLib.sys [2011-1-6 7680]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-10-15 15872]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-5-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-5-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-5-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-5-13 114280]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-10-15 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2012-7-27 1343400]
.
=============== Created Last 30 ================
.
2012-08-01 11:21:14 -------- d-----w- c:\users\milos\appdata\roaming\Malwarebytes
2012-08-01 11:21:05 -------- d-----w- c:\programdata\Malwarebytes
2012-08-01 11:21:04 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-01 11:21:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-01 08:42:33 -------- d-----w- c:\program files\Setup Files
2012-08-01 08:22:08 -------- d-----w- c:\program files\MSI
2012-07-27 10:33:58 -------- d-----w- c:\users\milos\appdata\roaming\Avira
2012-07-27 10:28:22 83392 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-07-27 10:28:22 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-07-27 10:28:21 -------- d-----w- c:\programdata\Avira
2012-07-27 10:28:21 -------- d-----w- c:\program files\Avira
2012-07-27 10:09:21 -------- d-----w- C:\symbols
2012-07-27 10:02:26 -------- d-----w- c:\program files\Debugging Tools for Windows (x86)
2012-07-27 09:23:19 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2012-07-27 09:22:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-27 09:13:59 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-07-27 09:06:55 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-07-27 09:06:48 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-07-27 09:06:36 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-07-27 09:06:36 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-07-27 06:39:50 -------- d-----w- c:\windows\system32\Wat
2012-07-27 04:53:04 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\ctor.dll
2012-07-27 04:53:04 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\DotNetInstaller.exe
2012-07-27 04:53:04 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\iscript.dll
2012-07-27 04:53:04 172032 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\iuser.dll
2012-07-27 04:53:03 733184 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\iKernel.dll
2012-07-27 04:53:03 303236 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\setup.dll
2012-07-27 04:53:03 180356 ----a-w- c:\program files\common files\installshield\professional\runtime\10\00\intel32\iGdi.dll
2012-07-27 04:53:01 -------- d-----w- C:\Drivers
2012-07-27 04:49:53 895600 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2012-07-27 04:49:53 78960 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2012-07-27 04:49:53 524400 ----a-w- c:\windows\system32\VIASysFx.dll
2012-07-27 04:49:53 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
2012-07-27 04:49:53 191600 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2012-07-27 04:49:53 106608 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2012-07-27 04:49:53 1021552 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2012-07-27 04:49:49 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2012-07-27 04:49:49 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2012-07-26 11:45:35 -------- d-----w- c:\windows\system32\Atheros_L1e
2012-07-26 11:45:07 68208 ----a-w- c:\windows\system32\drivers\L1C62x86.sys
2012-07-26 11:24:45 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll
2012-07-26 11:24:45 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll
2012-07-26 11:24:45 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe
2012-07-26 11:24:45 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll
2012-07-26 11:24:45 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll
2012-07-26 11:24:45 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll
2012-07-26 11:24:44 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll
2012-07-26 11:20:56 -------- d-----w- c:\program files\Labtec
2012-07-26 10:48:48 -------- d-----w- c:\users\milos\appdata\roaming\Easeware
2012-07-26 10:48:45 -------- d-----w- c:\program files\Easeware
2012-07-24 06:34:24 -------- d-----w- c:\programdata\Ask
2012-07-09 17:51:24 -------- d-----w- c:\program files\Oracle
2012-07-05 16:45:34 5030088 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
2012-07-03 20:16:14 770384 ----a-w- c:\program files\mozilla firefox\msvcr100.dll
2012-07-03 20:16:14 421200 ----a-w- c:\program files\mozilla firefox\msvcp100.dll
2012-07-02 19:12:09 -------- d-----w- c:\users\milos\appdata\local\ElevatedDiagnostics
.
==================== Find3M ====================
.
2012-07-29 13:22:24 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-29 13:22:24 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-27 06:40:19 13824 ----a-w- c:\windows\system32\slwga.dll
2012-07-27 06:40:18 409088 ----a-w- c:\windows\system32\systemcpl.dll
2012-07-27 06:40:12 811520 ----a-w- c:\windows\system32\user32.dll
2012-06-06 05:05:52 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-06-06 05:05:52 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-06-06 05:03:06 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-06-02 04:45:04 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-06-02 04:45:03 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 04:40:59 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2012-06-02 04:40:39 225280 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 04:39:10 219136 ----a-w- c:\windows\system32\ncrypt.dll
2012-05-17 11:52:40 29584 ----a-w- c:\windows\system32\WinFLAdrv.sys
2012-05-17 11:52:39 188176 ----a-w- c:\windows\system32\WinVDEdrv6.sys
2012-05-17 11:52:38 228112 ----a-w- c:\windows\system32\WinVDEdrv.sys
2012-05-17 11:52:16 91736 ----a-w- c:\windows\system32\WinFLService.exe
2012-05-17 11:52:15 14936 ----a-w- c:\windows\system32\WinFLMsgService.exe
2012-05-17 11:52:14 40960 ----a-w- c:\windows\system32\nwsftUninstall.exe
2012-05-17 11:52:12 293976 ----a-w- c:\windows\system32\WinFLTray.exe
2012-05-17 11:52:11 293976 ----a-w- c:\windows\system32\WinFLTrayShred.exe
2012-05-17 11:52:10 479832 ----a-w- c:\windows\system32\WinFLCtxMenu.dll
2012-05-04 17:29:22 772504 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-05-04 17:29:16 687504 ----a-w- c:\windows\system32\deployJava1.dll
2012-05-04 09:59:54 514560 ----a-w- c:\windows\system32\qdvd.dll
.
============= FINISH: 15:55:44.73 ===============

Attach log:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 4/2/2011 10:27:58 AM
System Uptime: 8/1/2012 3:36:00 PM (0 hours ago)
.
Motherboard: MSI | | G41M-P26 (MS-7592)
Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz | CPU 1 | 2603/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 93 GiB total, 59.764 GiB free.
D: is FIXED (NTFS) - 373 GiB total, 264.899 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl54c4eaad
Device ID: ROOT\LEGACY_MPKSL54C4EAAD\0000
Manufacturer:
Name: MpKsl54c4eaad
PNP Device ID: ROOT\LEGACY_MPKSL54C4EAAD\0000
Service: MpKsl54c4eaad
.
==== System Restore Points ===================
.
RP289: 7/27/2012 6:49:16 AM - Installed VIA_Audio_V6019500_XPVistaWin7.zip by DriverEasy
RP291: 7/27/2012 6:50:44 AM - Configured Platform
RP292: 7/27/2012 6:52:50 AM - Installed h1100142.exe by DriverEasy
RP294: 7/27/2012 6:53:14 AM - Installed Genesys USB Mass Storage Device
RP295: 7/27/2012 6:53:43 AM - Installed Win7Vista_151717.exe by DriverEasy
RP296: 7/27/2012 8:39:22 AM - Windows Update
RP297: 7/27/2012 10:47:03 AM - Windows Update
RP298: 7/27/2012 11:06:21 AM - Windows Update
RP299: 7/27/2012 11:21:45 AM - Windows Update
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
µTorrent
Acrobat.com
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader 9.5.1
Ask Toolbar
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
Avira Free Antivirus
Betop C031/C033/C036
BS.Player FREE
D3DX10
Debugging Tools for Windows (x86)
DriverEasy 4.0.5
Folder Lock
Google Chrome
Intel(R) Graphics Media Accelerator Driver
Intel(R) TV Wizard
Java Auto Updater
Java(TM) 6 Update 26
Java(TM) 7 Update 5
JavaFX 2.1.1
JDownloader 0.9
K-Lite Codec Pack 5.4.4 (Full)
Labtec WebCam
Live Update 5
Malwarebytes Anti-Malware version 1.62.0.1300
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft XML Parser
Mozilla Firefox 13.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 8
neroxml
Pandora Service
Platform
PowerDVD
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
Skype Click to Call
Skype™ 5.9
Spelling Dictionaries Support For Adobe Reader 9
The KMPlayer (remove only)
TuneUp Utilities 2012
TuneUp Utilities Language Pack (en-US)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2598290) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VCRedistSetup
VIA Platform Device Manager
VLC media player 1.1.11
Winamp (remove only)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Messenger
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinRAR 4.00 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
8/1/2012 3:36:21 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x00000000, 0x000000ff, 0x00000008, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 080112-18891-01.
8/1/2012 2:20:15 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0xc03be320, 0x00000000, 0x00000000, 0x82ce40c6). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 080112-18267-01.
7/31/2012 11:09:44 AM, Error: Microsoft-Windows-DistributedCOM [10001] - Unable to start a DCOM Server: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} as /. The error: "5" Happened while starting this command: C:\Windows\System32\slui.exe -Embedding
7/27/2012 7:12:50 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x1521ef5b, 0x0000000a, 0x00000000, 0x8ee0f618). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072712-13790-01.
7/27/2012 11:42:49 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000be (0x8e2c0d08, 0x79ddc121, 0x8078acc8, 0x0000000a). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072712-14835-01.
7/27/2012 10:57:11 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:58 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
7/27/2012 10:48:58 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
7/27/2012 10:48:48 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments " " in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
7/27/2012 10:48:48 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments " " in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
7/27/2012 10:48:45 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
7/27/2012 10:48:30 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments " " in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
7/27/2012 10:48:22 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD CSC DfsC discache MpFilter NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/27/2012 10:48:21 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
7/27/2012 10:48:19 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0x90000004, 0x00000000, 0x82c3495a, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072712-17768-01.
7/27/2012 10:15:36 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007e (0xc0000005, 0x8dae4464, 0x8aaf99cc, 0x8aaf95b0). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072712-14055-01.
7/26/2012 11:29:23 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c2 (0x00000007, 0x0000109b, 0x82b41a00, 0x86f494d8). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072612-11310-01.
7/26/2012 1:24:26 PM, Error: Service Control Manager [7030] - The LVSrvLauncher service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
.
==== End Of File ===========================

 

This is it!

 

After running the program according to your instructions, everything went well until step 12 Then the computer froze. I waited two hours and nothing happened. Then I rebooted on my own risk.

I repeat procedure according to the instructions continuation.
RKILL log:

Rkill 2.0.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 08/02/2012 09:52:59 AM in x86 mode.
Windows Version: Windows 7

Checking for Windows services to stop.

* No malware services found to stop.

Checking for processes to terminate.

* No malware processes found to kill.

Checking Registry for malware related settings.

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks.

* No issues found.

Restarting Explorer.exe in order to apply changes.

Program finished at: 08/02/2012 09:53:12 AM
Execution time: 0 hours(s), 0 minute(s), and 12 seconds(s)

ComboFix log:

ComboFix 12-07-31.03 - Milos 08/02/2012 9:55.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.2013.1214 [GMT 2:00]
Running from: c:\users\Milos\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-07-02 to 2012-08-02 )))))))))))))))))))))))))))))))
.
.
2012-08-02 08:02 . 2012-08-02 08:02 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-01 11:21 . 2012-08-01 11:21 -------- d-----w- c:\users\Milos\AppData\Roaming\Malwarebytes
2012-08-01 11:21 . 2012-08-01 11:21 -------- d-----w- c:\programdata\Malwarebytes
2012-08-01 11:21 . 2012-08-01 11:21 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-01 11:21 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-01 08:42 . 2012-08-01 08:42 -------- d-----w- c:\program files\Setup Files
2012-08-01 08:22 . 2012-08-01 08:22 -------- d-----w- c:\program files\MSI
2012-07-27 10:33 . 2012-07-27 10:33 -------- d-----w- c:\users\Milos\AppData\Roaming\Avira
2012-07-27 10:28 . 2012-04-27 08:20 137928 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-07-27 10:28 . 2012-04-24 22:32 83392 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-07-27 10:28 . 2012-04-16 19:18 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-07-27 10:28 . 2012-07-27 10:28 -------- d-----w- c:\programdata\Avira
2012-07-27 10:28 . 2012-07-27 10:28 -------- d-----w- c:\program files\Avira
2012-07-27 10:09 . 2012-08-01 14:55 -------- d-----w- C:\symbols
2012-07-27 10:02 . 2012-08-01 14:54 -------- d-----w- c:\program files\Debugging Tools for Windows (x86)
2012-07-27 09:23 . 2012-07-27 09:23 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2012-07-27 09:22 . 2012-06-12 02:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-27 09:13 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-07-27 09:06 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-07-27 09:06 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-07-27 09:06 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-07-27 09:06 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-07-27 09:06 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2012-07-27 09:06 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-07-27 09:06 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-07-27 09:06 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-07-27 09:06 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-07-27 06:39 . 2012-07-27 06:39 -------- d-----w- c:\windows\system32\Wat
2012-07-27 04:53 . 2004-04-18 21:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll
2012-07-27 04:53 . 2004-04-18 21:39 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll
2012-07-27 04:53 . 2004-04-18 21:39 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll
2012-07-27 04:53 . 2004-04-18 21:39 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe
2012-07-27 04:53 . 2012-07-27 04:53 303236 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll
2012-07-27 04:53 . 2012-07-27 04:53 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll
2012-07-27 04:53 . 2004-04-18 21:42 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll
2012-07-27 04:53 . 2012-07-27 04:53 -------- d-----w- C:\Drivers
2012-07-27 04:49 . 2011-03-29 08:03 895600 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2012-07-27 04:49 . 2011-03-29 08:03 524400 ----a-w- c:\windows\system32\VIASysFx.dll
2012-07-27 04:49 . 2011-03-29 08:03 78960 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2012-07-27 04:49 . 2011-03-29 08:03 191600 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2012-07-27 04:49 . 2011-03-29 08:03 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
2012-07-27 04:49 . 2011-03-29 08:03 106608 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2012-07-27 04:49 . 2011-03-29 08:03 1021552 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2012-07-27 04:49 . 2011-03-29 08:03 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2012-07-27 04:49 . 2011-03-29 08:03 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2012-07-26 11:45 . 2012-07-26 11:45 -------- d-----w- c:\windows\system32\Atheros_L1e
2012-07-26 11:45 . 2010-11-08 10:43 68208 ----a-w- c:\windows\system32\drivers\L1C62x86.sys
2012-07-26 11:24 . 2012-07-26 11:24 188548 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2012-07-26 11:24 . 2003-11-10 16:14 729088 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2012-07-26 11:24 . 2003-11-10 16:13 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2012-07-26 11:24 . 2003-11-10 16:12 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2012-07-26 11:24 . 2003-11-10 16:12 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2012-07-26 11:24 . 2003-11-10 16:11 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2012-07-26 11:24 . 2012-07-26 11:24 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2012-07-26 11:24 . 2012-07-26 11:24 -------- d-----w- c:\program files\Common Files\LogiShrd
2012-07-26 11:20 . 2012-07-26 11:24 -------- d-----w- c:\program files\Labtec
2012-07-26 10:48 . 2012-07-26 10:48 -------- d-----w- c:\users\Milos\AppData\Roaming\Easeware
2012-07-26 10:48 . 2012-07-26 10:48 -------- d-----w- c:\program files\Easeware
2012-07-24 06:34 . 2012-07-24 06:34 -------- d-----w- c:\programdata\Ask
2012-07-09 17:51 . 2012-07-09 17:51 -------- d-----w- c:\program files\Oracle
2012-07-05 16:45 . 2012-07-05 16:45 5030088 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-07-03 20:16 . 2012-07-03 20:16 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-07-03 20:16 . 2012-07-03 20:16 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-29 13:22 . 2012-04-19 19:41 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-29 13:22 . 2011-12-02 18:31 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-27 06:40 . 2011-10-15 14:02 13824 ----a-w- c:\windows\system32\slwga.dll
2012-07-27 06:40 . 2011-10-15 14:02 409088 ----a-w- c:\windows\system32\systemcpl.dll
2012-07-27 06:40 . 2011-10-15 14:03 811520 ----a-w- c:\windows\system32\user32.dll
2012-05-17 11:52 . 2012-05-17 11:52 29584 ----a-w- c:\windows\system32\WinFLAdrv.sys
2012-05-17 11:52 . 2012-05-17 11:52 188176 ----a-w- c:\windows\system32\WinVDEdrv6.sys
2012-05-17 11:52 . 2012-05-17 11:52 228112 ----a-w- c:\windows\system32\WinVDEdrv.sys
2012-05-17 11:52 . 2012-05-17 11:52 91736 ----a-w- c:\windows\system32\WinFLService.exe
2012-05-17 11:52 . 2012-05-17 11:52 14936 ----a-w- c:\windows\system32\WinFLMsgService.exe
2012-05-17 11:52 . 2012-05-14 05:39 40960 ----a-w- c:\windows\system32\nwsftUninstall.exe
2012-05-17 11:52 . 2012-05-17 11:52 293976 ----a-w- c:\windows\system32\WinFLTray.exe
2012-05-17 11:52 . 2012-05-17 11:52 293976 ----a-w- c:\windows\system32\WinFLTrayShred.exe
2012-05-17 11:52 . 2012-05-14 05:39 479832 ----a-w- c:\windows\system32\WinFLCtxMenu.dll
2012-05-04 17:29 . 2012-05-15 21:58 772504 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-05-04 17:29 . 2011-04-08 18:43 687504 ----a-w- c:\windows\system32\deployJava1.dll
2012-07-06 03:09 . 2011-05-07 09:30 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2012-07-27 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll
[7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-05-04 13:43 1519272 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440} "= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-05-04 1519272]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440} "= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-05-04 1519272]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FLBackup "= "c:\program files\NewSoftware's\Folder Lock\FLComServCtrl.exe" [2012-05-17 282712]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck "= "c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2011-04-06 2154096]
"RemoteControl "= "c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-08 32768]
"LVCOMSX "= "c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe" [2007-03-06 252704]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2011-06-03 138008]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2011-06-03 171288]
"Persistence "= "c:\windows\system32\igfxpers.exe" [2011-06-03 172824]
"avgnt "= "c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-08-01 348664]
"LogitechCommunicationsManager "= "c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin "= 0 (0x0)
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableLUA "= 0 (0x0)
"EnableUIADesktopToggle "= 0 (0x0)
"PromptOnSecureDesktop "= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinFLAdrv.sys]
@= "Driver "
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update "= "c:\users\Milos\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} "= "c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe "
"WinFLTray "=c:\windows\system32\WinFLTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe "
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe "
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
"ApnUpdater "= "c:\program files\Ask.com\Updater\Updater.exe "
"LogitechQuickCamRibbon "= "c:\program files\Labtec\WebCam10\WebCam10.exe" /hide
"NeroFilterCheck "=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe "
"Live Update 5 "=c:\program files\MSI\Live Update 5\BootStartLiveupdate.exe /reminder
.
R1 MpKsl54c4eaad;MpKsl54c4eaad;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{221D752D-2595-4B6B-8F89-10EE726A5793}\MpKsl54c4eaad.sys [x]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files\MSI\Live Update 5\msibios32_100507.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files\MSI\Live Update 5\NTIOLib.sys [x]
R3 NTIOLib_1_0_6;NTIOLib_1_0_6;c:\program files\Setup Files\Ms7592vQ80\NTIOLib.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 WinFLAdrv;WinFLAdrv;c:\windows\system32\WinFLAdrv.sys [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
S2 FLService;FLService;c:\windows\system32\WinFLService.exe [x]
S2 NEWDRIVER;NEWDRIVER;c:\windows\system32\WinVDEdrv6.sys [x]
S2 PanService;PandoraService;c:\program files\PANDORA.TV\PanService\PandoraService.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [x]
S2 WinVDEDrv;WinVDEDrv;c:\windows\system32\WinVDEdrv.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-19 13:22]
.
2012-07-26 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2012-07-26 14:26]
.
2012-07-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4001806916-1733840468-2931934953-1000Core.job
- c:\users\Milos\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-15 21:23]
.
2012-08-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4001806916-1733840468-2931934953-1000UA.job
- c:\users\Milos\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-15 21:23]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=ded9cf610000000000006c626dce8549&tlver=1.4.19.19&ss=1&affID=17981
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Milos\AppData\Roaming\Mozilla\Firefox\Profiles\2jvz930v.default\
FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=ded9cf610000000000006c626dce8549&tlver=1.4.19.19&instlRef=sst&ss=1&affID=17981&q=
FF - prefs.js: network.proxy.type - 0
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-08-02 10:09:34
ComboFix-quarantined-files.txt 2012-08-02 08:09
.
Pre-Run: 70,339,620,864 bytes free
Post-Run: 70,313,897,984 bytes free
.
- - End Of File - - E34EC9BA263A16E0E8CDAD555438B260

 

I just had another BSOD. Do I need to post dump file?