Integrated Card Doesn't Work.

I have MSI GE70OE. No, this problem happen in just yesterday. Before yesterday, i dont have such a problem.

I realized that my computer working on %100 CPU. When i looked the task manager, i see %100 CPU all the time...

Problem solved. I found one thing called rss.bit. It is used the CPU %100. So, i close it and CPU dropped suddenly. Anyone know what the rss.bit is?

I already have Kaspersky PURE 3.0...

No, no I always have Kaspersky. You missunderstood me. How the virus get inside of the pc? Whatever, I'll try combofix. Thank you for your comments.

Here is my Combofix log. Can you understand what's the problem is?


ComboFix 14-03-03.02 - Batu 03.03.2014 22:53:59.1.8 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1254.90.1033.18.8113.6452 [GMT 2:00]
Running from: c:\users\Batu\Downloads\ComboFix.exe
AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-02-03 to 2014-03-03 )))))))))))))))))))))))))))))))
.
.
2014-03-03 20:59 . 2014-03-03 20:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-03 20:59 . 2014-03-03 20:59 -------- d-----w- c:\users\Batu\AppData\Local\temp
2014-03-03 19:02 . 2014-03-03 19:18 -------- d-----w- c:\users\Batu\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2014-03-03 18:24 . 2014-03-03 20:40 -------- d-----w- c:\users\Batu\AppData\Local\LogMeIn Hamachi
2014-03-03 18:24 . 2014-03-03 18:24 -------- d-----w- c:\users\Batu\AppData\Local\LogMeIn
2014-03-03 18:24 . 2014-03-03 18:24 -------- d-----w- c:\programdata\LogMeIn
2014-03-03 18:18 . 2014-03-03 18:18 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-03-03 16:07 . 2014-03-03 16:07 -------- d-----w- c:\program files (x86)\Electronic Arts
2014-02-28 22:33 . 2014-02-28 22:33 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-28 22:19 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-02-28 22:19 . 2014-02-05 09:30 1179576 ----a-w- c:\windows\system32\nvspcap64.dll
2014-02-28 22:19 . 2014-02-28 22:19 -------- d-----w- c:\users\Batu\AppData\Local\NVIDIA
2014-02-28 22:17 . 2014-03-01 09:00 -------- d-----w- c:\windows\SysWow64\NV
2014-02-28 22:17 . 2014-03-01 09:00 -------- d-----w- c:\windows\system32\NV
2014-02-28 22:17 . 2014-02-28 22:17 -------- d-----w- c:\programdata\NVIDIA
2014-02-28 22:17 . 2014-02-08 17:42 3498272 ----a-w- c:\windows\system32\nvsvc64.dll
2014-02-28 22:17 . 2014-02-08 17:42 923936 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-28 22:17 . 2014-02-08 17:42 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-02-28 22:17 . 2014-02-08 17:42 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-02-28 22:17 . 2014-02-08 17:42 1075488 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-02-28 22:17 . 2014-02-08 17:42 6712608 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-28 22:17 . 2014-02-08 17:42 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-28 22:17 . 2014-02-08 17:42 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-28 22:17 . 2014-02-05 17:52 3573739 ----a-w- c:\windows\system32\nvcoproc.bin
2014-02-28 22:10 . 2014-02-28 22:10 -------- d-----w- C:\NVIDIA
2014-02-28 21:49 . 2014-02-28 21:49 9216 ----a-w- c:\windows\system32\drivers\SjtWinIo.sys
2014-02-28 21:25 . 2012-07-11 15:09 64856 ----a-w- c:\windows\system32\klfphc.dll
2014-02-28 21:24 . 2012-12-10 13:14 67344 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2014-02-28 21:24 . 2012-12-10 13:14 98064 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
2014-02-28 21:24 . 2014-02-28 21:24 -------- d-----w- c:\program files (x86)\Common Files\InfoWatch
2014-02-28 21:24 . 2014-02-28 21:24 -------- d-----w- c:\program files (x86)\Kaspersky Lab
2014-02-28 21:23 . 2014-03-01 09:13 90208 ----a-w- c:\windows\system32\drivers\klflt.sys
2014-02-28 21:23 . 2014-03-01 09:13 625760 ----a-w- c:\windows\system32\drivers\klif.sys
2014-02-28 18:27 . 2014-02-05 23:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{45449B3A-8F6E-4FC7-B33A-2D9ACA34E325}\mpengine.dll
2014-02-28 18:14 . 2014-01-19 07:33 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-02-28 13:57 . 2014-02-28 13:57 -------- d-----w- c:\users\Batu\AppData\Local\Intel_Corporation
2014-02-27 17:59 . 2014-02-27 17:59 -------- d-----w- C:\Spacekace
2014-02-26 17:57 . 2014-02-26 17:57 46136 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
2014-02-25 13:59 . 2014-02-25 13:59 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-02-24 19:59 . 2014-02-24 20:10 -------- d-----w- c:\users\Batu\AppData\Roaming\TeamViewer
2014-02-24 19:59 . 2014-02-24 19:59 -------- d-----w- c:\program files (x86)\TeamViewer
2014-02-21 14:20 . 2014-02-21 14:20 -------- d-----w- c:\program files (x86)\Common Files\BattlEye
2014-02-21 13:19 . 2013-11-01 05:53 2232664 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-02-21 13:17 . 2014-02-01 07:57 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-02-21 13:15 . 2014-01-12 23:30 2238976 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-21 13:15 . 2013-11-20 00:15 3842560 ----a-w- c:\windows\system32\d2d1.dll
2014-02-21 13:15 . 2013-11-19 23:57 3288576 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-02-21 13:15 . 2014-01-12 23:30 2032640 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-02-21 10:22 . 2014-02-21 10:22 -------- d-----w- c:\program files\Common Files\DESIGNER
2014-02-21 10:22 . 2014-02-21 10:22 -------- d-----w- c:\program files\Microsoft Synchronization Services
2014-02-21 10:21 . 2014-02-21 10:21 -------- d-----w- c:\windows\PCHEALTH
2014-02-21 10:21 . 2014-02-21 10:21 -------- d-----w- c:\program files\Microsoft Sync Framework
2014-02-21 10:21 . 2014-02-21 10:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2014-02-21 10:20 . 2014-02-21 10:20 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-02-21 10:19 . 2014-02-21 10:19 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-02-21 10:19 . 2014-02-21 10:19 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-02-21 10:19 . 2014-02-21 10:19 -------- d-----w- c:\users\Batu\AppData\Local\Microsoft Help
2014-02-21 10:19 . 2014-03-02 10:50 -------- d-----w- c:\programdata\Microsoft Help
2014-02-21 10:19 . 2014-02-21 10:21 -------- d-----w- c:\program files\Microsoft Office
2014-02-21 10:18 . 2014-02-21 10:18 -------- d-----r- C:\MSOCache
2014-02-19 13:28 . 2014-02-19 13:28 255664 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10234.bin
2014-02-18 12:46 . 2014-02-18 12:46 -------- d-----w- c:\users\Batu\.swt
2014-02-18 12:46 . 2014-02-18 13:04 -------- d-----w- c:\users\Batu\Incomplete
2014-02-18 12:45 . 2014-02-18 13:07 -------- d-----w- c:\users\Batu\AppData\Roaming\MP3Rocket
2014-02-18 12:45 . 2014-02-18 12:45 -------- d-----w- c:\program files (x86)\MP3 Rocket
2014-02-12 15:57 . 2014-02-12 15:58 -------- d-----w- c:\users\Batu\AppData\Roaming\Braid
2014-02-12 15:57 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2014-02-12 14:19 . 2014-02-12 14:19 -------- d-----w- c:\users\Batu\AppData\Local\ArmA 2
2014-02-12 14:14 . 2014-02-12 14:14 -------- d-----w- c:\users\Batu\AppData\Local\DayZCommander
2014-02-12 14:14 . 2014-02-12 14:14 -------- d-----w- c:\program files (x86)\Dotjosh Studios
2014-02-12 13:48 . 2014-02-21 13:15 -------- d-----w- c:\users\Batu\AppData\Local\ArmA 2 OA
2014-02-12 13:48 . 2014-02-12 13:48 -------- d-----w- c:\programdata\Bohemia Interactive Studio
2014-02-12 13:48 . 2014-02-12 13:48 -------- d-----w- c:\program files (x86)\Bohemia Interactive
2014-02-11 14:51 . 2014-02-11 14:51 -------- d-----w- c:\users\Batu\AppData\Local\Arktos Entertainment
2014-02-11 14:42 . 2014-02-11 14:42 -------- d-----w- c:\users\Batu\AppData\Local\Arktos
2014-02-11 14:42 . 2014-02-11 14:42 -------- d-----w- c:\users\Batu\AppData\Local\CrashRpt
2014-02-11 14:39 . 2014-02-11 14:39 -------- d-----w- c:\program files (x86)\NCSOFT
2014-02-11 14:39 . 2014-02-11 14:39 -------- d-----w- c:\program files (x86)\NCWest
2014-02-11 10:47 . 2014-02-11 10:47 -------- d-----w- c:\users\Batu\AppData\Local\MSI
2014-02-10 20:13 . 2014-02-10 20:13 -------- d-----w- C:\SuperChargerProfile
2014-02-10 17:11 . 2014-02-10 17:22 -------- d-----w- c:\users\Batu\AppData\Roaming\Notepad++
2014-02-10 17:11 . 2014-02-10 17:11 -------- d-----w- c:\program files (x86)\Notepad++
2014-02-10 16:47 . 2014-02-10 16:47 -------- d-----w- c:\program files (x86)\SCM
2014-02-10 16:47 . 2014-02-10 20:13 -------- d-----w- c:\program files (x86)\MSI
2014-02-10 16:47 . 2011-04-15 15:26 1598464 ----a-w- c:\windows\SysWow64\MSIWmiAcpi.dll
2014-02-10 16:47 . 2009-12-18 09:54 3584 ----a-w- c:\windows\SysWow64\msiapcfg.dll
2014-02-10 16:47 . 2009-07-09 13:54 160768 ----a-w- c:\windows\SysWow64\MSIService.exe
2014-02-10 16:43 . 2014-03-03 20:51 -------- d-----w- c:\users\Batu\AppData\Roaming\uTorrent
2014-02-10 14:27 . 2014-02-10 14:27 -------- d--h--w- c:\windows\msdownld.tmp
2014-02-09 14:04 . 2014-02-09 14:04 -------- d-----w- c:\users\Batu\AppData\Local\Skype
2014-02-09 14:04 . 2014-03-03 20:51 -------- d-----w- c:\users\Batu\AppData\Roaming\Skype
2014-02-09 14:04 . 2014-02-21 06:19 -------- d-----r- c:\program files (x86)\Skype
2014-02-09 14:04 . 2014-02-09 14:04 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-02-09 14:03 . 2014-02-21 06:19 -------- d-----w- c:\programdata\Skype
2014-02-08 12:01 . 2014-02-09 10:26 -------- d-----w- c:\users\Batu\AppData\Roaming\Awesomium
2014-02-07 11:15 . 2014-02-07 11:15 -------- d-----w- c:\programdata\Elder Scrolls Online
2014-02-05 17:01 . 2014-02-05 17:03 -------- d-----w- c:\program files (x86)\Zenimax Online
2014-02-04 16:14 . 2013-07-19 22:13 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 16:14 . 2013-07-19 22:13 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 15:35 . 2014-02-04 15:35 -------- d-----w- c:\program files (x86)\Cisco
2014-02-04 15:30 . 2013-08-23 09:00 52016 ----a-w- c:\windows\system32\ETDCoInstaller.dll
2014-02-04 15:30 . 2013-08-23 09:00 382768 ----a-w- c:\windows\system32\drivers\ETD.sys
2014-02-04 15:14 . 2013-03-23 01:43 208072 ----a-w- c:\windows\system32\AERTAC64.dll
2014-02-04 14:56 . 2014-02-04 14:56 -------- d-----r- c:\windows\BrowserChoice
2014-02-03 20:42 . 2014-02-11 16:02 291128 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-02-03 20:42 . 2014-02-11 14:42 -------- d-----w- c:\users\Batu\AppData\Local\PunkBuster
2014-02-03 20:38 . 2014-02-11 16:02 291128 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-02-03 20:38 . 2014-02-11 14:42 291128 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-02-03 20:38 . 2014-02-03 20:38 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-02-03 20:33 . 2014-02-21 10:22 -------- d-----w- c:\program files (x86)\MSBuild
2014-02-03 20:33 . 2014-02-03 20:33 -------- d-----w- c:\program files (x86)\Reference Assemblies
2014-02-03 20:32 . 2014-02-03 20:32 -------- d-----w- c:\program files\Reference Assemblies
2014-02-03 20:32 . 2014-02-03 20:32 -------- d-----w- c:\program files\MSBuild
2014-02-03 20:31 . 2012-07-06 02:02 778856 ----a-w- c:\windows\SysWow64\PresentationNative_v0300.dll
2014-02-03 20:31 . 2012-07-06 02:02 35400 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-02-03 20:31 . 2012-07-06 02:02 35400 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-02-03 20:31 . 2012-07-06 02:02 1166440 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-01 09:13 . 2012-08-13 14:49 178448 ----a-w- c:\windows\system32\drivers\kneps.sys
2014-03-01 09:13 . 2012-10-23 13:45 50448 ----a-w- c:\windows\system32\drivers\klwfp.sys
2014-03-01 09:13 . 2012-09-03 16:23 29280 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2014-03-01 09:13 . 2012-09-03 15:57 29280 ----a-w- c:\windows\system32\drivers\klkbdflt.sys
2014-03-01 09:13 . 2012-07-27 16:38 29792 ----a-w- c:\windows\system32\drivers\klelam.sys
2014-03-01 09:13 . 2012-06-19 15:28 7717984 ----a-w- c:\windows\system32\drivers\kl1.sys
2014-02-21 15:28 . 2014-01-28 16:15 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-17 22:03 . 2012-07-26 08:14 78304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-17 22:03 . 2012-07-26 08:14 694240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-12 18:19 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-01-29 12:53 . 2014-01-29 12:53 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2014-01-29 12:53 . 2014-01-29 12:53 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-01-28 17:20 . 2014-01-28 17:18 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-01-28 17:14 . 2014-01-28 17:14 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-07 06:37 . 2014-01-28 16:02 688640 ----a-w- c:\windows\system32\WSShared.dll
2013-12-07 06:37 . 2014-01-28 16:02 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-07 05:15 . 2014-01-28 16:02 562688 ----a-w- c:\windows\SysWow64\WSShared.dll
2013-12-07 05:15 . 2014-01-28 16:02 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:20 459784 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
"LightShot"="c:\users\Batu\AppData\Local\Skillbrains\lightshot\LightShot.exe" [2013-09-27 226592]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-01-14 20728480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Super-Charger"="c:\program files (x86)\MSI\Super-Charger\Super-Charger.exe" [2013-09-09 490480]
"NCUpdateHelper"="c:\program files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe" [2014-02-11 528360]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\runner_avp.exe" [2014-02-28 24256]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-02-26 3814736]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe -minimized [2013-3-15 553984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R0 klelam;klelam;c:\windows\system32\DRIVERS\klelam.sys;c:\windows\SYSNATIVE\DRIVERS\klelam.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 BthLEEnum;Bluetooth Low Energy Driver;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RtkBtFilter;Realtek Bluetooth Filter Driver;c:\windows\system32\DRIVERS\RtkBtfilter.sys;c:\windows\SYSNATIVE\DRIVERS\RtkBtfilter.sys [x]
R3 SjtWinIo;SJT I/O Driver;c:\windows\System32\drivers\SjtWinIo.sys;c:\windows\SYSNATIVE\drivers\SjtWinIo.sys [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 BfLwf;Qualcomm Atheros Bandwidth Control;c:\windows\system32\DRIVERS\bwcW8x64.sys;c:\windows\SYSNATIVE\DRIVERS\bwcW8x64.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klwfp;klwfp;c:\windows\system32\DRIVERS\klwfp.sys;c:\windows\SYSNATIVE\DRIVERS\klwfp.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 BTDevManager;BTDevManager;c:\program files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe;c:\program files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 CSObjectsSrv;CryptoStorage control service;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 ETDService;Elan Service;c:\program files\Elantech\ETDService.exe;c:\program files\Elantech\ETDService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 Micro Star SCM;Micro Star SCM;c:\program files (x86)\SCM\MSIService.exe;c:\program files (x86)\SCM\MSIService.exe [x]
S2 MSI_SuperCharger;MSI_SuperCharger;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [x]
S2 StartMenuService;StartMenu8 Service;c:\program files (x86)\IObit\Start Menu 8\StartMenuServices.exe;c:\program files (x86)\IObit\Start Menu 8\StartMenuServices.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 Ke2200;NDIS Miniport Driver for the Killer e2200 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\e22w8x64.sys;c:\windows\SYSNATIVE\DRIVERS\e22w8x64.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 NTIOLib_1_0_3;NTIOLib_1_0_3;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTSPER;Realtek PCIe CardReader Driver;c:\windows\system32\DRIVERS\RtsPer.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPer.sys [x]
S3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;c:\windows\system32\DRIVERS\rtwlane.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlane.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-21 15:41 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-28 15:17]
.
2014-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-28 15:17]
.
2014-03-03 c:\windows\Tasks\update-S-1-5-21-3752768993-1938694620-3876455177-1001.job
- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2014-01-29 11:37]
.
2014-03-03 c:\windows\Tasks\update-sys.job
- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2014-01-29 11:37]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:22 492040 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BtServer"="c:\program files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe" [2013-01-28 452608]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-11-15 391152]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-11-15 771056]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-11-15 770032]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-05-21 13538376]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-08-07 36352]
"Radio Manager"="c:\program files (x86)\SCM\Radio Manager.exe" [2013-08-22 406920]
"SCM"="c:\program files (x86)\SCM\SCM.exe" [2013-08-22 408232]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 108144]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
LSP: %SYSTEMROOT%\system32\BfLLR.dll
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{2516B7EF-D8D2-47E5-9E7F-6ACFCB8951BA}: NameServer = 8.8.8.8,8.8.4.4
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-RSS - wscript c:\users\Batu\AppData\Roaming\Adobe\Flash Player\File Cache\file.vbs
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-BattlEye for A2 - c:\program files (x86)\Steam\steamapps\common\Arma 2BattlEye\UnInstallBE.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Completion time: 2014-03-03 23:00:37
ComboFix-quarantined-files.txt 2014-03-03 21:00
.
Pre-Run: 346.213.748.736 bytes free
Post-Run: 346.163.462.144 bytes free
.
- - End Of File - - 4461BF3DF04A1E8BB3A29B46139EE99A
A36C5E4F47E84449FF07ED3517B43A31