Prosím o kontrolu logu

[Maroš]

Prosím o kontrolu logu, PC po přihlášení černá obrazovka a dlouhý náběh Windows.

• Logfile of random's system information tool 1.09 (written by random/random)
  Run by Maros at 2012-03-16 12:51:06
  Microsoft Windows 7 Home Premium Service Pack 1
  System drive C: has 11 GB (9%) free of 119 GB
  Total RAM: 4095 MB (57% free)
  
  Logfile of Trend Micro HijackThis v2.0.4
  Scan saved at 12:51:11, on 16.3.2012
  Platform: Windows 7 SP1 (WinNT 6.00.3505)
  MSIE: Internet Explorer v9.00 (9.00.8112.16421)
  Boot mode: Normal
  
  Running processes:
  C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
  C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  C:\Windows\AsScrPro.exe
  C:\Program Files\AVAST Software\Avast\AvastUI.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
  C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
  C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  C:\Program Files (x86)\Sticky Password\stpass.exe
  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
  C:\Program Files\trend micro\Maros.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
  O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
  O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
  O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
  O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
  O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
  O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
  O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
  O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
  O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
  O4 - HKCU\..\Run: [Sidebar] C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE /autoRun
  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  O4 - Global Startup: FancyStart daemon.lnk = ?
  O4 - Global Startup: SRS Premium Sound.lnk = ?
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
  O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
  O8 - Extra context menu item: Stahnou vse FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
  O8 - Extra context menu item: Stahnout FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetUrl.htm
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  O16 - DPF: {57CD0DF4-DACC-439D-9173-3F6A8EC3FFE3} (IPCamPluginMegaDM Control) - http://213.226.209.88:84/IPCamPluginMegaDM.cab
  O16 - DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} (IPCamPlugIn Control) - http://213.226.209.88:90/IPCamPluginMJPEG.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{2A6819DA-1F98-4950-B929-D9FACAE9D592}: NameServer = 192.168.1.1,192.168.2.1
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
  O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
  O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
  O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
  O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
  O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
  O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
  O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
  O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  
  --
  End of file - 12947 bytes
  
  ======Listing Processes======
  
  \SystemRoot\System32\smss.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  wininit.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\svchost.exe -k DcomLaunch
  C:\Windows\system32\nvvsvc.exe
  C:\Windows\system32\svchost.exe -k RPCSS
  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
  C:\Windows\system32\svchost.exe -k netsvcs
  winlogon.exe
  C:\Windows\system32\svchost.exe -k LocalService
  C:\Windows\system32\svchost.exe -k NetworkService
  "C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
  "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
  C:\Windows\system32\nvvsvc.exe -session -first
  "C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
  "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
  taskeng.exe {720E9140-B773-402A-943C-5A84353006B3}
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
  C:\Windows\System32\lpksetup.exe -v
  "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
  C:\Windows\system32\svchost.exe -k netsvcs
  C:\Windows\SysWOW64\PnkBstrA.exe
  "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
  "C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE"
  "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
  WLIDSvcM.exe 2560
  "taskhost.exe"
  taskeng.exe {A5830B16-E9C8-42DF-A149-6C15A0CA29F5}
  "C:\Windows\system32\Dwm.exe"
  C:\Windows\Explorer.EXE
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesApp64.EXE" /TUStart /pid:2472
  "C:\Program Files\P4G\BatteryLife.exe"
  "C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
  "C:\Users\Maros\Desktop\Core Temp.exe"
  "C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
  Atouch64.exe
  ATKOSD.exe
  KBFiltr.exe
  WDC.exe
  "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
  "C:\Program Files\Elantech\ETDCtrl.exe"
  "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
  "C:\Program Files\Elantech\ETDCtrlHelper.exe"
  "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" /ELEVATED
  "C:\Program Files\Windows Media Player\wmpnetwk.exe"
  "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
  "C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
  "C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
  "C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
  "C:\Windows\AsScrPro.exe"
  "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
  "C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version7\TeamViewer7_Logfile.log
  "C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version7\TeamViewer7_Logfile.log
  "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
  "C:\Program Files (x86)\Sticky Password\stpass.exe"
  C:\Windows\servicing\TrustedInstaller.exe
  "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5040.163b4e30.369457320 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 5040 "\\.\pipe\gecko-crash-server-pipe.5040" plugin
  "C:\Users\Maros\Desktop\RSITX64.EXE"
  C:\Windows\system32\wbem\wmiprvse.exe
  
  ======Scheduled tasks folder======
  
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
  
  =========Mozilla firefox=========
  
  ProfilePath - C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default
  
  prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
  prefs.js - "extensions.enabledItems" - "sk@dictionaries.addons.mozilla.org:2.03.2, personas@christopher.beard:1.6.2, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0, toolbar@ask.com:3.6.13.184, {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.3, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6, LogMeInClient@logmein.com:1.0.0.608, {54affe52-8223-453b-be1e-2fe2e250045c}:4.1.1.190, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, Cetrumcz@igeared:1.203.023.002, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
  prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=109980&tt ... 3f895e0&q="
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
  "Description"=DivX Plus Web Player
  "Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
  "Description"=Google Earth in your browser
  "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
  "Description"=Microsoft SharePoint Plug-in for Firefox
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
  "Description"=NVIDIA stereo images plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
  "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@t-immersion.com/DFusionHomeWebPlugIn]
  "Description"=D'Fusion @Home Web Plug-In
  "Path"=C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
  "Description"=Google Update
  "Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
  "Description"=Google Update
  "Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
  "Description"=Handles PDFs in-place in Firefox
  "Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
  
  C:\Program Files (x86)\Mozilla Firefox\extensions\
  ffxtlbr@babylon.com
  {972ce4c6-7e08-4474-a285-3208198ce6fd}
  {AB2CE124-6272-4b12-94A9-7303C7397BD1}
  
  C:\Program Files (x86)\Mozilla Firefox\components\
  binary.manifest
  browsercomps.dll
  FlashGet3.xpi
  
  C:\Program Files (x86)\Mozilla Firefox\plugins\
  np-mswmp.dll
  nppdf32.dll
  WMP Firefox Plugin License.rtf
  WMP Firefox Plugin RelNotes.txt
  
  C:\Program Files (x86)\Mozilla Firefox\searchplugins\
  babylon.xml
  Cetrumcz_igeared.xml
  google.xml
  heureka-cz.xml
  jyxo-cz.xml
  seznam-cz.xml
  slunecnice-cz.xml
  wikipedia-cz.xml
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\extensions\
  centrumpomocnik@centrum.cz
  cs@dictionaries.addons.mozilla.org
  engine@conduit.com
  personas@christopher.beard
  sk@dictionaries.addons.mozilla.org
  {003D3EDC-99B9-4a34-9C20-60CB94F7E829}
  {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
  {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\searchplugins\
  daemon-search.xml
  icqplugin-1.xml
  icqplugin-10.xml
  icqplugin-11.xml
  icqplugin-2.xml
  icqplugin-3.xml
  icqplugin-4.xml
  icqplugin-5.xml
  icqplugin-6.xml
  icqplugin-7.xml
  icqplugin-8.xml
  icqplugin-9.xml
  icqplugin.xml
  
  ======Registry dump======
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-11-02 75656]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
  Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A88CB9-84D2-4020-A2D1-B25A21034884}]
  HistoryTriggerBHO Class - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll [2011-12-31 36208]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
  WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
  DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
  Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
  Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
  Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-01-22 341888]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
  Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-01-22 59272]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
  {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
  {D5D47440-0750-463D-BAEF-A47D02414806}
  {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-12-13 2587944]
  "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-03 11842152]
  "SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-02-20 2786480]
  "SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-02-20 3669680]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"=C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE [2010-11-20 1475584]
  "DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet 3]
  C:\Program Files (x86)\FlashGet Network\FlashGet 3\Flashget3.exe -minimize []
  
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
  "ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
  "ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
  "ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2010-01-23 3058304]
  "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-02-23 4031368]
  
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
  FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
  SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  "AppInit_DLLs"=" "
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-19 249344]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
  "SecurityProviders"=credssp.dll
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "ConsentPromptBehaviorAdmin"=5
  "ConsentPromptBehaviorUser"=3
  "EnableUIADesktopToggle"=0
  "dontdisplaylastusername"=0
  "legalnoticecaption"=
  "legalnoticetext"=
  "shutdownwithoutlogon"=1
  "undockwithoutlogon"=1
  "EnableLinkedConnections"=1
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  "NoDriveTypeAutoRun"=145
  "NoDriveAutoRun"=0
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fastboot.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gameparkconsole.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mobileconnect.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstlink.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstview.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
  "vidc.mrle"=msrle32.dll
  "vidc.msvc"=msvidc32.dll
  "msacm.imaadpcm"=imaadp32.acm
  "msacm.msg711"=msg711.acm
  "msacm.msgsm610"=msgsm32.acm
  "msacm.msadpcm"=msadp32.acm
  "midimapper"=midimap.dll
  "wavemapper"=msacm32.drv
  "VIDC.UYVY"=msyuv.dll
  "VIDC.YUY2"=msyuv.dll
  "VIDC.YVYU"=msyuv.dll
  "VIDC.IYUV"=iyuv_32.dll
  "vidc.i420"=iyuv_32.dll
  "VIDC.YVU9"=tsbyuv.dll
  "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
  "MSVideo8"=VfWWDM32.dll
  "wave2"=wdmaud.drv
  "midi2"=wdmaud.drv
  "mixer2"=wdmaud.drv
  "wave3"=wdmaud.drv
  "midi3"=wdmaud.drv
  "mixer3"=wdmaud.drv
  "wave4"=wdmaud.drv
  "midi4"=wdmaud.drv
  "mixer4"=wdmaud.drv
  "wave5"=wdmaud.drv
  "midi5"=wdmaud.drv
  "mixer5"=wdmaud.drv
  "wave6"=wdmaud.drv
  "midi6"=wdmaud.drv
  "mixer6"=wdmaud.drv
  "wave7"=wdmaud.drv
  "midi7"=wdmaud.drv
  "mixer7"=wdmaud.drv
  "wave"=wdmaud.drv
  "midi"=wdmaud.drv
  "mixer"=wdmaud.drv
  "aux"=wdmaud.drv
  "wave1"=wdmaud.drv
  "midi1"=wdmaud.drv
  "mixer1"=wdmaud.drv
  "wave8"=wdmaud.drv
  "midi8"=wdmaud.drv
  "mixer8"=wdmaud.drv
  "aux1"=wdmaud.drv
  
  ======File associations======
  
  .js - edit - C:\Windows\System32\Notepad.exe %1
  
  ======List of files/folders created in the last 1 month======
  
  2012-03-14 23:07:29 ----A---- C:\Windows\system32\ntoskrnl.exe
  2012-03-14 23:07:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
  2012-03-14 23:07:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
  2012-03-14 21:21:20 ----A---- C:\Windows\system32\win32k.sys
  2012-03-14 21:21:17 ----A---- C:\Windows\SYSWOW64\DWrite.dll
  2012-03-14 21:21:17 ----A---- C:\Windows\system32\DWrite.dll
  2012-03-14 21:19:38 ----A---- C:\Windows\system32\rdrmemptylst.exe
  2012-03-14 21:19:38 ----A---- C:\Windows\system32\rdpwsx.dll
  2012-03-14 21:19:38 ----A---- C:\Windows\system32\rdpcorekmts.dll
  2012-03-14 21:19:37 ----A---- C:\Windows\system32\rdpcore.dll
  2012-03-14 21:19:36 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
  2012-03-14 21:19:36 ----A---- C:\Windows\system32\drivers\tdtcp.sys
  2012-03-14 21:19:36 ----A---- C:\Windows\system32\drivers\rdpwd.sys
  2012-03-03 09:31:38 ----D---- C:\Users\Maros\AppData\Roaming\Rovio
  2012-02-26 08:59:13 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
  2012-02-24 21:05:12 ----D---- C:\Casino
  2012-02-18 13:05:34 ----D---- C:\Program Files (x86)\BabylonToolbar
  2012-02-18 13:05:34 ----A---- C:\user.js
  2012-02-18 13:05:07 ----D---- C:\Users\Maros\AppData\Roaming\Babylon
  2012-02-18 13:05:07 ----D---- C:\ProgramData\Babylon
  2012-02-18 12:34:16 ----HD---- C:\Windows\Icons
  
  ======List of files/folders modified in the last 1 month======
  
  2012-03-16 12:51:08 ----D---- C:\Program Files\trend micro
  2012-03-16 12:42:43 ----D---- C:\Windows\system32\config
  2012-03-16 12:41:50 ----D---- C:\ProgramData\Spyware Terminator
  2012-03-16 12:40:54 ----D---- C:\Windows\temp
  2012-03-16 08:34:00 ----D---- C:\Users\Maros\AppData\Roaming\Skype
  2012-03-16 07:41:33 ----D---- C:\Windows\System32
  2012-03-16 07:41:33 ----D---- C:\Windows\inf
  2012-03-16 07:41:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
  2012-03-15 10:10:38 ----RSD---- C:\Windows\assembly
  2012-03-15 10:10:38 ----D---- C:\Windows\Microsoft.NET
  2012-03-15 09:51:28 ----AD---- C:\Windows\system32\drivers
  2012-03-15 08:24:16 ----D---- C:\Windows\winsxs
  2012-03-15 08:18:10 ----D---- C:\Windows\SysWOW64
  2012-03-14 23:07:36 ----D---- C:\Windows\system32\catroot
  2012-03-14 23:07:35 ----D---- C:\Windows\system32\catroot2
  2012-03-14 23:05:24 ----D---- C:\Windows\debug
  2012-03-14 23:05:19 ----A---- C:\Windows\system32\MRT.exe
  2012-03-14 23:04:56 ----SHD---- C:\Windows\Installer
  2012-03-14 23:04:56 ----SHD---- C:\Config.Msi
  2012-03-14 23:04:51 ----D---- C:\ProgramData\Microsoft Help
  2012-03-14 23:04:17 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
  2012-03-14 22:55:27 ----SHD---- C:\System Volume Information
  2012-03-14 21:37:19 ----D---- C:\Users\Maros\AppData\Roaming\TeamViewer
  2012-03-14 20:58:25 ----D---- C:\Windows\system32\wfp
  2012-03-14 20:58:23 ----D---- C:\Windows\system32\wbem
  2012-03-14 20:58:23 ----D---- C:\Windows
  2012-03-14 20:57:47 ----D---- C:\Windows\Tasks
  2012-03-14 20:57:46 ----D---- C:\Windows\system32\DriverStore
  2012-03-14 20:57:46 ----D---- C:\Windows\system32\CodeIntegrity
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\LangSoft
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\GHISLER
  2012-03-14 20:57:43 ----D---- C:\ProgramData\P4G
  2012-03-14 20:57:42 ----D---- C:\Windows\registration
  2012-03-14 20:57:25 ----RHD---- C:\MSOCache
  2012-03-06 18:21:24 ----D---- C:\Windows\Prefetch
  2012-03-05 10:26:59 ----D---- C:\ProgramData\DivX
  2012-03-05 10:26:59 ----D---- C:\Program Files (x86)\DivX
  2012-03-03 18:37:24 ----SHD---- C:\Boot
  2012-03-03 13:03:14 ----D---- C:\Users\Maros\AppData\Roaming\DAEMON Tools Lite
  2012-03-03 13:03:12 ----D---- C:\Windows\ModemLogs
  2012-03-03 13:01:50 ----D---- C:\Program Files (x86)\CCleaner
  2012-02-27 17:58:55 ----D---- C:\Program Files (x86)\Spyware Terminator
  2012-02-23 17:23:21 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
  2012-02-23 17:23:10 ----A---- C:\Windows\system32\aswBoot.exe
  2012-02-18 14:59:48 ----D---- C:\Windows\system32\Tasks
  2012-02-18 14:24:39 ----D---- C:\Program Files (x86)\Vertex Wireless
  2012-02-18 14:23:14 ----D---- C:\Program Files (x86)
  2012-02-18 14:12:48 ----D---- C:\Windows\system32\NDF
  2012-02-18 13:05:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
  2012-02-18 13:05:07 ----AD---- C:\ProgramData
  
  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-01-07 24840]
  R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-09 244328]
  R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
  R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
  R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-11-19 530488]
  R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-02-23 53080]
  R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-02-23 817496]
  R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-02-23 335704]
  R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-02-23 59224]
  R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2011-07-15 219440]
  R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2011-07-15 44848]
  R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
  R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
  R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-02-23 24408]
  R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-02-23 69976]
  R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-02-14 51496]
  R3 ALSysIO;ALSysIO; \??\C:\Users\Maros\AppData\Local\Temp\ALSysIO64.sys []
  R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-27 2753536]
  R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-12-13 138024]
  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-05-03 2854504]
  R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
  R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
  R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
  R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
  R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
  R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
  R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-07-08 174184]
  R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
  R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-05-16 533096]
  R3 Safetica;Safetica Encryption Driver; C:\Windows\system32\DRIVERS\safetica.sys [2010-08-03 252760]
  R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
  R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesDriver64.sys [2011-10-13 11856]
  R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2011-07-15 164656]
  R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
  S0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys []
  S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\adusbser.sys [2009-11-06 154112]
  S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-18 507392]
  S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-12 40448]
  S3 Andbus;LGE Android Platform Composite USB Device; C:\Windows\system32\DRIVERS\lgandbus64.sys [2010-12-23 19456]
  S3 AndDiag;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag64.sys [2010-12-23 27648]
  S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps64.sys [2010-12-23 27136]
  S3 ANDModem;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [2010-12-23 34304]
  S3 androidusb;ADB Interface Driver; C:\Windows\System32\Drivers\lgandadb.sys []
  S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\E:\I386\AsPrOb64.sys []
  S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
  S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
  S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
  S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
  S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
  S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
  S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 35848]
  S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
  S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys []
  S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
  S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
  S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
  S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
  S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-03-18 74376]
  S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-03-18 85384]
  S3 h647906;DragonRise H647906 AMD64 Driver; C:\Windows\system32\drivers\h647906.sys [2008-08-08 63856]
  S3 h648101;DragonRise H648101 AMD64 Driver; C:\Windows\system32\drivers\h648101.sys [2008-08-08 65776]
  S3 h648103;DragonRise H648103 AMD64 Driver; C:\Windows\system32\drivers\h648103.sys [2008-08-08 62960]
  S3 hid7906;hid7906; C:\Windows\system32\drivers\hid7906.sys []
  S3 hid8101;hid8101; C:\Windows\system32\drivers\hid8101.sys []
  S3 hid8103;hid8103; C:\Windows\system32\drivers\hid8103.sys []
  S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 116992]
  S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2008-07-02 31624]
  S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys []
  S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
  S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
  S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888]
  S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
  S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 127488]
  S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 18944]
  S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 161280]
  S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2010-04-27 127488]
  S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2010-04-27 18944]
  S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2010-04-27 161280]
  S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
  S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
  S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
  S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
  S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-07-15 144688]
  S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-07-15 46384]
  S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
  S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
  S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-05-29 116224]
  S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-05-29 125952]
  S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-05-29 18944]
  S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-05-29 157696]
  S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-05-29 125952]
  
  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
  R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
  R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
  R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-02-23 44768]
  R2 ezGOSvc;Easybits GO Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136]
  R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
  R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-09-27 75136]
  R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
  R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-01-10 1148632]
  R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-02-23 2886528]
  R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE [2012-02-09 2143552]
  R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]
  S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
  S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
  S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
  S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
  S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
  S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
  S4 Jasmio.MediaCenter.Service;Media Center Support Service; C:\Program Files\Jasmio\Media Center Support Service\Jasmio.MediaCenter.Service.exe [2009-11-10 73144]
  S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
  S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
  S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-15 381248]
  
  -----------------EOF-----------------

[Rudy]

Zdravím!
Nejprve zkuste provést obnovu systému k datu, kdy korektně fungoval. Pak dejte nový log RSIT.

[Maroš]

Po obnově nový log

• Logfile of random's system information tool 1.09 (written by random/random)
  Run by Maros at 2012-03-16 23:03:09
  Microsoft Windows 7 Home Premium Service Pack 1
  System drive C: has 11 GB (9%) free of 119 GB
  Total RAM: 4095 MB (57% free)
  
  Logfile of Trend Micro HijackThis v2.0.4
  Scan saved at 23:03:15, on 16.3.2012
  Platform: Windows 7 SP1 (WinNT 6.00.3505)
  MSIE: Internet Explorer v9.00 (9.00.8112.16421)
  Boot mode: Normal
  
  Running processes:
  C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
  C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
  C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  C:\Windows\AsScrPro.exe
  C:\Program Files\AVAST Software\Avast\AvastUI.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
  C:\Program Files\trend micro\Maros.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
  O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
  O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
  O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
  O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
  O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
  O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
  O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
  O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
  O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
  O4 - HKCU\..\Run: [Sidebar] C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE /autoRun
  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  O4 - Global Startup: FancyStart daemon.lnk = ?
  O4 - Global Startup: SRS Premium Sound.lnk = ?
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
  O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
  O8 - Extra context menu item: Stahnou vse FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
  O8 - Extra context menu item: Stahnout FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetUrl.htm
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  O16 - DPF: {57CD0DF4-DACC-439D-9173-3F6A8EC3FFE3} (IPCamPluginMegaDM Control) - http://213.226.209.88:84/IPCamPluginMegaDM.cab
  O16 - DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} (IPCamPlugIn Control) - http://213.226.209.88:90/IPCamPluginMJPEG.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{2A6819DA-1F98-4950-B929-D9FACAE9D592}: NameServer = 192.168.1.1,192.168.2.1
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
  O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
  O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
  O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
  O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
  O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
  O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
  O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
  O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  
  --
  End of file - 12789 bytes
  
  ======Listing Processes======
  
  \SystemRoot\System32\smss.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  wininit.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\svchost.exe -k DcomLaunch
  C:\Windows\system32\nvvsvc.exe
  C:\Windows\system32\svchost.exe -k RPCSS
  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
  C:\Windows\system32\svchost.exe -k netsvcs
  winlogon.exe
  C:\Windows\system32\svchost.exe -k LocalService
  C:\Windows\system32\svchost.exe -k NetworkService
  "C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
  "C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
  "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
  "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
  C:\Windows\system32\nvvsvc.exe -session -first
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
  "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
  C:\Windows\system32\svchost.exe -k netsvcs
  C:\Windows\SysWOW64\PnkBstrA.exe
  "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
  "C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE"
  "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
  WLIDSvcM.exe 2104
  C:\Windows\servicing\TrustedInstaller.exe
  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
  C:\Windows\system32\sppsvc.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  "taskhost.exe"
  taskeng.exe {DE23EDC0-CB1F-4DBF-9E14-E3BC53EFE70A}
  "C:\Program Files\P4G\BatteryLife.exe"
  "C:\Users\Maros\Desktop\Core Temp.exe"
  "C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
  "C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
  Atouch64.exe
  "C:\Windows\system32\Dwm.exe"
  C:\Windows\Explorer.EXE
  ATKOSD.exe
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesApp64.EXE" /TUStart /pid:2068
  KBFiltr.exe
  WDC.exe
  "C:\Windows\system32\wbengine.exe"
  C:\Windows\System32\svchost.exe -k swprv
  "C:\Program Files\Elantech\ETDCtrl.exe"
  "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
  "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" /ELEVATED
  "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
  "C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
  "C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
  "C:\Windows\AsScrPro.exe"
  "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
  "C:\Program Files\Elantech\ETDCtrlHelper.exe"
  "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
  "C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe" /SCHEDULESCAN /ELEVATED
  "C:\Program Files\Windows Media Player\wmpnetwk.exe"
  "C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
  C:\Windows\system32\wbem\wmiprvse.exe
  "C:\Users\Maros\Downloads\RSITx64.exe"
  
  ======Scheduled tasks folder======
  
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
  
  =========Mozilla firefox=========
  
  ProfilePath - C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default
  
  prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
  prefs.js - "extensions.enabledItems" - "sk@dictionaries.addons.mozilla.org:2.03.2, personas@christopher.beard:1.6.2, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0, toolbar@ask.com:3.6.13.184, {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.3, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6, LogMeInClient@logmein.com:1.0.0.608, {54affe52-8223-453b-be1e-2fe2e250045c}:4.1.1.190, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, Cetrumcz@igeared:1.203.023.002, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
  prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=109980&tt ... 3f895e0&q="
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
  "Description"=DivX Plus Web Player
  "Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
  "Description"=Google Earth in your browser
  "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
  "Description"=Microsoft SharePoint Plug-in for Firefox
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
  "Description"=NVIDIA stereo images plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
  "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@t-immersion.com/DFusionHomeWebPlugIn]
  "Description"=D'Fusion @Home Web Plug-In
  "Path"=C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
  "Description"=Google Update
  "Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
  "Description"=Google Update
  "Path"=C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
  "Description"=Handles PDFs in-place in Firefox
  "Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
  
  C:\Program Files (x86)\Mozilla Firefox\extensions\
  ffxtlbr@babylon.com
  {972ce4c6-7e08-4474-a285-3208198ce6fd}
  {AB2CE124-6272-4b12-94A9-7303C7397BD1}
  
  C:\Program Files (x86)\Mozilla Firefox\components\
  binary.manifest
  browsercomps.dll
  FlashGet3.xpi
  
  C:\Program Files (x86)\Mozilla Firefox\plugins\
  np-mswmp.dll
  nppdf32.dll
  WMP Firefox Plugin License.rtf
  WMP Firefox Plugin RelNotes.txt
  
  C:\Program Files (x86)\Mozilla Firefox\searchplugins\
  babylon.xml
  Cetrumcz_igeared.xml
  google.xml
  heureka-cz.xml
  jyxo-cz.xml
  seznam-cz.xml
  slunecnice-cz.xml
  wikipedia-cz.xml
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\extensions\
  centrumpomocnik@centrum.cz
  cs@dictionaries.addons.mozilla.org
  engine@conduit.com
  personas@christopher.beard
  sk@dictionaries.addons.mozilla.org
  {003D3EDC-99B9-4a34-9C20-60CB94F7E829}
  {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
  {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\searchplugins\
  daemon-search.xml
  icqplugin-1.xml
  icqplugin-10.xml
  icqplugin-11.xml
  icqplugin-2.xml
  icqplugin-3.xml
  icqplugin-4.xml
  icqplugin-5.xml
  icqplugin-6.xml
  icqplugin-7.xml
  icqplugin-8.xml
  icqplugin-9.xml
  icqplugin.xml
  
  ======Registry dump======
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-11-02 75656]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
  Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A88CB9-84D2-4020-A2D1-B25A21034884}]
  HistoryTriggerBHO Class - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll [2011-12-31 36208]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
  WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
  DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
  Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
  Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
  Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-01-22 341888]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
  Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-01-22 59272]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
  {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
  {D5D47440-0750-463D-BAEF-A47D02414806}
  {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-12-13 2587944]
  "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-03 11842152]
  "SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-02-20 2786480]
  "SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-02-20 3669680]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"=C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE [2010-11-20 1475584]
  "DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet 3]
  C:\Program Files (x86)\FlashGet Network\FlashGet 3\Flashget3.exe -minimize []
  
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
  "ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
  "ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
  "ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2010-01-23 3058304]
  "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-02-23 4031368]
  
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
  FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
  SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  "AppInit_DLLs"=" "
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-19 249344]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
  "SecurityProviders"=credssp.dll
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "ConsentPromptBehaviorAdmin"=5
  "ConsentPromptBehaviorUser"=3
  "EnableUIADesktopToggle"=0
  "dontdisplaylastusername"=0
  "legalnoticecaption"=
  "legalnoticetext"=
  "shutdownwithoutlogon"=1
  "undockwithoutlogon"=1
  "EnableLinkedConnections"=1
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  "NoDriveTypeAutoRun"=145
  "NoDriveAutoRun"=0
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fastboot.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gameparkconsole.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mobileconnect.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstlink.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstview.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
  "vidc.mrle"=msrle32.dll
  "vidc.msvc"=msvidc32.dll
  "msacm.imaadpcm"=imaadp32.acm
  "msacm.msg711"=msg711.acm
  "msacm.msgsm610"=msgsm32.acm
  "msacm.msadpcm"=msadp32.acm
  "midimapper"=midimap.dll
  "wavemapper"=msacm32.drv
  "VIDC.UYVY"=msyuv.dll
  "VIDC.YUY2"=msyuv.dll
  "VIDC.YVYU"=msyuv.dll
  "VIDC.IYUV"=iyuv_32.dll
  "vidc.i420"=iyuv_32.dll
  "VIDC.YVU9"=tsbyuv.dll
  "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
  "MSVideo8"=VfWWDM32.dll
  "wave2"=wdmaud.drv
  "midi2"=wdmaud.drv
  "mixer2"=wdmaud.drv
  "wave3"=wdmaud.drv
  "midi3"=wdmaud.drv
  "mixer3"=wdmaud.drv
  "wave4"=wdmaud.drv
  "midi4"=wdmaud.drv
  "mixer4"=wdmaud.drv
  "wave5"=wdmaud.drv
  "midi5"=wdmaud.drv
  "mixer5"=wdmaud.drv
  "wave6"=wdmaud.drv
  "midi6"=wdmaud.drv
  "mixer6"=wdmaud.drv
  "wave7"=wdmaud.drv
  "midi7"=wdmaud.drv
  "mixer7"=wdmaud.drv
  "wave"=wdmaud.drv
  "midi"=wdmaud.drv
  "mixer"=wdmaud.drv
  "aux"=wdmaud.drv
  "wave1"=wdmaud.drv
  "midi1"=wdmaud.drv
  "mixer1"=wdmaud.drv
  
  ======File associations======
  
  .js - edit - C:\Windows\System32\Notepad.exe %1
  
  ======List of files/folders created in the last 1 month======
  
  2012-03-03 09:31:38 ----D---- C:\Users\Maros\AppData\Roaming\Rovio
  2012-02-26 08:59:13 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
  2012-02-24 21:05:12 ----D---- C:\Casino
  2012-02-18 13:05:34 ----D---- C:\Program Files (x86)\BabylonToolbar
  2012-02-18 13:05:34 ----A---- C:\user.js
  2012-02-18 13:05:07 ----D---- C:\Users\Maros\AppData\Roaming\Babylon
  2012-02-18 13:05:07 ----D---- C:\ProgramData\Babylon
  2012-02-18 12:34:16 ----HD---- C:\Windows\Icons
  
  ======List of files/folders modified in the last 1 month======
  
  2012-03-16 23:03:11 ----D---- C:\Program Files\trend micro
  2012-03-16 23:02:04 ----D---- C:\Windows\System32
  2012-03-16 23:02:04 ----D---- C:\Windows\inf
  2012-03-16 23:02:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
  2012-03-16 23:00:29 ----D---- C:\ProgramData\Spyware Terminator
  2012-03-16 23:00:11 ----D---- C:\Windows\temp
  2012-03-16 22:55:43 ----D---- C:\Windows\system32\config
  2012-03-16 22:54:23 ----D---- C:\Windows\Tasks
  2012-03-16 22:54:23 ----D---- C:\Windows\system32\wfp
  2012-03-16 22:54:21 ----D---- C:\Windows\system32\wbem
  2012-03-16 22:54:21 ----D---- C:\Windows
  2012-03-16 22:53:32 ----D---- C:\Windows\SysWOW64
  2012-03-16 22:53:32 ----AD---- C:\Windows\system32\drivers
  2012-03-16 22:53:31 ----D---- C:\Windows\winsxs
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\DriverStore
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\drivers\etc
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\CodeIntegrity
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\catroot2
  2012-03-16 22:53:14 ----D---- C:\Windows\AppCompat
  2012-03-16 22:53:13 ----D---- C:\ProgramData\P4G
  2012-03-16 22:52:56 ----D---- C:\Windows\registration
  2012-03-16 22:52:35 ----D---- C:\Windows\system32\catroot
  2012-03-16 22:52:31 ----D---- C:\Windows\Microsoft.NET
  2012-03-16 22:52:10 ----SHD---- C:\Windows\Installer
  2012-03-16 22:51:11 ----RSD---- C:\Windows\assembly
  2012-03-16 22:50:54 ----D---- C:\Users\Maros\AppData\Roaming\Skype
  2012-03-16 22:48:09 ----SHD---- C:\System Volume Information
  2012-03-14 23:05:24 ----D---- C:\Windows\debug
  2012-03-14 21:37:19 ----D---- C:\Users\Maros\AppData\Roaming\TeamViewer
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\LangSoft
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\GHISLER
  2012-03-14 20:57:25 ----RHD---- C:\MSOCache
  2012-03-06 18:21:24 ----D---- C:\Windows\Prefetch
  2012-03-05 10:26:59 ----D---- C:\ProgramData\DivX
  2012-03-05 10:26:59 ----D---- C:\Program Files (x86)\DivX
  2012-03-03 18:37:24 ----SHD---- C:\Boot
  2012-03-03 13:03:14 ----D---- C:\Users\Maros\AppData\Roaming\DAEMON Tools Lite
  2012-03-03 13:03:12 ----D---- C:\Windows\ModemLogs
  2012-03-03 13:01:50 ----D---- C:\Program Files (x86)\CCleaner
  2012-02-27 17:58:55 ----D---- C:\Program Files (x86)\Spyware Terminator
  2012-02-23 17:23:21 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
  2012-02-23 17:23:10 ----A---- C:\Windows\system32\aswBoot.exe
  2012-02-18 14:59:48 ----D---- C:\Windows\system32\Tasks
  2012-02-18 14:24:39 ----D---- C:\Program Files (x86)\Vertex Wireless
  2012-02-18 14:24:36 ----SHD---- C:\Config.Msi
  2012-02-18 14:23:14 ----D---- C:\Program Files (x86)
  2012-02-18 14:12:48 ----D---- C:\Windows\system32\NDF
  2012-02-18 13:05:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
  2012-02-18 13:05:07 ----AD---- C:\ProgramData
  
  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-01-07 24840]
  R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-09 244328]
  R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
  R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
  R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-11-19 530488]
  R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-02-23 53080]
  R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-02-23 817496]
  R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-02-23 335704]
  R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-02-23 59224]
  R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2011-07-15 219440]
  R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2011-07-15 44848]
  R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
  R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
  R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-02-23 24408]
  R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-02-23 69976]
  R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-02-14 51496]
  R3 ALSysIO;ALSysIO; \??\C:\Users\Maros\AppData\Local\Temp\ALSysIO64.sys []
  R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-27 2753536]
  R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-12-13 138024]
  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-05-03 2854504]
  R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
  R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
  R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
  R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
  R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
  R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
  R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-07-08 174184]
  R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
  R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-05-16 533096]
  R3 Safetica;Safetica Encryption Driver; C:\Windows\system32\DRIVERS\safetica.sys [2010-08-03 252760]
  R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
  R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesDriver64.sys [2011-10-13 11856]
  R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2011-07-15 164656]
  R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
  S0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys []
  S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\adusbser.sys [2009-11-06 154112]
  S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-18 507392]
  S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-12 40448]
  S3 Andbus;LGE Android Platform Composite USB Device; C:\Windows\system32\DRIVERS\lgandbus64.sys [2010-12-23 19456]
  S3 AndDiag;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag64.sys [2010-12-23 27648]
  S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps64.sys [2010-12-23 27136]
  S3 ANDModem;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [2010-12-23 34304]
  S3 androidusb;ADB Interface Driver; C:\Windows\System32\Drivers\lgandadb.sys []
  S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\E:\I386\AsPrOb64.sys []
  S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
  S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
  S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
  S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
  S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
  S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
  S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 35848]
  S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
  S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys []
  S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
  S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
  S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
  S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
  S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-03-18 74376]
  S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-03-18 85384]
  S3 h647906;DragonRise H647906 AMD64 Driver; C:\Windows\system32\drivers\h647906.sys [2008-08-08 63856]
  S3 h648101;DragonRise H648101 AMD64 Driver; C:\Windows\system32\drivers\h648101.sys [2008-08-08 65776]
  S3 h648103;DragonRise H648103 AMD64 Driver; C:\Windows\system32\drivers\h648103.sys [2008-08-08 62960]
  S3 hid7906;hid7906; C:\Windows\system32\drivers\hid7906.sys []
  S3 hid8101;hid8101; C:\Windows\system32\drivers\hid8101.sys []
  S3 hid8103;hid8103; C:\Windows\system32\drivers\hid8103.sys []
  S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 116992]
  S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2008-07-02 31624]
  S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys []
  S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
  S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
  S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888]
  S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
  S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 127488]
  S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 18944]
  S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 161280]
  S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2010-04-27 127488]
  S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2010-04-27 18944]
  S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2010-04-27 161280]
  S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
  S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
  S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
  S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
  S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-07-15 144688]
  S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-07-15 46384]
  S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
  S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
  S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-05-29 116224]
  S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-05-29 125952]
  S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-05-29 18944]
  S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-05-29 157696]
  S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-05-29 125952]
  
  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
  R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
  R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
  R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-02-23 44768]
  R2 ezGOSvc;Easybits GO Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136]
  R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
  R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-09-27 75136]
  R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
  R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-01-10 1148632]
  R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-02-23 2886528]
  R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE [2012-02-09 2143552]
  R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]
  S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
  S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
  S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
  S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
  S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
  S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
  S4 Jasmio.MediaCenter.Service;Media Center Support Service; C:\Program Files\Jasmio\Media Center Support Service\Jasmio.MediaCenter.Service.exe [2009-11-10 73144]
  S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
  S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
  S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-15 381248]
  
  -----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okny zkopírujte:

:files
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job
C:\Program Files (x86)\Google\Update
C:\Program Files (x86)\BabylonToolbar
C:\Users\Maros\AppData\Roaming\Babylon
C:\ProgramData\Babylon


:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
"{D5D47440-0750-463D-BAEF-A47D02414806}"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[Maroš]

OTM log

• All processes killed
  ========== FILES ==========
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job moved successfully.
  C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job moved successfully.
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000Core.job moved successfully.
  C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2352262192-1878524721-806133509-1000UA.job moved successfully.
  C:\Program Files (x86)\Google\Update\Install folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\12.0.742.122 folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96} folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.99 folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D} folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{2BF2CA35-CCAF-4E58-BAB7-4163BFA03B88}\0.0.0.0 folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{2BF2CA35-CCAF-4E58-BAB7-4163BFA03B88} folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download\{2586914D-999F-4329-B317-3705E6897AE9} folder moved successfully.
  C:\Program Files (x86)\Google\Update\Download folder moved successfully.
  C:\Program Files (x86)\Google\Update\1.3.21.99 folder moved successfully.
  C:\Program Files (x86)\Google\Update folder moved successfully.
  C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh folder moved successfully.
  C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17 folder moved successfully.
  C:\Program Files (x86)\BabylonToolbar\BabylonToolbar folder moved successfully.
  C:\Program Files (x86)\BabylonToolbar folder moved successfully.
  C:\Users\Maros\AppData\Roaming\Babylon folder moved successfully.
  C:\ProgramData\Babylon folder moved successfully.
  ========== REGISTRY ==========
  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
  Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
  ========== COMMANDS ==========
  
  [EMPTYTEMP]
  
  User: All Users
  
  User: BOX
  
  User: Default
  ->Temp folder emptied: 0 bytes
  ->Temporary Internet Files folder emptied: 0 bytes
  ->Flash cache emptied: 38784 bytes
  
  User: Default User
  ->Temp folder emptied: 0 bytes
  ->Temporary Internet Files folder emptied: 0 bytes
  ->Flash cache emptied: 0 bytes
  
  User: Maros
  ->Temp folder emptied: 434944 bytes
  ->Temporary Internet Files folder emptied: 27445469 bytes
  ->Java cache emptied: 5012434 bytes
  ->FireFox cache emptied: 410324025 bytes
  ->Google Chrome cache emptied: 0 bytes
  ->Flash cache emptied: 3379 bytes
  
  User: Public
  ->Temp folder emptied: 0 bytes
  
  User: UpdatusUser
  ->Temp folder emptied: 0 bytes
  ->Temporary Internet Files folder emptied: 67 bytes
  ->Flash cache emptied: 41620 bytes
  
  %systemdrive% .tmp files removed: 0 bytes
  %systemroot% .tmp files removed: 200704 bytes
  %systemroot%\System32 .tmp files removed: 0 bytes
  %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
  %systemroot%\System32\drivers .tmp files removed: 0 bytes
  Windows Temp folder emptied: 40899272 bytes
  %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 12856647 bytes
  RecycleBin emptied: 0 bytes
  
  Total Files Cleaned = 474,00 mb
  
  
  [EMPTYFLASH]
  
  User: All Users
  
  User: BOX
  
  User: Default
  ->Flash cache emptied: 0 bytes
  
  User: Default User
  ->Flash cache emptied: 0 bytes
  
  User: Maros
  ->Flash cache emptied: 0 bytes
  
  User: Public
  
  User: UpdatusUser
  ->Flash cache emptied: 0 bytes
  
  Total Flash Files Cleaned = 0,00 mb
  
  
  OTM by OldTimer - Version 3.1.19.0 log created on 03182012_092814
  
  Files moved on Reboot...
  C:\Users\Maros\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
  File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
  
  Registry entries deleted on Reboot...

[Rudy]

Smazáno. Potřeboval bych ještě nový log RSIT.

[Maroš]

Tady je:

• Logfile of random's system information tool 1.09 (written by random/random)
  Run by Maros at 2012-03-18 21:08:20
  Microsoft Windows 7 Home Premium Service Pack 1
  System drive C: has 7 GB (6%) free of 119 GB
  Total RAM: 4095 MB (49% free)
  
  Logfile of Trend Micro HijackThis v2.0.4
  Scan saved at 21:08:24, on 18.3.2012
  Platform: Windows 7 SP1 (WinNT 6.00.3505)
  MSIE: Internet Explorer v9.00 (9.00.8112.16421)
  Boot mode: Normal
  
  Running processes:
  C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
  C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
  C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  C:\Windows\AsScrPro.exe
  C:\Program Files\AVAST Software\Avast\AvastUI.exe
  C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
  C:\Program Files (x86)\Sticky Password\stpass.exe
  C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
  C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
  C:\Program Files (x86)\Skype\Phone\Skype.exe
  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
  C:\Program Files\trend micro\Maros.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
  O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
  O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
  O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
  O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
  O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
  O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
  O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
  O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
  O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
  O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
  O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
  O4 - HKCU\..\Run: [Sidebar] C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE /autoRun
  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  O4 - Global Startup: FancyStart daemon.lnk = ?
  O4 - Global Startup: SRS Premium Sound.lnk = ?
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
  O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
  O8 - Extra context menu item: Stahnou vse FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
  O8 - Extra context menu item: Stahnout FlashGet3 - C:\Users\Maros\AppData\Roaming\FlashGetBHO\GetUrl.htm
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
  O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
  O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
  O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  O16 - DPF: {57CD0DF4-DACC-439D-9173-3F6A8EC3FFE3} (IPCamPluginMegaDM Control) - http://213.226.209.88:84/IPCamPluginMegaDM.cab
  O16 - DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} (IPCamPlugIn Control) - http://213.226.209.88:90/IPCamPluginMJPEG.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{2A6819DA-1F98-4950-B929-D9FACAE9D592}: NameServer = 192.168.1.1,192.168.2.1
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
  O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
  O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
  O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
  O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
  O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
  O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
  O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
  O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  
  --
  End of file - 13036 bytes
  
  ======Listing Processes======
  
  \SystemRoot\System32\smss.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  wininit.exe
  %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  winlogon.exe
  C:\Windows\system32\svchost.exe -k DcomLaunch
  C:\Windows\system32\nvvsvc.exe
  C:\Windows\system32\svchost.exe -k RPCSS
  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
  C:\Windows\system32\svchost.exe -k netsvcs
  C:\Windows\system32\svchost.exe -k LocalService
  C:\Windows\system32\svchost.exe -k NetworkService
  "C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
  "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
  C:\Windows\system32\nvvsvc.exe -session -first
  "C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
  "C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
  "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
  C:\Windows\system32\svchost.exe -k netsvcs
  "taskhost.exe"
  C:\Windows\SysWOW64\PnkBstrA.exe
  "C:\Windows\system32\Dwm.exe"
  C:\Windows\Explorer.EXE
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
  taskeng.exe {DBDFDCFF-F3B4-4276-A22E-914858C531AE}
  "C:\Program Files\P4G\BatteryLife.exe"
  "C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
  "C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
  "C:\Users\Maros\Desktop\Core Temp.exe"
  "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
  Atouch64.exe
  ATKOSD.exe
  KBFiltr.exe
  WDC.exe
  "C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
  C:\Windows\system32\svchost.exe -k imgsvc
  "C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE"
  "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
  WLIDSvcM.exe 2928
  "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesApp64.EXE" /TUStart /pid:2880
  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
  "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
  "C:\Windows\notepad.exe" C:\_OTM\MovedFiles\03182012_092814.log
  "C:\Program Files\Elantech\ETDCtrl.exe"
  "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
  "C:\Program Files\Elantech\ETDCtrlHelper.exe"
  "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
  "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" /ELEVATED
  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
  "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  "C:\Program Files\Windows Media Player\wmpnetwk.exe"
  "C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
  "C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
  "C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
  "C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
  "C:\Windows\AsScrPro.exe"
  "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
  "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
  "C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
  "C:\Program Files (x86)\Sticky Password\stpass.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe"
  "C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version7\TeamViewer7_Logfile.log
  "C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version7\TeamViewer7_Logfile.log
  "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde
  "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
  "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3904.c397f30.711393510 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3904 "\\.\pipe\gecko-crash-server-pipe.3904" plugin
  "C:\Program Files (x86)\Skype\Phone\Skype.exe"
  "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3904.177cf200.1245603524 "C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 3904 "\\.\pipe\gecko-crash-server-pipe.3904" plugin
  "C:\Users\Maros\Downloads\RSITx64.exe"
  C:\Windows\system32\wbem\wmiprvse.exe
  
  =========Mozilla firefox=========
  
  ProfilePath - C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default
  
  prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
  prefs.js - "extensions.enabledItems" - "sk@dictionaries.addons.mozilla.org:2.03.2, personas@christopher.beard:1.6.2, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0, toolbar@ask.com:3.6.13.184, {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.3, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6, LogMeInClient@logmein.com:1.0.0.608, {54affe52-8223-453b-be1e-2fe2e250045c}:4.1.1.190, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, Cetrumcz@igeared:1.203.023.002, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
  prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=109980&tt ... 3f895e0&q="
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
  "Description"=DivX Plus Web Player
  "Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
  "Description"=Google Earth in your browser
  "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
  "Description"=Microsoft SharePoint Plug-in for Firefox
  "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
  "Description"=WLPG Install MIME type
  "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
  "Description"=NVIDIA stereo images plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
  "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
  "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@t-immersion.com/DFusionHomeWebPlugIn]
  "Description"=D'Fusion @Home Web Plug-In
  "Path"=C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
  "Description"=Handles PDFs in-place in Firefox
  "Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
  "Description"=Adobe® Flash® Player 10.1 Plugin
  "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
  "Description"=DivX VOD Helper Plug-in
  "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
  "Description"=Oracle® Next Generation Java™ Plug-In
  "Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
  "Description"=
  "Path"=disabled
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
  "Description"=Ag Player Plugin
  "Path"=C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
  "Description"=Office Authorization plug-in for NPAPI browsers
  "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
  
  C:\Program Files (x86)\Mozilla Firefox\extensions\
  ffxtlbr@babylon.com
  {972ce4c6-7e08-4474-a285-3208198ce6fd}
  {AB2CE124-6272-4b12-94A9-7303C7397BD1}
  
  C:\Program Files (x86)\Mozilla Firefox\components\
  binary.manifest
  browsercomps.dll
  FlashGet3.xpi
  
  C:\Program Files (x86)\Mozilla Firefox\plugins\
  np-mswmp.dll
  nppdf32.dll
  WMP Firefox Plugin License.rtf
  WMP Firefox Plugin RelNotes.txt
  
  C:\Program Files (x86)\Mozilla Firefox\searchplugins\
  babylon.xml
  Cetrumcz_igeared.xml
  google.xml
  heureka-cz.xml
  jyxo-cz.xml
  seznam-cz.xml
  slunecnice-cz.xml
  wikipedia-cz.xml
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\extensions\
  centrumpomocnik@centrum.cz
  cs@dictionaries.addons.mozilla.org
  engine@conduit.com
  personas@christopher.beard
  sk@dictionaries.addons.mozilla.org
  {003D3EDC-99B9-4a34-9C20-60CB94F7E829}
  {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
  {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  
  C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\2tmawg33.default\searchplugins\
  daemon-search.xml
  icqplugin-1.xml
  icqplugin-10.xml
  icqplugin-11.xml
  icqplugin-2.xml
  icqplugin-3.xml
  icqplugin-4.xml
  icqplugin-5.xml
  icqplugin-6.xml
  icqplugin-7.xml
  icqplugin-8.xml
  icqplugin-9.xml
  icqplugin.xml
  
  ======Registry dump======
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-11-02 75656]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
  Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A88CB9-84D2-4020-A2D1-B25A21034884}]
  HistoryTriggerBHO Class - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll [2011-12-31 36208]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
  WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
  DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
  Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
  Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
  Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-01-22 341888]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
  avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
  Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
  Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
  Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-01-22 59272]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-02-23 1201464]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
  {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-07-12 798771]
  {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
  {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-02-23 998560]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-12-13 2587944]
  "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-03 11842152]
  "SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-02-20 2786480]
  "SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-02-20 3669680]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"=C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE [2010-11-20 1475584]
  "DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet 3]
  C:\Program Files (x86)\FlashGet Network\FlashGet 3\Flashget3.exe -minimize []
  
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
  "ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
  "ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
  "ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2010-01-23 3058304]
  "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-02-23 4031368]
  
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
  FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
  SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  "AppInit_DLLs"=" "
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-19 249344]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
  "SecurityProviders"=credssp.dll
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "ConsentPromptBehaviorAdmin"=5
  "ConsentPromptBehaviorUser"=3
  "EnableUIADesktopToggle"=0
  "dontdisplaylastusername"=0
  "legalnoticecaption"=
  "legalnoticetext"=
  "shutdownwithoutlogon"=1
  "undockwithoutlogon"=1
  "EnableLinkedConnections"=1
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  "NoDriveTypeAutoRun"=145
  "NoDriveAutoRun"=0
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
  
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fastboot.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gameparkconsole.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mobileconnect.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstlink.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstview.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe]
  "Debugger=""C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
  "vidc.mrle"=msrle32.dll
  "vidc.msvc"=msvidc32.dll
  "msacm.imaadpcm"=imaadp32.acm
  "msacm.msg711"=msg711.acm
  "msacm.msgsm610"=msgsm32.acm
  "msacm.msadpcm"=msadp32.acm
  "midimapper"=midimap.dll
  "wavemapper"=msacm32.drv
  "VIDC.UYVY"=msyuv.dll
  "VIDC.YUY2"=msyuv.dll
  "VIDC.YVYU"=msyuv.dll
  "VIDC.IYUV"=iyuv_32.dll
  "vidc.i420"=iyuv_32.dll
  "VIDC.YVU9"=tsbyuv.dll
  "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
  "MSVideo8"=VfWWDM32.dll
  "wave2"=wdmaud.drv
  "midi2"=wdmaud.drv
  "mixer2"=wdmaud.drv
  "wave3"=wdmaud.drv
  "midi3"=wdmaud.drv
  "mixer3"=wdmaud.drv
  "wave4"=wdmaud.drv
  "midi4"=wdmaud.drv
  "mixer4"=wdmaud.drv
  "wave5"=wdmaud.drv
  "midi5"=wdmaud.drv
  "mixer5"=wdmaud.drv
  "wave6"=wdmaud.drv
  "midi6"=wdmaud.drv
  "mixer6"=wdmaud.drv
  "wave7"=wdmaud.drv
  "midi7"=wdmaud.drv
  "mixer7"=wdmaud.drv
  "wave"=wdmaud.drv
  "midi"=wdmaud.drv
  "mixer"=wdmaud.drv
  "aux"=wdmaud.drv
  "wave1"=wdmaud.drv
  "midi1"=wdmaud.drv
  "mixer1"=wdmaud.drv
  "wave8"=wdmaud.drv
  "midi8"=wdmaud.drv
  "mixer8"=wdmaud.drv
  "aux1"=wdmaud.drv
  
  ======File associations======
  
  .js - edit - C:\Windows\System32\Notepad.exe %1
  
  ======List of files/folders created in the last 1 month======
  
  2012-03-18 09:28:14 ----D---- C:\_OTM
  2012-03-16 23:19:38 ----A---- C:\Windows\system32\ntoskrnl.exe
  2012-03-16 23:19:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
  2012-03-16 23:19:35 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
  2012-03-16 23:07:01 ----A---- C:\Windows\system32\win32k.sys
  2012-03-16 23:06:55 ----A---- C:\Windows\system32\DWrite.dll
  2012-03-16 23:06:54 ----A---- C:\Windows\SYSWOW64\DWrite.dll
  2012-03-16 23:06:50 ----A---- C:\Windows\system32\rdrmemptylst.exe
  2012-03-16 23:06:50 ----A---- C:\Windows\system32\rdpwsx.dll
  2012-03-16 23:06:50 ----A---- C:\Windows\system32\rdpcorekmts.dll
  2012-03-16 23:06:09 ----A---- C:\Windows\system32\rdpcore.dll
  2012-03-16 23:06:08 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
  2012-03-16 23:06:07 ----A---- C:\Windows\system32\drivers\tdtcp.sys
  2012-03-16 23:06:07 ----A---- C:\Windows\system32\drivers\rdpwd.sys
  2012-03-03 09:31:38 ----D---- C:\Users\Maros\AppData\Roaming\Rovio
  2012-02-26 08:59:13 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
  2012-02-24 21:05:12 ----D---- C:\Casino
  
  ======List of files/folders modified in the last 1 month======
  
  2012-03-18 21:08:24 ----D---- C:\Windows\Prefetch
  2012-03-18 21:08:21 ----D---- C:\Program Files\trend micro
  2012-03-18 20:53:45 ----D---- C:\Windows\System32
  2012-03-18 20:53:45 ----A---- C:\Windows\system32\PerfStringBackup.INI
  2012-03-18 20:53:44 ----D---- C:\Windows\inf
  2012-03-18 20:50:59 ----D---- C:\Users\Maros\AppData\Roaming\Skype
  2012-03-18 18:18:29 ----D---- C:\Windows\temp
  2012-03-18 17:07:23 ----D---- C:\Windows\system32\config
  2012-03-18 09:30:28 ----D---- C:\Windows\SysWOW64
  2012-03-18 09:30:28 ----D---- C:\Windows
  2012-03-18 09:28:16 ----D---- C:\Program Files (x86)\Google
  2012-03-18 09:28:16 ----D---- C:\Program Files (x86)
  2012-03-18 09:28:16 ----AD---- C:\ProgramData
  2012-03-18 09:28:15 ----D---- C:\Windows\Tasks
  2012-03-18 09:18:33 ----D---- C:\Program Files (x86)\Mozilla Firefox
  2012-03-18 09:03:38 ----D---- C:\Windows\ModemLogs
  2012-03-18 08:58:03 ----D---- C:\Windows\winsxs
  2012-03-18 08:56:04 ----SHD---- C:\Windows\Installer
  2012-03-18 08:56:04 ----SHD---- C:\Config.Msi
  2012-03-18 08:56:04 ----D---- C:\Program Files (x86)\Adobe
  2012-03-18 08:55:56 ----SHD---- C:\System Volume Information
  2012-03-18 08:51:34 ----D---- C:\Program Files (x86)\ASUS
  2012-03-18 08:51:29 ----D---- C:\Windows\system32\Tasks
  2012-03-18 08:48:13 ----D---- C:\Users\Maros\AppData\Roaming\Samsung
  2012-03-18 08:48:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
  2012-03-17 21:47:05 ----RSD---- C:\Windows\assembly
  2012-03-17 21:47:05 ----D---- C:\Windows\Microsoft.NET
  2012-03-17 20:31:41 ----AD---- C:\Windows\system32\drivers
  2012-03-16 23:19:44 ----D---- C:\Windows\system32\catroot
  2012-03-16 23:19:43 ----D---- C:\Windows\system32\catroot2
  2012-03-16 23:17:02 ----A---- C:\Windows\system32\MRT.exe
  2012-03-16 23:16:39 ----D---- C:\ProgramData\Microsoft Help
  2012-03-16 23:15:53 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
  2012-03-16 23:00:29 ----D---- C:\ProgramData\Spyware Terminator
  2012-03-16 22:54:23 ----D---- C:\Windows\system32\wfp
  2012-03-16 22:54:21 ----D---- C:\Windows\system32\wbem
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\DriverStore
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\drivers\etc
  2012-03-16 22:53:30 ----D---- C:\Windows\system32\CodeIntegrity
  2012-03-16 22:53:14 ----D---- C:\Windows\AppCompat
  2012-03-16 22:53:13 ----D---- C:\ProgramData\P4G
  2012-03-16 22:52:56 ----D---- C:\Windows\registration
  2012-03-14 23:05:24 ----D---- C:\Windows\debug
  2012-03-14 21:37:19 ----D---- C:\Users\Maros\AppData\Roaming\TeamViewer
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\LangSoft
  2012-03-14 20:57:45 ----D---- C:\Users\Maros\AppData\Roaming\GHISLER
  2012-03-14 20:57:25 ----RHD---- C:\MSOCache
  2012-03-05 10:26:59 ----D---- C:\ProgramData\DivX
  2012-03-05 10:26:59 ----D---- C:\Program Files (x86)\DivX
  2012-03-03 18:37:24 ----SHD---- C:\Boot
  2012-03-03 13:03:14 ----D---- C:\Users\Maros\AppData\Roaming\DAEMON Tools Lite
  2012-03-03 13:01:50 ----D---- C:\Program Files (x86)\CCleaner
  2012-02-27 17:58:55 ----D---- C:\Program Files (x86)\Spyware Terminator
  2012-02-23 17:23:21 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
  2012-02-23 17:23:10 ----A---- C:\Windows\system32\aswBoot.exe
  
  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-01-07 24840]
  R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-09 244328]
  R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
  R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
  R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-11-19 530488]
  R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-02-23 53080]
  R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-02-23 817496]
  R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-02-23 335704]
  R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-02-23 59224]
  R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2011-07-15 219440]
  R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2011-07-15 44848]
  R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
  R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
  R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-02-23 24408]
  R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-02-23 69976]
  R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2012-02-14 51496]
  R3 ALSysIO;ALSysIO; \??\C:\Users\Maros\AppData\Local\Temp\ALSysIO64.sys []
  R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-27 2753536]
  R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-12-13 138024]
  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-05-03 2854504]
  R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
  R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
  R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
  R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
  R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
  R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
  R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-07-08 174184]
  R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
  R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-05-16 533096]
  R3 Safetica;Safetica Encryption Driver; C:\Windows\system32\DRIVERS\safetica.sys [2010-08-03 252760]
  R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
  R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesDriver64.sys [2011-10-13 11856]
  R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2011-07-15 164656]
  R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
  S0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys []
  S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\adusbser.sys [2009-11-06 154112]
  S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-18 507392]
  S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-12 40448]
  S3 Andbus;LGE Android Platform Composite USB Device; C:\Windows\system32\DRIVERS\lgandbus64.sys [2010-12-23 19456]
  S3 AndDiag;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag64.sys [2010-12-23 27648]
  S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps64.sys [2010-12-23 27136]
  S3 ANDModem;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [2010-12-23 34304]
  S3 androidusb;ADB Interface Driver; C:\Windows\System32\Drivers\lgandadb.sys []
  S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\E:\I386\AsPrOb64.sys []
  S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
  S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
  S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
  S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
  S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
  S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
  S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 35848]
  S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
  S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys []
  S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
  S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
  S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
  S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
  S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-03-18 74376]
  S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-03-18 85384]
  S3 h647906;DragonRise H647906 AMD64 Driver; C:\Windows\system32\drivers\h647906.sys [2008-08-08 63856]
  S3 h648101;DragonRise H648101 AMD64 Driver; C:\Windows\system32\drivers\h648101.sys [2008-08-08 65776]
  S3 h648103;DragonRise H648103 AMD64 Driver; C:\Windows\system32\drivers\h648103.sys [2008-08-08 62960]
  S3 hid7906;hid7906; C:\Windows\system32\drivers\hid7906.sys []
  S3 hid8101;hid8101; C:\Windows\system32\drivers\hid8101.sys []
  S3 hid8103;hid8103; C:\Windows\system32\drivers\hid8103.sys []
  S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 116992]
  S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2008-07-02 31624]
  S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys []
  S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
  S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
  S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888]
  S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
  S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 127488]
  S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 18944]
  S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 161280]
  S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2010-04-27 127488]
  S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2010-04-27 18944]
  S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2010-04-27 161280]
  S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
  S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
  S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
  S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
  S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-07-15 144688]
  S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-07-15 46384]
  S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
  S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
  S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-05-29 116224]
  S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-05-29 125952]
  S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-05-29 18944]
  S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-05-29 157696]
  S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-05-29 125952]
  
  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
  R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
  R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
  R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-02-23 44768]
  R2 ezGOSvc;Easybits GO Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136]
  R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
  R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-09-27 75136]
  R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
  R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2012-01-10 1148632]
  R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-02-23 2886528]
  R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE [2012-02-09 2143552]
  R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
  R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]
  S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
  S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
  S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
  S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
  S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
  S4 Jasmio.MediaCenter.Service;Media Center Support Service; C:\Program Files\Jasmio\Media Center Support Service\Jasmio.MediaCenter.Service.exe [2009-11-10 73144]
  S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
  S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
  S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
  S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-15 381248]
  
  -----------------EOF-----------------

[Rudy]

Dvouklikem na soubor C:\Program Files\trend micro\Maros.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O16 - DPF: {57CD0DF4-DACC-439D-9173-3F6A8EC3FFE3} (IPCamPluginMegaDM Control) - http://213.226.209.88:84/IPCamPluginMegaDM.cab
O16 - DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} (IPCamPlugIn Control) - http://213.226.209.88:90/IPCamPluginMJPEG.cab

a klikněte na >FixChecked<. Restartujte PC.