Prosím preventivku

[ZaWa]

Zdravím, prosím o preventivní kontrolu. Děkuji.

Log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2012-12-19 09:03:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 131 GB (40%) free of 332 GB
Total RAM: 8136 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:05:04, on 19.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe
C:\OpenDNS\DNSCrypt\dnscrypt-proxy.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\OpenDNS\DNSCrypt\OpenDNSInterface.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Aurora\firefox.exe
C:\Program Files\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\windows\SysWOW64\Userinit.exe,
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [F.lux] "C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe" /noshow
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: OpenDNSCrypt.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A40158B-12B7-478C-83AE-267C1CE0E403}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7975035F-7F01-48C8-8C18-9BD903926B7D}: NameServer = 127.0.0.1
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: OpenDNSCrypt (DNSCrypt) - Unknown owner - C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 8263 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 30161792
\??\C:\windows\system32\conhost.exe "1352979271-88930095115629415216371363771013998893128331276-20017723271753813602
"C:\windows\system32\Dwm.exe"
"explorer.exe"
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
C:\windows\system32\svchost.exe -k apphost
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"dnscrypt-proxy.exe"
\??\C:\windows\system32\conhost.exe "176315804-7294637065334000871315103096623753321018287967995095036-1123459574
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\svchost.exe -k iissvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe" /noshow
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\windows\system32\wbem\wmiprvse.exe
"C:\OpenDNS\DNSCrypt\OpenDNSInterface.exe"
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
WLIDSvcM.exe 1564
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Aurora\firefox.exe"
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ncsoft.com/Plugin]
"Description"=NCsoft login launcher module for FireFox and Chrome
"Path"=C:\Program Files (x86)\plaync\NCPlugin\npncllm3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.6.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Aurora\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Aurora\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Aurora\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default\extensions\
selectivecookiedelete@siju.mathew

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default\searchplugins\
duckduckgo.xml
startpage-https.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-21 2712360]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2011-05-10 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2011-05-10 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2011-05-10 5908928]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-10-10 171040]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-10-10 399392]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-10-10 441888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"F.lux"=C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe [2009-08-29 966656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2012-12-04 1354736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
OpenDNSCrypt.lnk - C:\windows\Installer\{DEF3592F-0751-4632-9875-8BF9AD602898}\_7245386387960A1D7D5229.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-10-10 441856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoDriveAutoRun"=3

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-12-19 09:03:16 ----D---- C:\rsit
2012-12-19 09:03:16 ----D---- C:\Program Files\trend micro
2012-12-18 23:49:26 ----D---- C:\madVR
2012-12-18 15:31:18 ----D---- C:\Program Files (x86)\Aurora
2012-12-17 10:01:19 ----D---- C:\Program Files (x86)\xlgames
2012-12-17 09:47:06 ----D---- C:\ArcheAge
2012-12-15 12:49:36 ----D---- C:\windows\SYSWOW64\NV
2012-12-15 12:49:36 ----D---- C:\windows\system32\NV
2012-12-15 12:48:30 ----D---- C:\ProgramData\NVIDIA
2012-12-15 12:48:22 ----D---- C:\Program Files (x86)\AGEIA Technologies
2012-12-15 12:48:00 ----A---- C:\windows\system32\nvvsvc.exe
2012-12-15 12:48:00 ----A---- C:\windows\system32\nvsvc64.dll
2012-12-15 12:48:00 ----A---- C:\windows\system32\nvshext.dll
2012-12-15 12:48:00 ----A---- C:\windows\system32\nv3dappshextr.dll
2012-12-15 12:48:00 ----A---- C:\windows\system32\nv3dappshext.dll
2012-12-15 12:47:59 ----A---- C:\windows\system32\nvsvcr.dll
2012-12-15 12:47:59 ----A---- C:\windows\system32\nvmctray.dll
2012-12-15 12:47:59 ----A---- C:\windows\system32\nvcpl.dll
2012-12-15 12:47:58 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2012-12-15 12:47:17 ----D---- C:\ProgramData\NVIDIA Corporation
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvumdshim.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvinit.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2012-12-15 12:42:46 ----A---- C:\windows\SYSWOW64\nvapi.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvwgf2umx.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvumdshimx.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvopencl.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvoglv64.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvinitx.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvdispgenco64.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvdispco64.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvd3dumx.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvcuvid.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvcuvenc.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvcuda.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvcompiler.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\nvapi64.dll
2012-12-15 12:42:46 ----A---- C:\windows\system32\drivers\nvpciflt.sys
2012-12-15 12:42:46 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2012-12-15 11:55:55 ----D---- C:\Program Files (x86)\xy-VSFilter
2012-12-15 11:55:55 ----A---- C:\windows\SYSWOW64\unrar.dll
2012-12-14 22:24:08 ----D---- C:\Users\Jirka\AppData\Roaming\transmission
2012-12-14 22:23:46 ----D---- C:\Program Files (x86)\Transmission-Qt
2012-12-14 22:12:25 ----D---- C:\ProgramData\Ubisoft
2012-12-14 22:06:45 ----D---- C:\Users\Jirka\AppData\Roaming\PunkBuster
2012-12-14 17:07:02 ----D---- C:\Program Files (x86)\Ubisoft
2012-12-13 11:06:03 ----D---- C:\Funcom
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\javaw.exe
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\java.exe
2012-12-12 17:59:30 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\vbscript.dll
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-12-12 10:44:30 ----A---- C:\windows\system32\mshtmled.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\url.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2012-12-12 10:44:29 ----A---- C:\windows\system32\urlmon.dll
2012-12-12 10:44:29 ----A---- C:\windows\system32\url.dll
2012-12-12 10:44:29 ----A---- C:\windows\system32\ieUnatt.exe
2012-12-12 10:44:29 ----A---- C:\windows\system32\ieui.dll
2012-12-12 10:44:28 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-12-12 10:44:28 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\wininet.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\msfeeds.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\jscript9.dll
2012-12-12 10:44:27 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-12-12 10:44:27 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\vbscript.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\jsproxy.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\jscript.dll
2012-12-12 10:44:26 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-12-12 10:44:26 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-12-12 10:44:26 ----A---- C:\windows\system32\iertutil.dll
2012-12-12 10:44:25 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-12-12 10:44:23 ----A---- C:\windows\system32\mshtml.dll
2012-12-12 10:44:23 ----A---- C:\windows\system32\ieframe.dll
2012-12-12 10:44:22 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\winsrv.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\KernelBase.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\kernel32.dll
2012-12-12 10:42:05 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2012-12-12 10:42:05 ----A---- C:\windows\SYSWOW64\kernel32.dll
2012-12-12 10:42:05 ----A---- C:\windows\system32\conhost.exe
2012-12-12 10:42:04 ----A---- C:\windows\SYSWOW64\setup16.exe
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\wow32.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\instnm.exe
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64win.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64cpu.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\ntvdm64.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 10:42:01 ----A---- C:\windows\SYSWOW64\user.exe
2012-12-12 10:41:55 ----A---- C:\windows\SYSWOW64\atmlib.dll
2012-12-12 10:41:55 ----A---- C:\windows\SYSWOW64\atmfd.dll
2012-12-12 10:41:55 ----A---- C:\windows\system32\atmlib.dll
2012-12-12 10:41:55 ----A---- C:\windows\system32\atmfd.dll
2012-12-12 10:41:50 ----A---- C:\windows\SYSWOW64\tzres.dll
2012-12-12 10:41:50 ----A---- C:\windows\system32\tzres.dll
2012-12-12 10:41:40 ----A---- C:\windows\system32\win32k.sys
2012-12-12 10:41:35 ----A---- C:\windows\SYSWOW64\dpnet.dll
2012-12-12 10:41:35 ----A---- C:\windows\system32\dpnet.dll
2012-12-08 22:26:59 ----D---- C:\Program Files (x86)\Haali
2012-12-08 22:23:30 ----D---- C:\Users\Jirka\AppData\Roaming\Media Player Classic
2012-12-08 22:19:39 ----D---- C:\Program Files (x86)\LAV Filters
2012-12-08 22:19:16 ----D---- C:\Program Files (x86)\MPC-HC
2012-12-07 18:36:27 ----D---- C:\DEVIL MAY CRY 4
2012-12-03 08:59:39 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2012-12-03 08:59:38 ----A---- C:\windows\system32\drivers\aswSP.sys
2012-12-03 08:59:35 ----A---- C:\windows\system32\drivers\aswRdr2.sys
2012-12-03 08:59:33 ----A---- C:\windows\system32\drivers\aswTdi.sys
2012-12-03 08:59:31 ----A---- C:\windows\system32\drivers\aswSnx.sys
2012-12-03 08:59:28 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2012-12-03 08:59:28 ----A---- C:\windows\system32\aswBoot.exe
2012-12-03 08:58:43 ----A---- C:\windows\SYSWOW64\aswBoot.exe
2012-12-03 08:58:43 ----A---- C:\windows\avastSS.scr
2012-12-03 08:58:33 ----D---- C:\ProgramData\AVAST Software
2012-12-03 08:58:33 ----D---- C:\Program Files\AVAST Software
2012-12-01 18:17:25 ----D---- C:\Program Files\SumatraPDF
2012-11-30 00:16:23 ----D---- C:\Program Files\CCleaner
2012-11-24 15:35:37 ----RHD---- C:\Users\Jirka\AppData\Roaming\SecuROM
2012-11-24 15:35:35 ----A---- C:\windows\SYSWOW64\CmdLineExt_x64.dll

======List of files/folders modified in the last 1 month======

2012-12-19 09:03:30 ----D---- C:\windows\Prefetch
2012-12-19 09:03:16 ----D---- C:\Program Files
2012-12-19 09:00:59 ----D---- C:\Windows
2012-12-19 07:43:14 ----D---- C:\windows\Temp
2012-12-19 07:17:40 ----D---- C:\windows\system32\config
2012-12-19 07:05:46 ----D---- C:\windows\system32\drivers
2012-12-19 07:05:28 ----A---- C:\windows\SYSWOW64\log.txt
2012-12-19 01:47:54 ----D---- C:\Program Files (x86)\Steam
2012-12-18 21:47:37 ----D---- C:\Users\Jirka\AppData\Roaming\HexChat
2012-12-18 20:53:41 ----D---- C:\Program Files (x86)\JDownloader
2012-12-18 20:32:41 ----D---- C:\Program Files (x86)
2012-12-18 17:21:44 ----D---- C:\windows\System32
2012-12-18 17:21:44 ----D---- C:\windows\inf
2012-12-18 17:21:44 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-12-18 10:58:21 ----SHD---- C:\System Volume Information
2012-12-17 12:50:45 ----D---- C:\windows\Logs
2012-12-17 09:48:21 ----RSD---- C:\windows\assembly
2012-12-15 12:49:36 ----D---- C:\windows\SysWOW64
2012-12-15 12:48:30 ----AHD---- C:\ProgramData
2012-12-15 12:48:28 ----D---- C:\Users
2012-12-15 12:48:24 ----SHD---- C:\windows\Installer
2012-12-15 12:48:24 ----D---- C:\Program Files\NVIDIA Corporation
2012-12-15 12:48:24 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-15 12:47:56 ----D---- C:\windows\Help
2012-12-15 12:47:07 ----D---- C:\windows\system32\catroot
2012-12-15 12:47:03 ----D---- C:\windows\system32\DriverStore
2012-12-15 12:43:21 ----D---- C:\windows\system32\catroot2
2012-12-15 07:43:11 ----D---- C:\windows\system32\Tasks
2012-12-14 22:31:05 ----D---- C:\windows\winsxs
2012-12-14 21:54:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-14 01:45:42 ----D---- C:\windows\rescache
2012-12-13 11:06:14 ----D---- C:\ProgramData\Media Center Programs
2012-12-12 18:03:56 ----D---- C:\Program Files (x86)\Java
2012-12-12 18:01:49 ----D---- C:\windows\Tasks
2012-12-12 17:59:51 ----D---- C:\ProgramData\Adobe
2012-12-12 10:56:58 ----D---- C:\windows\SoftwareDistribution
2012-12-12 10:55:42 ----D---- C:\windows\debug
2012-12-12 10:52:13 ----D---- C:\windows\SYSWOW64\cs-CZ
2012-12-12 10:52:13 ----D---- C:\windows\system32\cs-CZ
2012-12-12 10:52:12 ----D---- C:\windows\SYSWOW64\migration
2012-12-12 10:52:12 ----D---- C:\windows\AppPatch
2012-12-12 10:52:12 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-12 10:52:11 ----D---- C:\windows\system32\migration
2012-12-12 10:52:11 ----D---- C:\Program Files\Internet Explorer
2012-12-12 10:45:44 ----A---- C:\windows\system32\MRT.exe
2012-12-12 10:44:18 ----D---- C:\Program Files (x86)\Intel
2012-12-07 19:04:41 ----D---- C:\windows\SYSWOW64\directx
2012-12-01 17:23:40 ----D---- C:\Program Files (x86)\Common Files
2012-12-01 17:23:08 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2011-05-10 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-03 30056]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2011-09-25 314016]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2011-09-25 43680]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-05-10 29792]
R3 BazisVirtualCDBus;WinCDEmu Virtual Bus Driver; C:\windows\system32\DRIVERS\BazisVirtualCDBus.sys [2011-08-08 198480]
R3 EagleX64;EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys []
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-10-10 5343584]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2010-12-13 174168]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2011-03-31 412712]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 rtsuvc;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-03-21 1413168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 ALSysIO;ALSysIO; \??\C:\Users\Jirka\AppData\Local\Temp\ALSysIO64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2010-12-15 349224]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-12-15 106536]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-12-15 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-12-15 39464]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-12-15 21416]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys []
S3 dump_wmimmc;dump_wmimmc; \??\C:\CAPCOM\IXION SAGA\GameGuard\dump_wmimmc.sys []
S3 NPIDS;NPIDS; \??\C:\windows\syswow64\NpIdsVt64.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 PROCEXP151;PROCEXP151; \??\C:\windows\system32\Drivers\PROCEXP151.SYS []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vtany;vtany; \??\C:\windows\vtany.sys []
S3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-12-14 953632]
R2 DNSCrypt;OpenDNSCrypt; C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe [2012-08-31 14336]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;Stavova slu?ba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-10-10 277024]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-08-22 529744]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-09-08 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]

-----------------EOF-----------------

[Rudy]

Také zdravím!
Log vypadá OK. Jen bych doporučil vyčištění CCleanerem (Čistič a Registry).

[ZaWa]

Děkuji za kontrolu.

Popravdě CCleaner aplikuju dost často, dokonce vylepšený CCEnhancerem. V čištění toho mám zaškrtaného spoustu, u prohlížečů vše, a u registrů vše.

Pokud tam stále něco zůstává, tak byste to třeba mohl odpálit přes nějakou utilitu?

Předpokládám, že půjde o zbytky jako:
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ncsoft.com/Plugin]
"Description"=NCsoft login launcher module for FireFox and Chrome
"Path"=C:\Program Files (x86)\plaync\NCPlugin\npncllm3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ncsoft.com/Plugin]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

[ZaWa]

Tak jsem provedl. Můžete, prosím, ještě kdyžtak nějak zkontrolovat ten účet "hedev"? Takový jsem určitě nevytvářel. Podle Googlu to má spojitost s SWtOR, a onu parodii na MMO jsem ve slabé chvilce nedávno instaloval, ale stejně je to nějaké podezřelé.

Případně ještě jestli se dá zbavit oněh UpdatusUser účtů? Ty se tvoří když instaluji novou verzi driveru pro GPU.

Děkuji

Log OTM:
All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ncsoft.com/Plugin\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: DefaultAppPool
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: hedev
->Temp folder emptied: 0 bytes

User: Jirka
->Temp folder emptied: 46128 bytes
->Temporary Internet Files folder emptied: 3058037 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 20873740 bytes
->Flash cache emptied: 545 bytes

User: Public

User: UpdatusUser

User: UpdatusUser.Jirka-PC

User: UpdatusUser.Jirka-PC.000

User: UpdatusUser.Jirka-PC.001
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 200704 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 57909 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67978 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 23.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: DefaultAppPool

User: hedev

User: Jirka
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

User: UpdatusUser.Jirka-PC

User: UpdatusUser.Jirka-PC.000

User: UpdatusUser.Jirka-PC.001

Total Flash Files Cleaned = 0.00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12202012_203825

Files moved on Reboot...

Registry entries deleted on Reboot...

Log RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2012-12-20 20:45:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 142 GB (43%) free of 332 GB
Total RAM: 8136 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:45:18, on 20.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe
C:\OpenDNS\DNSCrypt\dnscrypt-proxy.exe
C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\OpenDNS\DNSCrypt\OpenDNSInterface.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Aurora\firefox.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\windows\SysWOW64\Userinit.exe,
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [F.lux] "C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe" /noshow
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: OpenDNSCrypt.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A40158B-12B7-478C-83AE-267C1CE0E403}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7975035F-7F01-48C8-8C18-9BD903926B7D}: NameServer = 127.0.0.1
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: OpenDNSCrypt (DNSCrypt) - Unknown owner - C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 7933 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\windows\system32\Dwm.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 25399984
\??\C:\windows\system32\conhost.exe "-1563389857802736145825009521-219580747-430972152-928079593-698791378-499502679
"explorer.exe"
C:\windows\System32\spoolsv.exe
taskeng.exe {1CD63FB3-59C0-455D-ACA5-AC9D51A6F726}
"taskhost.exe"
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\svchost.exe -k apphost
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k iissvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
WLIDSvcM.exe 2228
"dnscrypt-proxy.exe"
\??\C:\windows\system32\conhost.exe "748239324-947291632-1426885046939368194-1624631422-1498220240-550570280-540519503
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\servicing\TrustedInstaller.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe" /noshow
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\OpenDNS\DNSCrypt\OpenDNSInterface.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Aurora\firefox.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.6.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Aurora\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Aurora\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Aurora\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default\extensions\
selectivecookiedelete@siju.mathew

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\mexxts9p.default\searchplugins\
duckduckgo.xml
startpage-https.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-21 2712360]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2011-05-10 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2011-05-10 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2011-05-10 5908928]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-10-10 171040]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-10-10 399392]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-10-10 441888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"F.lux"=C:\Users\Jirka\Local Settings\Apps\F.lux\flux.exe [2009-08-29 966656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2012-12-04 1354736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
OpenDNSCrypt.lnk - C:\windows\Installer\{DEF3592F-0751-4632-9875-8BF9AD602898}\_7245386387960A1D7D5229.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-10-10 441856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoDriveAutoRun"=3

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-12-20 20:45:10 ----D---- C:\rsit
2012-12-20 20:45:10 ----D---- C:\Program Files\trend micro
2012-12-20 20:38:25 ----D---- C:\_OTM
2012-12-20 19:48:27 ----D---- C:\windows\SYSWOW64\NV
2012-12-20 19:48:27 ----D---- C:\windows\system32\NV
2012-12-20 19:47:22 ----D---- C:\Program Files (x86)\AGEIA Technologies
2012-12-20 19:47:12 ----D---- C:\ProgramData\NVIDIA
2012-12-20 19:46:54 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvvsvc.exe
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvsvcr.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvsvc64.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvshext.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvmctray.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nvcpl.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nv3dappshextr.dll
2012-12-20 19:46:54 ----A---- C:\windows\system32\nv3dappshext.dll
2012-12-20 19:46:00 ----D---- C:\ProgramData\NVIDIA Corporation
2012-12-20 19:43:34 ----A---- C:\windows\ntbtlog.txt
2012-12-20 19:42:22 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2012-12-20 19:42:22 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2012-12-20 19:42:22 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2012-12-20 19:42:22 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvwgf2umx.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvopencl.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvoglv64.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvdispgenco64.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvdispco64.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\nvd3dumx.dll
2012-12-20 19:42:22 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvumdshim.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvinit.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2012-12-20 19:42:21 ----A---- C:\windows\SYSWOW64\nvapi.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvumdshimx.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvinitx.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvcuvid.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvcuvenc.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvcuda.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvcompiler.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\nvapi64.dll
2012-12-20 19:42:21 ----A---- C:\windows\system32\drivers\nvpciflt.sys
2012-12-20 08:39:18 ----D---- C:\Funcom
2012-12-19 21:24:44 ----D---- C:\Program Files (x86)\Aurora
2012-12-18 23:49:26 ----D---- C:\madVR
2012-12-17 10:01:19 ----D---- C:\Program Files (x86)\xlgames
2012-12-17 09:47:06 ----D---- C:\ArcheAge
2012-12-15 11:55:55 ----D---- C:\Program Files (x86)\xy-VSFilter
2012-12-15 11:55:55 ----A---- C:\windows\SYSWOW64\unrar.dll
2012-12-14 22:24:08 ----D---- C:\Users\Jirka\AppData\Roaming\transmission
2012-12-14 22:23:46 ----D---- C:\Program Files (x86)\Transmission-Qt
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\javaw.exe
2012-12-12 18:03:56 ----A---- C:\windows\SYSWOW64\java.exe
2012-12-12 17:59:30 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\vbscript.dll
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-12-12 10:44:30 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-12-12 10:44:30 ----A---- C:\windows\system32\mshtmled.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\url.dll
2012-12-12 10:44:29 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2012-12-12 10:44:29 ----A---- C:\windows\system32\urlmon.dll
2012-12-12 10:44:29 ----A---- C:\windows\system32\url.dll
2012-12-12 10:44:29 ----A---- C:\windows\system32\ieUnatt.exe
2012-12-12 10:44:29 ----A---- C:\windows\system32\ieui.dll
2012-12-12 10:44:28 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-12-12 10:44:28 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\wininet.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\msfeeds.dll
2012-12-12 10:44:28 ----A---- C:\windows\system32\jscript9.dll
2012-12-12 10:44:27 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-12-12 10:44:27 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\vbscript.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\jsproxy.dll
2012-12-12 10:44:27 ----A---- C:\windows\system32\jscript.dll
2012-12-12 10:44:26 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-12-12 10:44:26 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-12-12 10:44:26 ----A---- C:\windows\system32\iertutil.dll
2012-12-12 10:44:25 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-12-12 10:44:23 ----A---- C:\windows\system32\mshtml.dll
2012-12-12 10:44:23 ----A---- C:\windows\system32\ieframe.dll
2012-12-12 10:44:22 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\winsrv.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\KernelBase.dll
2012-12-12 10:42:06 ----A---- C:\windows\system32\kernel32.dll
2012-12-12 10:42:05 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2012-12-12 10:42:05 ----A---- C:\windows\SYSWOW64\kernel32.dll
2012-12-12 10:42:05 ----A---- C:\windows\system32\conhost.exe
2012-12-12 10:42:04 ----A---- C:\windows\SYSWOW64\setup16.exe
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 10:42:03 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\wow32.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2012-12-12 10:42:03 ----A---- C:\windows\SYSWOW64\instnm.exe
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64win.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64cpu.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\wow64.dll
2012-12-12 10:42:03 ----A---- C:\windows\system32\ntvdm64.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 10:42:02 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 10:42:01 ----A---- C:\windows\SYSWOW64\user.exe
2012-12-12 10:41:55 ----A---- C:\windows\SYSWOW64\atmlib.dll
2012-12-12 10:41:55 ----A---- C:\windows\SYSWOW64\atmfd.dll
2012-12-12 10:41:55 ----A---- C:\windows\system32\atmlib.dll
2012-12-12 10:41:55 ----A---- C:\windows\system32\atmfd.dll
2012-12-12 10:41:50 ----A---- C:\windows\SYSWOW64\tzres.dll
2012-12-12 10:41:50 ----A---- C:\windows\system32\tzres.dll
2012-12-12 10:41:40 ----A---- C:\windows\system32\win32k.sys
2012-12-12 10:41:35 ----A---- C:\windows\SYSWOW64\dpnet.dll
2012-12-12 10:41:35 ----A---- C:\windows\system32\dpnet.dll
2012-12-08 22:26:59 ----D---- C:\Program Files (x86)\Haali
2012-12-08 22:23:30 ----D---- C:\Users\Jirka\AppData\Roaming\Media Player Classic
2012-12-08 22:19:39 ----D---- C:\Program Files (x86)\LAV Filters
2012-12-08 22:19:16 ----D---- C:\Program Files (x86)\MPC-HC
2012-12-07 18:36:27 ----D---- C:\DEVIL MAY CRY 4
2012-12-03 08:59:39 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2012-12-03 08:59:38 ----A---- C:\windows\system32\drivers\aswSP.sys
2012-12-03 08:59:35 ----A---- C:\windows\system32\drivers\aswRdr2.sys
2012-12-03 08:59:33 ----A---- C:\windows\system32\drivers\aswTdi.sys
2012-12-03 08:59:31 ----A---- C:\windows\system32\drivers\aswSnx.sys
2012-12-03 08:59:28 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2012-12-03 08:59:28 ----A---- C:\windows\system32\aswBoot.exe
2012-12-03 08:58:43 ----A---- C:\windows\SYSWOW64\aswBoot.exe
2012-12-03 08:58:43 ----A---- C:\windows\avastSS.scr
2012-12-03 08:58:33 ----D---- C:\ProgramData\AVAST Software
2012-12-03 08:58:33 ----D---- C:\Program Files\AVAST Software
2012-12-01 18:17:25 ----D---- C:\Program Files\SumatraPDF
2012-11-30 00:16:23 ----D---- C:\Program Files\CCleaner
2012-11-24 15:35:37 ----RHD---- C:\Users\Jirka\AppData\Roaming\SecuROM
2012-11-24 15:35:35 ----A---- C:\windows\SYSWOW64\CmdLineExt_x64.dll

======List of files/folders modified in the last 1 month======

2012-12-20 20:45:10 ----D---- C:\Program Files
2012-12-20 20:41:50 ----A---- C:\windows\SYSWOW64\log.txt
2012-12-20 20:41:34 ----D---- C:\windows\Temp
2012-12-20 20:39:51 ----D---- C:\windows\system32\config
2012-12-20 20:38:32 ----D---- C:\Windows
2012-12-20 19:48:27 ----D---- C:\windows\SysWOW64
2012-12-20 19:48:27 ----D---- C:\windows\System32
2012-12-20 19:47:24 ----SHD---- C:\windows\Installer
2012-12-20 19:47:22 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-12-20 19:47:22 ----D---- C:\Program Files (x86)
2012-12-20 19:47:12 ----AHD---- C:\ProgramData
2012-12-20 19:47:10 ----D---- C:\Users
2012-12-20 19:47:07 ----D---- C:\Program Files\NVIDIA Corporation
2012-12-20 19:46:50 ----D---- C:\windows\Help
2012-12-20 19:45:55 ----D---- C:\windows\system32\drivers
2012-12-20 19:45:54 ----D---- C:\windows\inf
2012-12-20 19:45:53 ----D---- C:\windows\system32\catroot
2012-12-20 19:45:50 ----D---- C:\windows\system32\DriverStore
2012-12-20 19:43:14 ----D---- C:\windows\system32\catroot2
2012-12-20 19:40:23 ----D---- C:\Program Files (x86)\Steam
2012-12-20 08:39:25 ----D---- C:\ProgramData\Media Center Programs
2012-12-19 23:02:21 ----D---- C:\Users\Jirka\AppData\Roaming\HexChat
2012-12-19 19:56:55 ----SHD---- C:\System Volume Information
2012-12-19 12:41:49 ----D---- C:\windows\Prefetch
2012-12-18 20:53:41 ----D---- C:\Program Files (x86)\JDownloader
2012-12-18 17:21:44 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-12-17 12:50:45 ----D---- C:\windows\Logs
2012-12-17 09:48:21 ----RSD---- C:\windows\assembly
2012-12-15 07:43:11 ----D---- C:\windows\system32\Tasks
2012-12-14 22:31:05 ----D---- C:\windows\winsxs
2012-12-14 21:54:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-14 01:45:42 ----D---- C:\windows\rescache
2012-12-12 18:03:56 ----D---- C:\Program Files (x86)\Java
2012-12-12 18:01:49 ----D---- C:\windows\Tasks
2012-12-12 17:59:51 ----D---- C:\ProgramData\Adobe
2012-12-12 10:56:58 ----D---- C:\windows\SoftwareDistribution
2012-12-12 10:55:42 ----D---- C:\windows\debug
2012-12-12 10:52:13 ----D---- C:\windows\SYSWOW64\cs-CZ
2012-12-12 10:52:13 ----D---- C:\windows\system32\cs-CZ
2012-12-12 10:52:12 ----D---- C:\windows\SYSWOW64\migration
2012-12-12 10:52:12 ----D---- C:\windows\AppPatch
2012-12-12 10:52:12 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-12 10:52:11 ----D---- C:\windows\system32\migration
2012-12-12 10:52:11 ----D---- C:\Program Files\Internet Explorer
2012-12-12 10:45:44 ----A---- C:\windows\system32\MRT.exe
2012-12-12 10:44:18 ----D---- C:\Program Files (x86)\Intel
2012-12-07 19:04:41 ----D---- C:\windows\SYSWOW64\directx
2012-12-01 17:23:40 ----D---- C:\Program Files (x86)\Common Files
2012-12-01 17:23:08 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2011-05-10 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-03 30056]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2011-09-25 314016]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2011-09-25 43680]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-05-10 29792]
R3 BazisVirtualCDBus;WinCDEmu Virtual Bus Driver; C:\windows\system32\DRIVERS\BazisVirtualCDBus.sys [2011-08-08 198480]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-10-10 5343584]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2010-12-13 174168]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2011-03-31 412712]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 rtsuvc;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-03-21 1413168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 ALSysIO;ALSysIO; \??\C:\Users\Jirka\AppData\Local\Temp\ALSysIO64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2010-12-15 349224]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-12-15 106536]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-12-15 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-12-15 39464]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-12-15 21416]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys []
S3 dump_wmimmc;dump_wmimmc; \??\C:\CAPCOM\IXION SAGA\GameGuard\dump_wmimmc.sys []
S3 EagleX64;EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys []
S3 NPIDS;NPIDS; \??\C:\windows\syswow64\NpIdsVt64.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 PROCEXP151;PROCEXP151; \??\C:\windows\system32\Drivers\PROCEXP151.SYS []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vtany;vtany; \??\C:\windows\vtany.sys []
S3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-12-14 953632]
R2 DNSCrypt;OpenDNSCrypt; C:\OpenDNS\DNSCrypt\OpenDNSCryptService.exe [2012-08-31 14336]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;Stavova slu?ba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-10-10 277024]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-08-22 529744]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-09-08 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]

-----------------EOF-----------------

[Rudy]

Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Restartujte PC.

[ZaWa]

Stalo se.

[Rudy]

Log je jž OK.

[ZaWa]

Dobrá, děkuji za pomoc a Váš čas.

[Rudy]

Rádo se stalo!