Dobrý večer,
druhý den mám problém s obačasným pádem firefoxu, vzápětí flash playeru a občas exelu. Stáhl jsem novou verzi flashplayeru - nelze nainstalovat.
Díky za radu
Log z RSTI
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2013-03-16 18:53:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 111 GB (60%) free of 184 GB
Total RAM: 3948 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:53:13, on 16.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files\trend micro\Jirka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EssentialPIM Pro] "C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (file missing)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\Windows\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13830 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3959920
\??\C:\Windows\system32\conhost.exe "1762852923-1896470218-95075732-160364760315096467881478757787-1792886009-1582834336
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Canon\DIAS\CnxDIAS.exe"
crypserv.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskeng.exe {8DB31D66-A65C-4B06-9791-3CE1B7A0016A}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\totalcmd\TOTALCMD.EXE"
/tsr
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.allianz.cz/makler1
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4280.12e3c500.783036908 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 4280 "\\.\pipe\gecko-crash-server-pipe.4280" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe" --proxy-stub-channel=Flash4752.6D9573D8.15494 --host-broker-channel=Flash4752.6D9573D8.11570 --host-pid=4752 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe" --channel=3472.0053F8E8.1022340804 --proxy-stub-channel=Flash4752.6D9573D8.15494 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" -Embedding
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-05-11 545224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-05-11 193480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-04-25 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-05 2589992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-03-21 2207848]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"EPSON Stylus DX4800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIADE.EXE [2005-02-02 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 6326448]
"AutoKMS"=C:\Windows\AutoKMS.exe [2013-03-16 615936]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"EssentialPIM Pro"=C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe [2013-03-08 6809592]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-10-11 59280]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-06-10 389632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.vbs - edit - C:\Windows\SysWow64\Notepad.exe %1
.vbs - open - C:\Windows\SysWow64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-03-16 00:57:21 ----D---- C:\rsit
2013-03-16 00:57:21 ----D---- C:\Program Files\trend micro
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.ini
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.exe
2013-03-16 00:26:07 ----D---- C:\Program Files\Common Files\DESIGNER
2013-03-16 00:25:38 ----D---- C:\Windows\PCHEALTH
2013-03-16 00:23:21 ----D---- C:\Program Files\Microsoft Analysis Services
2013-03-16 00:23:21 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-03-16 00:23:11 ----D---- C:\Program Files (x86)\Microsoft Office
2013-03-16 00:23:10 ----D---- C:\Program Files\Microsoft Office
2013-03-16 00:22:51 ----RHD---- C:\MSOCache
2013-03-15 21:43:15 ----D---- C:\Program Files (x86)\QuickTime
2013-03-15 21:43:14 ----D---- C:\ProgramData\Apple Computer
2013-03-15 21:42:01 ----D---- C:\Program Files (x86)\Apple Software Update
2013-03-15 20:43:12 ----D---- C:\ProgramData\ESET
2013-03-15 20:43:12 ----D---- C:\Program Files\ESET
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 20:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 20:31:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 12:44:59 ----D---- C:\Windows\pss
2013-03-13 21:48:16 ----D---- C:\Users\Jirka\AppData\Roaming\EssentialPIM Pro
2013-03-13 21:48:16 ----D---- C:\Program Files (x86)\EssentialPIM Pro
2013-03-12 18:02:21 ----D---- C:\Program Files (x86)\ModelH
2013-03-11 23:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\systweak
2013-02-27 22:21:35 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 22:21:35 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 22:21:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 22:21:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 22:21:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 22:21:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 22:21:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 22:21:28 ----A---- C:\Windows\system32\d2d1.dll
2013-02-27 22:04:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-17 20:57:10 ----RD---- C:\Program Files (x86)\Skype
2013-02-17 20:56:55 ----D---- C:\ProgramData\Skype
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssins.exe
======List of files/folders modified in the last 1 months======
2013-03-16 18:53:11 ----D---- C:\Windows\Temp
2013-03-16 15:12:41 ----D---- C:\Windows\system32\config
2013-03-16 13:44:03 ----D---- C:\Program Files (x86)\Allianz pojišťovna
2013-03-16 12:53:39 ----RSD---- C:\Windows\assembly
2013-03-16 12:53:39 ----D---- C:\Windows\Microsoft.NET
2013-03-16 12:25:57 ----D---- C:\Windows\system32\LogFiles
2013-03-16 12:24:25 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-16 12:23:12 ----D---- C:\ProgramData\clear.fi
2013-03-16 09:45:48 ----D---- C:\Users\Jirka\AppData\Roaming\Apple Computer
2013-03-16 09:44:49 ----SHD---- C:\Config.Msi
2013-03-16 00:57:21 ----RD---- C:\Program Files
2013-03-16 00:33:19 ----D---- C:\Windows
2013-03-16 00:28:51 ----SHD---- C:\Windows\Installer
2013-03-16 00:28:46 ----D---- C:\ProgramData\Microsoft Help
2013-03-16 00:28:12 ----D---- C:\Windows\winsxs
2013-03-16 00:26:11 ----RSD---- C:\Windows\Fonts
2013-03-16 00:26:08 ----D---- C:\Windows\ShellNew
2013-03-16 00:26:07 ----D---- C:\Program Files\Common Files
2013-03-16 00:26:03 ----D---- C:\Windows\System32
2013-03-16 00:25:51 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-16 00:25:38 ----SD---- C:\ProgramData\Microsoft
2013-03-16 00:25:38 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-16 00:23:21 ----RD---- C:\Program Files (x86)
2013-03-16 00:22:48 ----SHD---- C:\System Volume Information
2013-03-15 22:33:43 ----D---- C:\Program Files (x86)\Common Files
2013-03-15 22:30:40 ----D---- C:\Windows\SysWOW64
2013-03-15 22:14:51 ----D---- C:\Windows\system32\Tasks
2013-03-15 21:43:14 ----D---- C:\ProgramData
2013-03-15 21:23:05 ----D---- C:\Windows\inf
2013-03-15 21:23:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-15 20:53:53 ----D---- C:\Windows\AppPatch
2013-03-15 20:49:11 ----D---- C:\Windows\debug
2013-03-15 20:49:09 ----A---- C:\Windows\system32\MRT.exe
2013-03-15 20:43:49 ----D---- C:\Windows\system32\drivers
2013-03-15 20:43:49 ----D---- C:\Windows\system32\catroot
2013-03-15 20:43:48 ----D---- C:\Windows\system32\DriverStore
2013-03-15 20:33:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 20:33:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-15 20:32:33 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 20:32:33 ----D---- C:\Windows\system32\migration
2013-03-15 20:32:33 ----D---- C:\Program Files\Internet Explorer
2013-03-15 20:32:33 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 20:31:28 ----D---- C:\Windows\system32\catroot2
2013-03-15 20:24:40 ----D---- C:\Windows\Tasks
2013-03-15 20:24:40 ----D---- C:\Windows\system32\wfp
2013-03-15 20:24:32 ----D---- C:\Windows\system32\wbem
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\Recovery
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\rescache
2013-03-15 20:23:41 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\wbem
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\NV
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\Macromed
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers\nti
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\dllcache
2013-03-15 20:23:35 ----D---- C:\Windows\system32\NDF
2013-03-15 20:23:35 ----D---- C:\Windows\system32\Macromed
2013-03-15 20:23:35 ----D---- C:\Windows\system32\CodeIntegrity
2013-03-15 20:23:34 ----D---- C:\Windows\AppCompat
2013-03-15 20:23:32 ----D---- C:\Users\Jirka\AppData\Roaming\PowerCinema
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\IrfanView
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2013-03-15 20:23:30 ----AD---- C:\ProgramData\Temp
2013-03-15 20:23:28 ----D---- C:\ProgramData\CyberLink
2013-03-15 20:23:24 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-03-15 20:23:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-15 20:23:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-15 20:23:19 ----D---- C:\Program Files (x86)\Cyberlink
2013-03-15 20:23:09 ----SHD---- C:\$Recycle.Bin
2013-03-15 20:23:09 ----D---- C:\Program Files (x86)\Acer
2013-03-15 20:23:04 ----HD---- C:\Program Files (x86)\Temp
2013-03-15 20:22:34 ----D---- C:\Windows\registration
2013-03-15 20:22:23 ----D---- C:\Windows\SYSWOW64\XPSViewer
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\winrm
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\wdi
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WCN
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\spp
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\Speech
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\slmgr
2013-03-15 20:22:16 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\NetworkList
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\MUI
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\Msdtc
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\migwiz
2013-03-15 20:22:04 ----D---- C:\Windows\SYSWOW64\InstallShield
2013-03-15 20:22:03 ----D---- C:\Windows\SYSWOW64\IME
2013-03-15 20:22:01 ----D---- C:\Windows\SYSWOW64\Dism
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\config
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\com
2013-03-15 20:21:14 ----D---- C:\Users\Jirka\AppData\Roaming\FolderSync
2013-03-15 20:20:39 ----D---- C:\Program Files\Java
2013-03-15 18:39:30 ----D---- C:\Windows\Prefetch
2013-03-15 18:06:21 ----D---- C:\Windows\SoftwareDistribution
2013-03-06 20:53:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 22:44:35 ----D---- C:\ProgramData\firebird
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\zh-HK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-PT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-BR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pl-PL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\nl-NL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\ko-KR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\it-IT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\hu-HU
2013-02-27 22:24:49 ----D---- C:\Windows\system32\fr-FR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\el-GR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\tr-TR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\sv-SE
2013-02-27 22:24:47 ----D---- C:\Windows\system32\fi-FI
2013-02-27 22:24:47 ----D---- C:\Windows\system32\es-ES
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-TW
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-CN
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ru-RU
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ja-JP
2013-02-27 22:24:46 ----D---- C:\Windows\system32\de-DE
2013-02-27 22:24:45 ----D---- C:\Windows\system32\nb-NO
2013-02-27 22:24:45 ----D---- C:\Windows\system32\en-US
2013-02-27 22:24:45 ----D---- C:\Windows\system32\da-DK
2013-02-25 19:51:55 ----D---- C:\GEN
2013-02-17 21:01:01 ----D---- C:\Program Files (x86)\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-01-10 57904]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-04-23 132704]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-23 310368]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-04 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776]
R1 NetworkX;NetworkX; C:\Windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2010-12-23 11576]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-01-10 349736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-01-24 107560]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-09-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-09-14 21416]
S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-05-10 956192]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [2012-09-04 4940760]
R2 Crypkey License;Crypkey License; C:\Windows\system32\crypserv.exe [2008-05-08 122880]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-12-21 1333424]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-02-17 2317848]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-09-23 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-27 115608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Spadává firefox, flashplayer a exel
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119524
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Zdravím!
Nejprve odinstalujte cracklé Office. Toto fórum nepodporuje softwarové pirátství. Pak dejte nový log RSIT.
Nejprve odinstalujte cracklé Office. Toto fórum nepodporuje softwarové pirátství. Pak dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Mrazík
- Návštěvník
- Příspěvky: 10
- Registrován: 16 led 2005 23:18
- Bydliště: Randálov
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Fajn, stalo,
druhý log:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2013-03-16 19:49:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 114 GB (62%) free of 184 GB
Total RAM: 3948 MB (54% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:49:20, on 16.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files\trend micro\Jirka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EssentialPIM Pro] "C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files
(x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:
\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software
\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher
\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology
\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service
\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\Windows\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player
\wmpnetwk.exe (file missing)
--
End of file - 12466 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3959920
\??\C:\Windows\system32\conhost.exe "1762852923-1896470218-95075732-160364760315096467881478757787-1792886009-1582834336
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Canon\DIAS\CnxDIAS.exe"
crypserv.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskeng.exe {8DB31D66-A65C-4B06-9791-3CE1B7A0016A}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\msiexec.exe /V
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe34_ Global\UsGthrCtrlFltPipeMssGthrPipe34 1 -2147483646 "Software\Microsoft\Windows
Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-05-11 545224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-05-11 193480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-04-25 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-05 2589992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-03-21 2207848]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"EPSON Stylus DX4800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIADE.EXE [2005-02-02 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 6326448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"EssentialPIM Pro"=C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe [2013-03-08 6809592]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-10-11 59280]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-06-10 389632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.vbs - edit - C:\Windows\SysWow64\Notepad.exe %1
.vbs - open - C:\Windows\SysWow64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-03-16 00:57:21 ----D---- C:\rsit
2013-03-16 00:57:21 ----D---- C:\Program Files\trend micro
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.ini
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.exe
2013-03-16 00:25:38 ----D---- C:\Windows\PCHEALTH
2013-03-16 00:23:10 ----D---- C:\Program Files\Microsoft Office
2013-03-15 21:43:15 ----D---- C:\Program Files (x86)\QuickTime
2013-03-15 21:43:14 ----D---- C:\ProgramData\Apple Computer
2013-03-15 21:42:01 ----D---- C:\Program Files (x86)\Apple Software Update
2013-03-15 20:43:12 ----D---- C:\ProgramData\ESET
2013-03-15 20:43:12 ----D---- C:\Program Files\ESET
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 20:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 20:31:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 12:44:59 ----D---- C:\Windows\pss
2013-03-13 21:48:16 ----D---- C:\Users\Jirka\AppData\Roaming\EssentialPIM Pro
2013-03-13 21:48:16 ----D---- C:\Program Files (x86)\EssentialPIM Pro
2013-03-12 18:02:21 ----D---- C:\Program Files (x86)\ModelH
2013-03-11 23:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\systweak
2013-02-27 22:21:35 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 22:21:35 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 22:21:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 22:21:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 22:21:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 22:21:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 22:21:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 22:21:28 ----A---- C:\Windows\system32\d2d1.dll
2013-02-27 22:04:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-17 20:57:10 ----RD---- C:\Program Files (x86)\Skype
2013-02-17 20:56:55 ----D---- C:\ProgramData\Skype
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssins.exe
======List of files/folders modified in the last 1 months======
2013-03-16 19:49:19 ----D---- C:\Windows\Temp
2013-03-16 19:48:53 ----D---- C:\Windows\Tasks
2013-03-16 19:48:53 ----D---- C:\Windows\system32\Tasks
2013-03-16 19:47:52 ----D---- C:\Windows\system32\LogFiles
2013-03-16 19:47:52 ----D---- C:\Windows\System32
2013-03-16 19:47:52 ----D---- C:\Windows\inf
2013-03-16 19:47:52 ----D---- C:\Windows\debug
2013-03-16 19:47:52 ----D---- C:\Windows
2013-03-16 19:47:01 ----D---- C:\Windows\Microsoft.NET
2013-03-16 19:46:51 ----SHD---- C:\Windows\Installer
2013-03-16 19:46:51 ----SHD---- C:\Config.Msi
2013-03-16 19:46:45 ----D---- C:\ProgramData\Microsoft Help
2013-03-16 19:46:44 ----RSD---- C:\Windows\assembly
2013-03-16 19:46:18 ----D---- C:\Windows\system32\config
2013-03-16 19:46:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-16 19:46:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-16 19:46:16 ----SD---- C:\ProgramData\Microsoft
2013-03-16 19:46:05 ----RSD---- C:\Windows\Fonts
2013-03-16 19:46:03 ----RD---- C:\Program Files (x86)
2013-03-16 19:46:03 ----RD---- C:\Program Files
2013-03-16 19:45:58 ----D---- C:\Program Files\Common Files
2013-03-16 19:45:33 ----D---- C:\Windows\ShellNew
2013-03-16 19:44:53 ----SHD---- C:\System Volume Information
2013-03-16 13:44:03 ----D---- C:\Program Files (x86)\Allianz pojišťovna
2013-03-16 12:24:25 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-16 12:23:12 ----D---- C:\ProgramData\clear.fi
2013-03-16 09:45:48 ----D---- C:\Users\Jirka\AppData\Roaming\Apple Computer
2013-03-16 00:28:12 ----D---- C:\Windows\winsxs
2013-03-15 22:33:43 ----D---- C:\Program Files (x86)\Common Files
2013-03-15 22:30:40 ----D---- C:\Windows\SysWOW64
2013-03-15 21:43:14 ----D---- C:\ProgramData
2013-03-15 21:23:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-15 20:53:53 ----D---- C:\Windows\AppPatch
2013-03-15 20:49:09 ----A---- C:\Windows\system32\MRT.exe
2013-03-15 20:43:49 ----D---- C:\Windows\system32\drivers
2013-03-15 20:43:49 ----D---- C:\Windows\system32\catroot
2013-03-15 20:43:48 ----D---- C:\Windows\system32\DriverStore
2013-03-15 20:33:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 20:33:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-15 20:32:33 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 20:32:33 ----D---- C:\Windows\system32\migration
2013-03-15 20:32:33 ----D---- C:\Program Files\Internet Explorer
2013-03-15 20:32:33 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 20:31:28 ----D---- C:\Windows\system32\catroot2
2013-03-15 20:24:40 ----D---- C:\Windows\system32\wfp
2013-03-15 20:24:32 ----D---- C:\Windows\system32\wbem
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\Recovery
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\rescache
2013-03-15 20:23:41 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\wbem
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\NV
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\Macromed
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers\nti
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\dllcache
2013-03-15 20:23:35 ----D---- C:\Windows\system32\NDF
2013-03-15 20:23:35 ----D---- C:\Windows\system32\Macromed
2013-03-15 20:23:35 ----D---- C:\Windows\system32\CodeIntegrity
2013-03-15 20:23:34 ----D---- C:\Windows\AppCompat
2013-03-15 20:23:32 ----D---- C:\Users\Jirka\AppData\Roaming\PowerCinema
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\IrfanView
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2013-03-15 20:23:30 ----AD---- C:\ProgramData\Temp
2013-03-15 20:23:28 ----D---- C:\ProgramData\CyberLink
2013-03-15 20:23:24 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-03-15 20:23:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-15 20:23:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-15 20:23:19 ----D---- C:\Program Files (x86)\Cyberlink
2013-03-15 20:23:09 ----SHD---- C:\$Recycle.Bin
2013-03-15 20:23:09 ----D---- C:\Program Files (x86)\Acer
2013-03-15 20:23:04 ----HD---- C:\Program Files (x86)\Temp
2013-03-15 20:22:34 ----D---- C:\Windows\registration
2013-03-15 20:22:23 ----D---- C:\Windows\SYSWOW64\XPSViewer
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\winrm
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\wdi
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WCN
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\spp
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\Speech
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\slmgr
2013-03-15 20:22:16 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\NetworkList
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\MUI
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\Msdtc
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\migwiz
2013-03-15 20:22:04 ----D---- C:\Windows\SYSWOW64\InstallShield
2013-03-15 20:22:03 ----D---- C:\Windows\SYSWOW64\IME
2013-03-15 20:22:01 ----D---- C:\Windows\SYSWOW64\Dism
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\config
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\com
2013-03-15 20:21:14 ----D---- C:\Users\Jirka\AppData\Roaming\FolderSync
2013-03-15 20:20:39 ----D---- C:\Program Files\Java
2013-03-15 18:39:30 ----D---- C:\Windows\Prefetch
2013-03-15 18:06:21 ----D---- C:\Windows\SoftwareDistribution
2013-03-06 20:53:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 22:44:35 ----D---- C:\ProgramData\firebird
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\zh-HK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-PT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-BR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pl-PL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\nl-NL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\ko-KR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\it-IT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\hu-HU
2013-02-27 22:24:49 ----D---- C:\Windows\system32\fr-FR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\el-GR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\tr-TR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\sv-SE
2013-02-27 22:24:47 ----D---- C:\Windows\system32\fi-FI
2013-02-27 22:24:47 ----D---- C:\Windows\system32\es-ES
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-TW
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-CN
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ru-RU
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ja-JP
2013-02-27 22:24:46 ----D---- C:\Windows\system32\de-DE
2013-02-27 22:24:45 ----D---- C:\Windows\system32\nb-NO
2013-02-27 22:24:45 ----D---- C:\Windows\system32\en-US
2013-02-27 22:24:45 ----D---- C:\Windows\system32\da-DK
2013-02-25 19:51:55 ----D---- C:\GEN
2013-02-17 21:01:01 ----D---- C:\Program Files (x86)\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-01-10 57904]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-04-23 132704]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-23 310368]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-04 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776]
R1 NetworkX;NetworkX; C:\Windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2010-12-23 11576]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-01-10 349736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-01-24 107560]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-09-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-09-14 21416]
S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-05-10 956192]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [2012-09-04 4940760]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18
138576]
R2 Crypkey License;Crypkey License; C:\Windows\system32\crypserv.exe [2008-05-08 122880]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-12-21 1333424]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
[2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-02-17 2317848]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
[2011-02-01 2656280]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011
-09-23 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-27 115608]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
druhý log:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2013-03-16 19:49:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 114 GB (62%) free of 184 GB
Total RAM: 3948 MB (54% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:49:20, on 16.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files\trend micro\Jirka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EssentialPIM Pro] "C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files
(x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:
\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software
\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher
\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology
\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service
\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\Windows\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player
\wmpnetwk.exe (file missing)
--
End of file - 12466 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3959920
\??\C:\Windows\system32\conhost.exe "1762852923-1896470218-95075732-160364760315096467881478757787-1792886009-1582834336
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Canon\DIAS\CnxDIAS.exe"
crypserv.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskeng.exe {8DB31D66-A65C-4B06-9791-3CE1B7A0016A}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe"
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\msiexec.exe /V
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe34_ Global\UsGthrCtrlFltPipeMssGthrPipe34 1 -2147483646 "Software\Microsoft\Windows
Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jirka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-05-11 545224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-05-11 193480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-04-25 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-05 2589992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-03-21 2207848]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"EPSON Stylus DX4800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIADE.EXE [2005-02-02 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 6326448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"EssentialPIM Pro"=C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe [2013-03-08 6809592]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-10-11 59280]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-06-10 389632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.vbs - edit - C:\Windows\SysWow64\Notepad.exe %1
.vbs - open - C:\Windows\SysWow64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-03-16 00:57:21 ----D---- C:\rsit
2013-03-16 00:57:21 ----D---- C:\Program Files\trend micro
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.ini
2013-03-16 00:33:19 ----A---- C:\Windows\AutoKMS.exe
2013-03-16 00:25:38 ----D---- C:\Windows\PCHEALTH
2013-03-16 00:23:10 ----D---- C:\Program Files\Microsoft Office
2013-03-15 21:43:15 ----D---- C:\Program Files (x86)\QuickTime
2013-03-15 21:43:14 ----D---- C:\ProgramData\Apple Computer
2013-03-15 21:42:01 ----D---- C:\Program Files (x86)\Apple Software Update
2013-03-15 20:43:12 ----D---- C:\ProgramData\ESET
2013-03-15 20:43:12 ----D---- C:\Program Files\ESET
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 20:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 20:31:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 12:44:59 ----D---- C:\Windows\pss
2013-03-13 21:48:16 ----D---- C:\Users\Jirka\AppData\Roaming\EssentialPIM Pro
2013-03-13 21:48:16 ----D---- C:\Program Files (x86)\EssentialPIM Pro
2013-03-12 18:02:21 ----D---- C:\Program Files (x86)\ModelH
2013-03-11 23:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\systweak
2013-02-27 22:21:35 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 22:21:35 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 22:21:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 22:21:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 22:21:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 22:21:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 22:21:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 22:21:28 ----A---- C:\Windows\system32\d2d1.dll
2013-02-27 22:04:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-17 20:57:10 ----RD---- C:\Program Files (x86)\Skype
2013-02-17 20:56:55 ----D---- C:\ProgramData\Skype
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssins.exe
======List of files/folders modified in the last 1 months======
2013-03-16 19:49:19 ----D---- C:\Windows\Temp
2013-03-16 19:48:53 ----D---- C:\Windows\Tasks
2013-03-16 19:48:53 ----D---- C:\Windows\system32\Tasks
2013-03-16 19:47:52 ----D---- C:\Windows\system32\LogFiles
2013-03-16 19:47:52 ----D---- C:\Windows\System32
2013-03-16 19:47:52 ----D---- C:\Windows\inf
2013-03-16 19:47:52 ----D---- C:\Windows\debug
2013-03-16 19:47:52 ----D---- C:\Windows
2013-03-16 19:47:01 ----D---- C:\Windows\Microsoft.NET
2013-03-16 19:46:51 ----SHD---- C:\Windows\Installer
2013-03-16 19:46:51 ----SHD---- C:\Config.Msi
2013-03-16 19:46:45 ----D---- C:\ProgramData\Microsoft Help
2013-03-16 19:46:44 ----RSD---- C:\Windows\assembly
2013-03-16 19:46:18 ----D---- C:\Windows\system32\config
2013-03-16 19:46:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-16 19:46:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-16 19:46:16 ----SD---- C:\ProgramData\Microsoft
2013-03-16 19:46:05 ----RSD---- C:\Windows\Fonts
2013-03-16 19:46:03 ----RD---- C:\Program Files (x86)
2013-03-16 19:46:03 ----RD---- C:\Program Files
2013-03-16 19:45:58 ----D---- C:\Program Files\Common Files
2013-03-16 19:45:33 ----D---- C:\Windows\ShellNew
2013-03-16 19:44:53 ----SHD---- C:\System Volume Information
2013-03-16 13:44:03 ----D---- C:\Program Files (x86)\Allianz pojišťovna
2013-03-16 12:24:25 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-16 12:23:12 ----D---- C:\ProgramData\clear.fi
2013-03-16 09:45:48 ----D---- C:\Users\Jirka\AppData\Roaming\Apple Computer
2013-03-16 00:28:12 ----D---- C:\Windows\winsxs
2013-03-15 22:33:43 ----D---- C:\Program Files (x86)\Common Files
2013-03-15 22:30:40 ----D---- C:\Windows\SysWOW64
2013-03-15 21:43:14 ----D---- C:\ProgramData
2013-03-15 21:23:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-15 20:53:53 ----D---- C:\Windows\AppPatch
2013-03-15 20:49:09 ----A---- C:\Windows\system32\MRT.exe
2013-03-15 20:43:49 ----D---- C:\Windows\system32\drivers
2013-03-15 20:43:49 ----D---- C:\Windows\system32\catroot
2013-03-15 20:43:48 ----D---- C:\Windows\system32\DriverStore
2013-03-15 20:33:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 20:33:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-15 20:32:33 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 20:32:33 ----D---- C:\Windows\system32\migration
2013-03-15 20:32:33 ----D---- C:\Program Files\Internet Explorer
2013-03-15 20:32:33 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 20:31:28 ----D---- C:\Windows\system32\catroot2
2013-03-15 20:24:40 ----D---- C:\Windows\system32\wfp
2013-03-15 20:24:32 ----D---- C:\Windows\system32\wbem
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\Recovery
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\rescache
2013-03-15 20:23:41 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\wbem
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\NV
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\Macromed
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers\nti
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\dllcache
2013-03-15 20:23:35 ----D---- C:\Windows\system32\NDF
2013-03-15 20:23:35 ----D---- C:\Windows\system32\Macromed
2013-03-15 20:23:35 ----D---- C:\Windows\system32\CodeIntegrity
2013-03-15 20:23:34 ----D---- C:\Windows\AppCompat
2013-03-15 20:23:32 ----D---- C:\Users\Jirka\AppData\Roaming\PowerCinema
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\IrfanView
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2013-03-15 20:23:30 ----AD---- C:\ProgramData\Temp
2013-03-15 20:23:28 ----D---- C:\ProgramData\CyberLink
2013-03-15 20:23:24 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-03-15 20:23:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-15 20:23:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-15 20:23:19 ----D---- C:\Program Files (x86)\Cyberlink
2013-03-15 20:23:09 ----SHD---- C:\$Recycle.Bin
2013-03-15 20:23:09 ----D---- C:\Program Files (x86)\Acer
2013-03-15 20:23:04 ----HD---- C:\Program Files (x86)\Temp
2013-03-15 20:22:34 ----D---- C:\Windows\registration
2013-03-15 20:22:23 ----D---- C:\Windows\SYSWOW64\XPSViewer
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\winrm
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\wdi
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WCN
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\spp
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\Speech
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\slmgr
2013-03-15 20:22:16 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\NetworkList
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\MUI
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\Msdtc
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\migwiz
2013-03-15 20:22:04 ----D---- C:\Windows\SYSWOW64\InstallShield
2013-03-15 20:22:03 ----D---- C:\Windows\SYSWOW64\IME
2013-03-15 20:22:01 ----D---- C:\Windows\SYSWOW64\Dism
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\config
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\com
2013-03-15 20:21:14 ----D---- C:\Users\Jirka\AppData\Roaming\FolderSync
2013-03-15 20:20:39 ----D---- C:\Program Files\Java
2013-03-15 18:39:30 ----D---- C:\Windows\Prefetch
2013-03-15 18:06:21 ----D---- C:\Windows\SoftwareDistribution
2013-03-06 20:53:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 22:44:35 ----D---- C:\ProgramData\firebird
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\zh-HK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-PT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-BR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pl-PL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\nl-NL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\ko-KR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\it-IT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\hu-HU
2013-02-27 22:24:49 ----D---- C:\Windows\system32\fr-FR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\el-GR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\tr-TR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\sv-SE
2013-02-27 22:24:47 ----D---- C:\Windows\system32\fi-FI
2013-02-27 22:24:47 ----D---- C:\Windows\system32\es-ES
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-TW
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-CN
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ru-RU
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ja-JP
2013-02-27 22:24:46 ----D---- C:\Windows\system32\de-DE
2013-02-27 22:24:45 ----D---- C:\Windows\system32\nb-NO
2013-02-27 22:24:45 ----D---- C:\Windows\system32\en-US
2013-02-27 22:24:45 ----D---- C:\Windows\system32\da-DK
2013-02-25 19:51:55 ----D---- C:\GEN
2013-02-17 21:01:01 ----D---- C:\Program Files (x86)\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-01-10 57904]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-04-23 132704]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-23 310368]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-04 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776]
R1 NetworkX;NetworkX; C:\Windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2010-12-23 11576]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-01-10 349736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-01-24 107560]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-09-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-09-14 21416]
S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-05-10 956192]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [2012-09-04 4940760]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18
138576]
R2 Crypkey License;Crypkey License; C:\Windows\system32\crypserv.exe [2008-05-08 122880]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-12-21 1333424]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
[2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-02-17 2317848]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
[2011-02-01 2656280]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011
-09-23 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-27 115608]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET
\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119524
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:files
C:\Windows\AutoKMS.ini
C:\Windows\AutoKMS.exe
C:\PROGRA~2\MICROS~4\Office14
:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Mrazík
- Návštěvník
- Příspěvky: 10
- Registrován: 16 led 2005 23:18
- Bydliště: Randálov
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Hotovo a další log
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2013-03-16 21:08:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 115 GB (62%) free of 184 GB
Total RAM: 3948 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:51, on 16.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\Jirka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EssentialPIM Pro] "C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\Windows\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12470 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\WLANExt.exe 3839104
\??\C:\Windows\system32\conhost.exe "1708879670-1996181252-1981292736-1202523284-20219204802078045057-146108480-926819669
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {A62845BD-2266-44A6-89DA-C10C04C85643}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Canon\DIAS\CnxDIAS.exe"
crypserv.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {63B8FDB9-F51E-4318-976B-9CC6152FFD47}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Jirka\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-05-11 545224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-05-11 193480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-04-25 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-05 2589992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-03-21 2207848]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"EPSON Stylus DX4800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIADE.EXE [2005-02-02 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 6326448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"EssentialPIM Pro"=C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe [2013-03-08 6809592]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-10-11 59280]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-06-10 389632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.vbs - edit - C:\Windows\SysWow64\Notepad.exe %1
.vbs - open - C:\Windows\SysWow64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-03-16 21:04:05 ----D---- C:\_OTM
2013-03-16 21:00:14 ----D---- C:\Users\Jirka\AppData\Roaming\OpenOffice.org
2013-03-16 20:59:26 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2013-03-16 20:43:44 ----D---- C:\Users\Jirka\AppData\Roaming\LibreOffice
2013-03-16 20:40:13 ----D---- C:\Program Files (x86)\LibreOffice 4.0
2013-03-16 00:57:21 ----D---- C:\rsit
2013-03-16 00:57:21 ----D---- C:\Program Files\trend micro
2013-03-16 00:25:38 ----D---- C:\Windows\PCHEALTH
2013-03-16 00:23:10 ----D---- C:\Program Files\Microsoft Office
2013-03-15 21:43:15 ----D---- C:\Program Files (x86)\QuickTime
2013-03-15 21:43:14 ----D---- C:\ProgramData\Apple Computer
2013-03-15 21:42:01 ----D---- C:\Program Files (x86)\Apple Software Update
2013-03-15 20:43:12 ----D---- C:\ProgramData\ESET
2013-03-15 20:43:12 ----D---- C:\Program Files\ESET
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 20:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 20:31:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 12:44:59 ----D---- C:\Windows\pss
2013-03-13 21:48:16 ----D---- C:\Users\Jirka\AppData\Roaming\EssentialPIM Pro
2013-03-13 21:48:16 ----D---- C:\Program Files (x86)\EssentialPIM Pro
2013-03-12 18:02:21 ----D---- C:\Program Files (x86)\ModelH
2013-03-11 23:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\systweak
2013-02-28 02:14:20 ----A---- C:\Windows\SYSWOW64\msvcr100.dll
2013-02-28 02:14:20 ----A---- C:\Windows\SYSWOW64\msvcp100.dll
2013-02-27 22:21:35 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 22:21:35 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 22:21:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 22:21:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 22:21:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 22:21:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 22:21:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 22:21:28 ----A---- C:\Windows\system32\d2d1.dll
2013-02-27 22:04:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-17 20:57:10 ----RD---- C:\Program Files (x86)\Skype
2013-02-17 20:56:55 ----D---- C:\ProgramData\Skype
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssins.exe
======List of files/folders modified in the last 1 months======
2013-03-16 21:08:33 ----D---- C:\Windows\Temp
2013-03-16 21:08:33 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-16 21:06:42 ----D---- C:\ProgramData\clear.fi
2013-03-16 21:06:31 ----D---- C:\Windows\system32\config
2013-03-16 21:06:23 ----D---- C:\Windows
2013-03-16 21:05:48 ----D---- C:\Windows\System32
2013-03-16 21:05:43 ----SHD---- C:\Config.Msi
2013-03-16 21:00:02 ----SHD---- C:\Windows\Installer
2013-03-16 20:59:34 ----RSD---- C:\Windows\Fonts
2013-03-16 20:59:26 ----RD---- C:\Program Files (x86)
2013-03-16 20:59:19 ----SHD---- C:\System Volume Information
2013-03-16 20:58:32 ----D---- C:\Windows\winsxs
2013-03-16 20:58:13 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-16 20:58:04 ----D---- C:\Windows\system32\catroot2
2013-03-16 20:43:04 ----D---- C:\Program Files (x86)\Common Files
2013-03-16 20:41:02 ----RSD---- C:\Windows\assembly
2013-03-16 20:40:50 ----D---- C:\Windows\SysWOW64
2013-03-16 19:58:18 ----D---- C:\Windows\Microsoft.NET
2013-03-16 19:48:53 ----D---- C:\Windows\Tasks
2013-03-16 19:48:53 ----D---- C:\Windows\system32\Tasks
2013-03-16 19:47:52 ----D---- C:\Windows\system32\LogFiles
2013-03-16 19:47:52 ----D---- C:\Windows\inf
2013-03-16 19:47:52 ----D---- C:\Windows\debug
2013-03-16 19:46:45 ----D---- C:\ProgramData\Microsoft Help
2013-03-16 19:46:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-16 19:46:16 ----SD---- C:\ProgramData\Microsoft
2013-03-16 19:46:03 ----RD---- C:\Program Files
2013-03-16 19:45:59 ----D---- C:\Windows\ShellNew
2013-03-16 19:45:58 ----D---- C:\Program Files\Common Files
2013-03-16 13:44:03 ----D---- C:\Program Files (x86)\Allianz pojišťovna
2013-03-16 09:45:48 ----D---- C:\Users\Jirka\AppData\Roaming\Apple Computer
2013-03-15 21:43:14 ----D---- C:\ProgramData
2013-03-15 21:23:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-15 20:53:53 ----D---- C:\Windows\AppPatch
2013-03-15 20:49:09 ----A---- C:\Windows\system32\MRT.exe
2013-03-15 20:43:49 ----D---- C:\Windows\system32\drivers
2013-03-15 20:43:49 ----D---- C:\Windows\system32\catroot
2013-03-15 20:43:48 ----D---- C:\Windows\system32\DriverStore
2013-03-15 20:33:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 20:33:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-15 20:32:33 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 20:32:33 ----D---- C:\Windows\system32\migration
2013-03-15 20:32:33 ----D---- C:\Program Files\Internet Explorer
2013-03-15 20:32:33 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 20:24:40 ----D---- C:\Windows\system32\wfp
2013-03-15 20:24:32 ----D---- C:\Windows\system32\wbem
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\Recovery
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\rescache
2013-03-15 20:23:41 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\wbem
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\NV
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\Macromed
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers\nti
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\dllcache
2013-03-15 20:23:35 ----D---- C:\Windows\system32\NDF
2013-03-15 20:23:35 ----D---- C:\Windows\system32\Macromed
2013-03-15 20:23:35 ----D---- C:\Windows\system32\CodeIntegrity
2013-03-15 20:23:34 ----D---- C:\Windows\AppCompat
2013-03-15 20:23:32 ----D---- C:\Users\Jirka\AppData\Roaming\PowerCinema
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\IrfanView
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2013-03-15 20:23:30 ----AD---- C:\ProgramData\Temp
2013-03-15 20:23:28 ----D---- C:\ProgramData\CyberLink
2013-03-15 20:23:24 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-03-15 20:23:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-15 20:23:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-15 20:23:19 ----D---- C:\Program Files (x86)\Cyberlink
2013-03-15 20:23:09 ----SHD---- C:\$Recycle.Bin
2013-03-15 20:23:09 ----D---- C:\Program Files (x86)\Acer
2013-03-15 20:23:04 ----HD---- C:\Program Files (x86)\Temp
2013-03-15 20:22:34 ----D---- C:\Windows\registration
2013-03-15 20:22:23 ----D---- C:\Windows\SYSWOW64\XPSViewer
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\winrm
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\wdi
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WCN
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\spp
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\Speech
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\slmgr
2013-03-15 20:22:16 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\NetworkList
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\MUI
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\Msdtc
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\migwiz
2013-03-15 20:22:04 ----D---- C:\Windows\SYSWOW64\InstallShield
2013-03-15 20:22:03 ----D---- C:\Windows\SYSWOW64\IME
2013-03-15 20:22:01 ----D---- C:\Windows\SYSWOW64\Dism
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\config
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\com
2013-03-15 20:21:14 ----D---- C:\Users\Jirka\AppData\Roaming\FolderSync
2013-03-15 20:20:39 ----D---- C:\Program Files\Java
2013-03-15 18:39:30 ----D---- C:\Windows\Prefetch
2013-03-15 18:06:21 ----D---- C:\Windows\SoftwareDistribution
2013-03-06 20:53:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 22:44:35 ----D---- C:\ProgramData\firebird
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\zh-HK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-PT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-BR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pl-PL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\nl-NL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\ko-KR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\it-IT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\hu-HU
2013-02-27 22:24:49 ----D---- C:\Windows\system32\fr-FR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\el-GR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\tr-TR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\sv-SE
2013-02-27 22:24:47 ----D---- C:\Windows\system32\fi-FI
2013-02-27 22:24:47 ----D---- C:\Windows\system32\es-ES
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-TW
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-CN
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ru-RU
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ja-JP
2013-02-27 22:24:46 ----D---- C:\Windows\system32\de-DE
2013-02-27 22:24:45 ----D---- C:\Windows\system32\nb-NO
2013-02-27 22:24:45 ----D---- C:\Windows\system32\en-US
2013-02-27 22:24:45 ----D---- C:\Windows\system32\da-DK
2013-02-25 19:51:55 ----D---- C:\GEN
2013-02-17 21:01:01 ----D---- C:\Program Files (x86)\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-01-10 57904]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-04-23 132704]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-23 310368]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-04 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776]
R1 NetworkX;NetworkX; C:\Windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2010-12-23 11576]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-01-10 349736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-01-24 107560]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-09-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-09-14 21416]
S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-05-10 956192]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [2012-09-04 4940760]
R2 Crypkey License;Crypkey License; C:\Windows\system32\crypserv.exe [2008-05-08 122880]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-12-21 1333424]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-02-17 2317848]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-09-23 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-27 115608]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2013-03-16 21:08:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 115 GB (62%) free of 184 GB
Total RAM: 3948 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:51, on 16.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\Jirka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EssentialPIM Pro] "C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2050590655-97587392-2373455403-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\Windows\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12470 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\WLANExt.exe 3839104
\??\C:\Windows\system32\conhost.exe "1708879670-1996181252-1981292736-1202523284-20219204802078045057-146108480-926819669
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {A62845BD-2266-44A6-89DA-C10C04C85643}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Canon\DIAS\CnxDIAS.exe"
crypserv.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {63B8FDB9-F51E-4318-976B-9CC6152FFD47}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
"C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe" /autorun
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Jirka\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-05-11 545224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-05-11 193480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-04-25 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-05 2589992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-03-21 2207848]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"EPSON Stylus DX4800 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIADE.EXE [2005-02-02 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 6326448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"EssentialPIM Pro"=C:\Program Files (x86)\EssentialPIM Pro\EssentialPIM.exe [2013-03-08 6809592]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-02-03 506712]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-10-11 59280]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-06-10 389632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.vbs - edit - C:\Windows\SysWow64\Notepad.exe %1
.vbs - open - C:\Windows\SysWow64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2013-03-16 21:04:05 ----D---- C:\_OTM
2013-03-16 21:00:14 ----D---- C:\Users\Jirka\AppData\Roaming\OpenOffice.org
2013-03-16 20:59:26 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2013-03-16 20:43:44 ----D---- C:\Users\Jirka\AppData\Roaming\LibreOffice
2013-03-16 20:40:13 ----D---- C:\Program Files (x86)\LibreOffice 4.0
2013-03-16 00:57:21 ----D---- C:\rsit
2013-03-16 00:57:21 ----D---- C:\Program Files\trend micro
2013-03-16 00:25:38 ----D---- C:\Windows\PCHEALTH
2013-03-16 00:23:10 ----D---- C:\Program Files\Microsoft Office
2013-03-15 21:43:15 ----D---- C:\Program Files (x86)\QuickTime
2013-03-15 21:43:14 ----D---- C:\ProgramData\Apple Computer
2013-03-15 21:42:01 ----D---- C:\Program Files (x86)\Apple Software Update
2013-03-15 20:43:12 ----D---- C:\ProgramData\ESET
2013-03-15 20:43:12 ----D---- C:\Program Files\ESET
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 20:31:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 20:31:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 20:31:11 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\url.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 20:31:10 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 20:31:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 20:31:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 20:31:08 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 20:31:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 20:31:05 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 12:44:59 ----D---- C:\Windows\pss
2013-03-13 21:48:16 ----D---- C:\Users\Jirka\AppData\Roaming\EssentialPIM Pro
2013-03-13 21:48:16 ----D---- C:\Program Files (x86)\EssentialPIM Pro
2013-03-12 18:02:21 ----D---- C:\Program Files (x86)\ModelH
2013-03-11 23:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\systweak
2013-02-28 02:14:20 ----A---- C:\Windows\SYSWOW64\msvcr100.dll
2013-02-28 02:14:20 ----A---- C:\Windows\SYSWOW64\msvcp100.dll
2013-02-27 22:21:35 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 22:21:35 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 22:21:34 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 22:21:34 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 22:21:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 22:21:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 22:21:30 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 22:21:30 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 22:21:29 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 22:21:28 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 22:21:28 ----A---- C:\Windows\system32\d2d1.dll
2013-02-27 22:04:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-17 20:57:10 ----RD---- C:\Program Files (x86)\Skype
2013-02-17 20:56:55 ----D---- C:\ProgramData\Skype
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2013-02-17 20:56:18 ----A---- C:\Windows\SYSWOW64\ssins.exe
======List of files/folders modified in the last 1 months======
2013-03-16 21:08:33 ----D---- C:\Windows\Temp
2013-03-16 21:08:33 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-16 21:06:42 ----D---- C:\ProgramData\clear.fi
2013-03-16 21:06:31 ----D---- C:\Windows\system32\config
2013-03-16 21:06:23 ----D---- C:\Windows
2013-03-16 21:05:48 ----D---- C:\Windows\System32
2013-03-16 21:05:43 ----SHD---- C:\Config.Msi
2013-03-16 21:00:02 ----SHD---- C:\Windows\Installer
2013-03-16 20:59:34 ----RSD---- C:\Windows\Fonts
2013-03-16 20:59:26 ----RD---- C:\Program Files (x86)
2013-03-16 20:59:19 ----SHD---- C:\System Volume Information
2013-03-16 20:58:32 ----D---- C:\Windows\winsxs
2013-03-16 20:58:13 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-16 20:58:04 ----D---- C:\Windows\system32\catroot2
2013-03-16 20:43:04 ----D---- C:\Program Files (x86)\Common Files
2013-03-16 20:41:02 ----RSD---- C:\Windows\assembly
2013-03-16 20:40:50 ----D---- C:\Windows\SysWOW64
2013-03-16 19:58:18 ----D---- C:\Windows\Microsoft.NET
2013-03-16 19:48:53 ----D---- C:\Windows\Tasks
2013-03-16 19:48:53 ----D---- C:\Windows\system32\Tasks
2013-03-16 19:47:52 ----D---- C:\Windows\system32\LogFiles
2013-03-16 19:47:52 ----D---- C:\Windows\inf
2013-03-16 19:47:52 ----D---- C:\Windows\debug
2013-03-16 19:46:45 ----D---- C:\ProgramData\Microsoft Help
2013-03-16 19:46:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-16 19:46:16 ----SD---- C:\ProgramData\Microsoft
2013-03-16 19:46:03 ----RD---- C:\Program Files
2013-03-16 19:45:59 ----D---- C:\Windows\ShellNew
2013-03-16 19:45:58 ----D---- C:\Program Files\Common Files
2013-03-16 13:44:03 ----D---- C:\Program Files (x86)\Allianz pojišťovna
2013-03-16 09:45:48 ----D---- C:\Users\Jirka\AppData\Roaming\Apple Computer
2013-03-15 21:43:14 ----D---- C:\ProgramData
2013-03-15 21:23:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-15 20:53:53 ----D---- C:\Windows\AppPatch
2013-03-15 20:49:09 ----A---- C:\Windows\system32\MRT.exe
2013-03-15 20:43:49 ----D---- C:\Windows\system32\drivers
2013-03-15 20:43:49 ----D---- C:\Windows\system32\catroot
2013-03-15 20:43:48 ----D---- C:\Windows\system32\DriverStore
2013-03-15 20:33:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 20:33:12 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-15 20:32:33 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 20:32:33 ----D---- C:\Windows\system32\migration
2013-03-15 20:32:33 ----D---- C:\Program Files\Internet Explorer
2013-03-15 20:32:33 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 20:24:40 ----D---- C:\Windows\system32\wfp
2013-03-15 20:24:32 ----D---- C:\Windows\system32\wbem
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\Recovery
2013-03-15 20:23:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 20:23:41 ----D---- C:\Windows\rescache
2013-03-15 20:23:41 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\wbem
2013-03-15 20:23:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\NV
2013-03-15 20:23:38 ----D---- C:\Windows\SYSWOW64\Macromed
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers\nti
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\drivers
2013-03-15 20:23:37 ----D---- C:\Windows\SYSWOW64\dllcache
2013-03-15 20:23:35 ----D---- C:\Windows\system32\NDF
2013-03-15 20:23:35 ----D---- C:\Windows\system32\Macromed
2013-03-15 20:23:35 ----D---- C:\Windows\system32\CodeIntegrity
2013-03-15 20:23:34 ----D---- C:\Windows\AppCompat
2013-03-15 20:23:32 ----D---- C:\Users\Jirka\AppData\Roaming\PowerCinema
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\IrfanView
2013-03-15 20:23:31 ----D---- C:\Users\Jirka\AppData\Roaming\GHISLER
2013-03-15 20:23:30 ----AD---- C:\ProgramData\Temp
2013-03-15 20:23:28 ----D---- C:\ProgramData\CyberLink
2013-03-15 20:23:24 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-03-15 20:23:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-15 20:23:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-03-15 20:23:19 ----D---- C:\Program Files (x86)\Cyberlink
2013-03-15 20:23:09 ----SHD---- C:\$Recycle.Bin
2013-03-15 20:23:09 ----D---- C:\Program Files (x86)\Acer
2013-03-15 20:23:04 ----HD---- C:\Program Files (x86)\Temp
2013-03-15 20:22:34 ----D---- C:\Windows\registration
2013-03-15 20:22:23 ----D---- C:\Windows\SYSWOW64\XPSViewer
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\winrm
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\wdi
2013-03-15 20:22:20 ----D---- C:\Windows\SYSWOW64\WCN
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\spp
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\Speech
2013-03-15 20:22:17 ----D---- C:\Windows\SYSWOW64\slmgr
2013-03-15 20:22:16 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\NetworkList
2013-03-15 20:22:12 ----D---- C:\Windows\SYSWOW64\MUI
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\Msdtc
2013-03-15 20:22:10 ----D---- C:\Windows\SYSWOW64\migwiz
2013-03-15 20:22:04 ----D---- C:\Windows\SYSWOW64\InstallShield
2013-03-15 20:22:03 ----D---- C:\Windows\SYSWOW64\IME
2013-03-15 20:22:01 ----D---- C:\Windows\SYSWOW64\Dism
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\config
2013-03-15 20:21:56 ----D---- C:\Windows\SYSWOW64\com
2013-03-15 20:21:14 ----D---- C:\Users\Jirka\AppData\Roaming\FolderSync
2013-03-15 20:20:39 ----D---- C:\Program Files\Java
2013-03-15 18:39:30 ----D---- C:\Windows\Prefetch
2013-03-15 18:06:21 ----D---- C:\Windows\SoftwareDistribution
2013-03-06 20:53:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-27 22:44:35 ----D---- C:\ProgramData\firebird
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 22:24:55 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 22:24:54 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 22:24:51 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\zh-HK
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-PT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pt-BR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\pl-PL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\nl-NL
2013-02-27 22:24:49 ----D---- C:\Windows\system32\ko-KR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\it-IT
2013-02-27 22:24:49 ----D---- C:\Windows\system32\hu-HU
2013-02-27 22:24:49 ----D---- C:\Windows\system32\fr-FR
2013-02-27 22:24:49 ----D---- C:\Windows\system32\el-GR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\tr-TR
2013-02-27 22:24:47 ----D---- C:\Windows\system32\sv-SE
2013-02-27 22:24:47 ----D---- C:\Windows\system32\fi-FI
2013-02-27 22:24:47 ----D---- C:\Windows\system32\es-ES
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-TW
2013-02-27 22:24:46 ----D---- C:\Windows\system32\zh-CN
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ru-RU
2013-02-27 22:24:46 ----D---- C:\Windows\system32\ja-JP
2013-02-27 22:24:46 ----D---- C:\Windows\system32\de-DE
2013-02-27 22:24:45 ----D---- C:\Windows\system32\nb-NO
2013-02-27 22:24:45 ----D---- C:\Windows\system32\en-US
2013-02-27 22:24:45 ----D---- C:\Windows\system32\da-DK
2013-02-25 19:51:55 ----D---- C:\GEN
2013-02-17 21:01:01 ----D---- C:\Program Files (x86)\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-01-10 57904]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-04-23 132704]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-23 310368]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-04 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776]
R1 NetworkX;NetworkX; C:\Windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2010-12-23 11576]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-01-10 349736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-01-24 107560]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-09-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-15 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-09-14 21416]
S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-05-10 956192]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [2012-09-04 4940760]
R2 Crypkey License;Crypkey License; C:\Windows\system32\crypserv.exe [2008-05-08 122880]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-12-21 1333424]
R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-02-17 2317848]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-09-23 655624]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-27 115608]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-26 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119524
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Log je již OK. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Mrazík
- Návštěvník
- Příspěvky: 10
- Registrován: 16 led 2005 23:18
- Bydliště: Randálov
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Díky moc, jestli to bylo těmi offici, tak dobře mi tak.
-
Rudy
- Site Admin
- Příspěvky: 119524
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Spadává firefox, flashplayer a exel
Cracklý program se může chovat nestandardně.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?