Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Avira hlási vírus

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Avira hlási vírus

#1 Příspěvek od psychoSVK »

Zdravím avira mi hlási nejaký vírus ktorý nevie odstrániť, pričom odkazuje na Dedicate server zo steamu.

Obrázek

RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Matus at 2013-04-09 17:07:35
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 31 GB (23%) free of 134 GB
Total RAM: 3069 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:07:43, on 9. 4. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\QIP 2012\qip.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Matus\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Users\Matus\AppData\Local\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe
C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.133\deploy\LoLLauncher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.0\deploy\LolClient.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.0.222\deploy\League of Legends.exe
C:\Program Files\trend micro\Matus.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: EgisPBIE - {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisPBIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O4 - HKLM\..\Run: [TVAgent] "C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [VitaKeyTSR] C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe /run
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Infium] "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Matus\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Service - Egis Technology Inc. - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisService.exe
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EpsonCustomerResearchParticipation - SEIKO EPSON CORPORATION - C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13627 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
atieclxx
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 34346800
\??\C:\Windows\system32\conhost.exe "-966771436498920138-1676386564-923590918-192834118851414379018041241102056146166
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe"
C:\Windows\system32\EscSvc64.exe
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Users\Matus\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\Rainmeter\Rainmeter.exe"
"C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe"
"C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe" /Start
taskeng.exe {629D9867-ABB4-4509-AC86-71CE27D3F588}
"c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000494
"C:\Program Files (x86)\Stardock\ObjectDock\Dock64.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Matus\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Users\Matus\AppData\Local\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe" ts3overlay_hook_win32.dll 10000
C:\Windows\servicing\TrustedInstaller.exe
"C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe" updateandrun lol_launcher LoLLauncher.exe
LoLLauncher.exe
"C:/Riot Games/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.0/deploy/LolClient.exe" -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4528.a61e400.1708255055 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox" E7CF176E110C211B 4528 "\\.\pipe\gecko-crash-server-pipe.4528" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --proxy-stub-channel=Flash7136.61E11D80.73 --host-broker-channel=Flash7136.61E11D80.23817 --host-pid=7136 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --channel=7956.0034F758.1646559947 --proxy-stub-channel=Flash7136.61E11D80.73 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" --host-npapi-version=27 --type=renderer
"C:/Riot Games/League of Legends/RADS/solutions/lol_game_client_sln/releases/0.0.0.222/deploy/League of Legends.exe" "8394" "LoLLauncher.exe" "C:/Riot Games/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.0/deploy/LolClient.exe" "31.186.224.89 5109 zdxLBhUQbXhJNEWXauF0MA== 29289981"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\Matus\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Matus\AppData\Roaming\Mozilla\Firefox\Profiles\x90xhear.default

prefs.js - "browser.startup.homepage" - "google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\Matus\AppData\Roaming\Mozilla\Firefox\Profiles\x90xhear.default\extensions\
{58c64034-c5f3-4179-85f5-81642f42b6d5}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-15 551840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-15 209824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2012-04-26 240224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-15 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}]
EgisPBIE Sign-in Helper - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisPBIE.dll [2011-04-19 640560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-15 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2012-04-26 240224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2009-07-21 610872]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-03-23 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2009-08-22 5148672]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-03-29 1631144]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-01-08 3674320]
"Infium"=C:\Program Files (x86)\QIP 2012\qip.exe [2013-01-10 8378408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
C:\Program Files (x86)\QIP 2012\qip.exe [2013-01-10 8378408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Unified Remote v2]
C:\Users\Matus\Desktop\Remote\RemoteServer.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TVAgent"=C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe [2009-04-23 206120]
"QlbCtrl.exe"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-06-24 320056]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-02 98304]
"WirelessAssistant"=C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-09-01 499768]
"HPCam_Menu"=c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-11-05 407920]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-11-05 202096]
"VitaKeyTSR"=C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe [2011-04-19 384048]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-03-28 345312]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2011-10-31 1058400]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Matus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Matus\AppData\Roaming\Dropbox\bin\Dropbox.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
Stardock ObjectDock.lnk - C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
EgisPwdFilter
EgisDSPwdFilter

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-05 11:00:00 ----D---- C:\rsit
2013-04-05 11:00:00 ----D---- C:\Program Files\trend micro
2013-04-04 17:48:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-02 21:16:18 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2013-03-28 11:35:54 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-03-28 11:35:54 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-03-28 11:35:54 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-03-26 23:43:02 ----A---- C:\Windows\SYSWOW64\msvcr100.dll
2013-03-26 23:43:02 ----A---- C:\Windows\SYSWOW64\msvcp100.dll
2013-03-25 16:23:55 ----D---- C:\ProgramData\Package Cache
2013-03-22 11:55:42 ----D---- C:\Users\Matus\AppData\Roaming\Opera
2013-03-22 11:55:15 ----D---- C:\Program Files (x86)\Opera
2013-03-21 16:10:34 ----A---- C:\Windows\system32\WinUSBCoInstaller2.dll
2013-03-15 22:49:24 ----D---- C:\Users\Matus\AppData\Roaming\.minecraft
2013-03-15 22:43:02 ----D---- C:\ProgramData\Sun
2013-03-15 22:42:41 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-03-15 22:42:41 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-03-15 22:42:41 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-03-15 22:42:29 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-03-15 22:42:29 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-03-15 22:42:29 ----A---- C:\Windows\SYSWOW64\java.exe
2013-03-15 22:42:17 ----D---- C:\Program Files (x86)\Java
2013-03-15 22:39:52 ----A---- C:\Windows\system32\deployJava1.dll
2013-03-15 22:39:51 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-03-15 22:39:51 ----A---- C:\Windows\system32\javaws.exe
2013-03-15 22:39:33 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2013-03-15 22:39:33 ----A---- C:\Windows\system32\javaw.exe
2013-03-15 22:39:33 ----A---- C:\Windows\system32\java.exe
2013-03-15 22:39:08 ----D---- C:\Program Files\Java
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-15 00:15:41 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-03-15 00:15:41 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-03-15 00:15:41 ----A---- C:\Windows\system32\elshyph.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-15 00:15:40 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\wextract.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\webcheck.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\url.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\occache.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\msrating.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\msls31.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\mshta.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\inseng.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\imgutil.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iexpress.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iesetup.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iernonce.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iepeers.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-15 00:15:40 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\ie4uinit.exe
2013-03-15 00:15:40 ----A---- C:\Windows\system32\icardie.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-15 00:15:40 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-15 00:15:39 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-15 00:15:39 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-15 00:15:39 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 00:15:39 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 00:15:39 ----A---- C:\Windows\system32\iesysprep.dll
2013-03-15 00:15:39 ----A---- C:\Windows\system32\ieframe.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-15 00:14:25 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-03-15 00:14:25 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\XpsPrint.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\WMPhoto.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\UIAnimation.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\FntCache.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\dxgi.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\DWrite.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d11.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10warp.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10level9.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10core.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10_1.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d3d10.dll
2013-03-15 00:14:25 ----A---- C:\Windows\system32\d2d1.dll
2013-03-15 00:09:31 ----D---- C:\Users\Matus\AppData\Roaming\TeamViewer
2013-03-15 00:07:26 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-15 00:06:44 ----D---- C:\Users\Matus\AppData\Roaming\Unified Remote
2013-03-11 16:46:52 ----D---- C:\Program Files\CCleaner

======List of files/folders modified in the last 1 month======

2013-04-09 17:07:43 ----D---- C:\Windows\Temp
2013-04-09 16:54:41 ----D---- C:\Windows\system32\config
2013-04-09 16:06:27 ----D---- C:\Users\Matus\AppData\Roaming\TS3Client
2013-04-09 09:52:45 ----SHD---- C:\System Volume Information
2013-04-08 19:08:47 ----D---- C:\Program Files (x86)\QIP 2012
2013-04-08 18:22:52 ----D---- C:\Windows\System32
2013-04-08 18:22:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-08 18:22:51 ----D---- C:\Windows\inf
2013-04-08 18:17:59 ----A---- C:\ProgramData\HPWALog.txt
2013-04-08 18:17:58 ----HD---- C:\ProgramData
2013-04-08 18:17:53 ----D---- C:\Program Files (x86)\Steam
2013-04-08 18:17:36 ----D---- C:\Users\Matus\AppData\Roaming\Dropbox
2013-04-08 18:15:56 ----HD---- C:\Config.Msi
2013-04-08 18:15:56 ----D---- C:\Windows
2013-04-08 18:15:56 ----D---- C:\Users\Matus\AppData\Roaming\uTorrent
2013-04-08 18:15:56 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-08 09:53:43 ----SHD---- C:\Windows\Installer
2013-04-08 09:53:27 ----D---- C:\Program Files (x86)\LibreOffice 4.0
2013-04-08 09:53:26 ----RSD---- C:\Windows\assembly
2013-04-08 09:52:56 ----D---- C:\Windows\SysWOW64
2013-04-05 14:45:07 ----D---- C:\Windows\system32\wdi
2013-04-05 11:00:00 ----RD---- C:\Program Files
2013-04-04 22:29:55 ----D---- C:\Users\Matus\AppData\Roaming\AIMP3
2013-04-04 20:11:05 ----RD---- C:\Program Files (x86)
2013-04-02 21:29:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-02 21:04:28 ----D---- C:\Users\Matus\AppData\Roaming\DAEMON Tools Lite
2013-04-01 23:06:03 ----D---- C:\Users\Matus\AppData\Roaming\vlc
2013-03-28 11:36:02 ----D---- C:\Windows\system32\catroot
2013-03-28 11:35:58 ----D---- C:\Windows\system32\drivers
2013-03-26 00:01:06 ----D---- C:\Windows\system32\FxsTmp
2013-03-25 23:52:55 ----D---- C:\Windows\system32\DriverStore
2013-03-25 23:51:57 ----D---- C:\Windows\system32\drivers\UMDF
2013-03-25 16:24:13 ----D---- C:\Program Files\Rainmeter
2013-03-21 16:18:21 ----SD---- C:\ProgramData\Microsoft
2013-03-20 23:18:17 ----D---- C:\Windows\Tasks
2013-03-20 23:18:17 ----D---- C:\Windows\system32\Tasks
2013-03-20 23:17:30 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-03-19 13:30:07 ----D---- C:\Google Nexus 7 ToolKit
2013-03-15 22:43:01 ----D---- C:\Program Files (x86)\Common Files
2013-03-15 14:27:42 ----D---- C:\Windows\rescache
2013-03-15 14:10:23 ----D---- C:\Windows\Logs
2013-03-15 13:59:59 ----D---- C:\Windows\Prefetch
2013-03-15 13:16:43 ----D---- C:\Windows\winsxs
2013-03-15 13:16:06 ----D---- C:\Windows\Panther
2013-03-15 00:21:21 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 00:21:21 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 00:21:18 ----D---- C:\Windows\system32\migration
2013-03-15 00:21:18 ----D---- C:\Windows\system32\en-US
2013-03-15 00:21:18 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 00:21:16 ----D---- C:\Program Files\Internet Explorer
2013-03-15 00:21:15 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\it-IT
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\es-ES
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\el-GR
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\de-DE
2013-03-15 00:21:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 00:21:12 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-03-15 00:21:12 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-03-15 00:21:12 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-03-15 00:21:12 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-03-15 00:21:12 ----D---- C:\Windows\SYSWOW64\da-DK
2013-03-15 00:21:11 ----D---- C:\Windows\system32\pt-PT
2013-03-15 00:21:11 ----D---- C:\Windows\system32\pt-BR
2013-03-15 00:21:11 ----D---- C:\Windows\system32\it-IT
2013-03-15 00:21:10 ----D---- C:\Windows\system32\zh-TW
2013-03-15 00:21:10 ----D---- C:\Windows\system32\zh-HK
2013-03-15 00:21:10 ----D---- C:\Windows\system32\zh-CN
2013-03-15 00:21:10 ----D---- C:\Windows\system32\tr-TR
2013-03-15 00:21:10 ----D---- C:\Windows\system32\sv-SE
2013-03-15 00:21:10 ----D---- C:\Windows\system32\ru-RU
2013-03-15 00:21:10 ----D---- C:\Windows\system32\pl-PL
2013-03-15 00:21:10 ----D---- C:\Windows\system32\nl-NL
2013-03-15 00:21:10 ----D---- C:\Windows\system32\nb-NO
2013-03-15 00:21:10 ----D---- C:\Windows\system32\ko-KR
2013-03-15 00:21:10 ----D---- C:\Windows\system32\ja-JP
2013-03-15 00:21:10 ----D---- C:\Windows\system32\hu-HU
2013-03-15 00:21:10 ----D---- C:\Windows\system32\fr-FR
2013-03-15 00:21:10 ----D---- C:\Windows\system32\fi-FI
2013-03-15 00:21:10 ----D---- C:\Windows\system32\es-ES
2013-03-15 00:21:10 ----D---- C:\Windows\system32\el-GR
2013-03-15 00:21:10 ----D---- C:\Windows\system32\de-DE
2013-03-15 00:21:10 ----D---- C:\Windows\system32\da-DK
2013-03-15 00:21:10 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 00:17:03 ----D---- C:\Windows\system32\catroot2
2013-03-14 19:28:31 ----D---- C:\Windows\AppPatch
2013-03-13 23:10:33 ----D---- C:\Windows\debug
2013-03-13 23:10:31 ----A---- C:\Windows\system32\MRT.exe
2013-03-12 01:10:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-11 16:50:49 ----D---- C:\Users\Matus\AppData\Roaming\Media Player Classic
2013-03-10 18:47:34 ----D---- C:\ProgramData\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-03-28 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-03-28 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-03 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-03-28 100712]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\Windows\system32\drivers\AtiHdmi.sys [2009-06-28 116752]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-01 6036480]
R3 AVerAF15;HP DVB-T TV Tuner; C:\Windows\System32\Drivers\AVerAF15.sys [2009-05-22 311424]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2013-03-01 2978296]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2009-06-28 70656]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-07-20 140712]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-07-13 233472]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-03-23 505344]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUSB;Sony sa0102 ADB Interface; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys []
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-01 203264]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-03-28 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-28 86752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EgisTec Service;EgisTec Service; C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisService.exe [2011-04-19 704048]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-19 646704]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 EpsonCustomerResearchParticipation;EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [2012-10-29 616576]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2011-12-12 135824]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-03-03 75136]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [2010-03-23 247808]
R2 TVCapSvc;TV Background Capture Service (TVBCS); C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [2009-04-22 296320]
R2 TVSched;TV Task Scheduler (TVTS); C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [2009-04-22 116104]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-01 116648]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-01 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-04 115608]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-02 1255736]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#2 Příspěvek od Rudy »

V kterém souboru Av virus nalezl?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Re: Avira hlási vírus

#3 Příspěvek od psychoSVK »

Begin scan in 'C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hlds.exe'
C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hlds.exe
[DETECTION] Is the TR/Dropper.Gen Trojan

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#4 Příspěvek od Rudy »

Zkuste ty soubory otestovat online na www.virustotal.com . Nějak se mi to nezdá.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Re: Avira hlási vírus

#5 Příspěvek od psychoSVK »

Súbor otestovať neviem dať, Avira ho zmaže, no ten sa v nepravidelných intervaloch objavuje zas.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#6 Příspěvek od Rudy »

Steam je nějaký program na podporu her a ten soubor jr jeho součástí. Pokud ho odinstalujete, problém by měl zmizet. Viděl jsem tu dost logů s nainstalovaným Steamem a u žádného ten problém nebyl. Proto je mi to divné.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Re: Avira hlási vírus

#7 Příspěvek od psychoSVK »

Mal by to byť súbot na tvorbu serverov, ale doteraz sa to správalo normálne, až deň dva dozadu to začala avira označovať ako vírus.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#8 Příspěvek od Rudy »

Zkuste ho odinstalovat, smazat všechny zbytky, znovu stáhnout a nainstalovat.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Re: Avira hlási vírus

#9 Příspěvek od psychoSVK »

Po preinštalovaní Steamu už Avira nič nehlási.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#10 Příspěvek od Rudy »

Takže vše v pořádku?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

psychoSVK
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 08 čer 2007 17:47

Re: Avira hlási vírus

#11 Příspěvek od psychoSVK »

Áno, ďakujem

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119524
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avira hlási vírus

#12 Příspěvek od Rudy »

Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno