Prosím o zkontrolování logu

[mrkew2]

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Mrkew [Práva správce]
Mód : Kontrola -- Datum : 04/24/2013 15:43:54
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 7 ¤¤¤
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : EnableLUA (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000BEVT-22ZAT0 ATA Device +++++
--- User ---
[MBR] 1d832e77da9f9639a7bc993f25e33910
[BSP] b65fb8ea2e6ba4bc1ee055c693cd0721 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 476838 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_04242013_02d1543.txt >>
RKreport[1]_S_04242013_02d1543.txt

[Márty84]

Znovu spustte RogueKiller jako spravce (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

[mrkew2]

Tak provedeno

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Mrkew [Práva správce]
Mód : Odebrat -- Datum : 04/24/2013 16:26:15
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 5 ¤¤¤
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000BEVT-22ZAT0 ATA Device +++++
--- User ---
[MBR] 1d832e77da9f9639a7bc993f25e33910
[BSP] b65fb8ea2e6ba4bc1ee055c693cd0721 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 476838 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[3]_D_04242013_02d1626.txt >>
RKreport[1]_S_04242013_02d1543.txt ; RKreport[2]_S_04242013_02d1623.txt ; RKreport[3]_D_04242013_02d1626.txt




RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Mrkew [Práva správce]
Mód : Oprava HOSTS -- Datum : 04/24/2013 16:27:45
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[6]_H_04242013_02d1627.txt >>
RKreport[1]_S_04242013_02d1543.txt ; RKreport[2]_S_04242013_02d1623.txt ; RKreport[3]_D_04242013_02d1626.txt ; RKreport[4]_H_04242013_02d1627.txt ; RKreport[5]_H_04242013_02d1627.txt ;
RKreport[6]_H_04242013_02d1627.txt

[Márty84]

Dejte novy log z RSIT

[mrkew2]

Tak RSIT hotové,

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mrkew at 2013-04-25 15:58:19
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 70 GB (15%) free of 477 GB
Total RAM: 4092 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:58:24, on 25.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Trillian\trillian.exe
C:\Program Files\trend micro\Mrkew.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1871362649-4237718759-919936708-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1871362649-4237718759-919936708-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: ShareX.lnk = C:\Program Files\ShareX\ShareX.exe
O4 - Startup: Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 7153 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000005bc
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\ShareX\ShareX.exe" -silent
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Trillian\trillian.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Mrkew\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

=========Mozilla firefox=========

ProfilePath - C:\Users\Mrkew\AppData\Roaming\Mozilla\Firefox\Profiles\bvoep98d.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\ProgramData\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-24 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-24 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-09 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-09 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18642024]
"AdobeBridge"= []
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-04-19 1631144]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson Stylus SX420W(Síť)]
C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2013-02-07 224768]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-04-04 345312]

C:\Users\Mrkew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
ShareX.lnk - C:\Program Files\ShareX\ShareX.exe
Trillian.lnk - C:\Program Files (x86)\Trillian\trillian.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"VIDC.RTV1"=rtvcvfw64.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-24 21:21:06 ----D---- C:\Program Files\eclipse
2013-04-24 21:18:31 ----A---- C:\Windows\system32\javaws.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2013-04-24 21:18:24 ----A---- C:\Windows\system32\javaw.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\java.exe
2013-04-24 20:38:29 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwhnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwh.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdm.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdfl.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcmnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcm.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadserd.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadbus.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadadb.sys
2013-04-24 20:36:59 ----D---- C:\Program Files\SAMSUNG
2013-04-24 20:36:32 ----D---- C:\ProgramData\Samsung
2013-04-24 15:20:21 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-22 22:17:29 ----D---- C:\Users\Mrkew\AppData\Roaming\Malwarebytes
2013-04-22 22:17:13 ----D---- C:\ProgramData\Malwarebytes
2013-04-22 21:58:41 ----A---- C:\AdwCleaner[S1].txt
2013-04-22 21:54:01 ----A---- C:\AdwCleaner[R1].txt
2013-04-22 17:56:34 ----D---- C:\Program Files\trend micro
2013-04-22 17:56:33 ----D---- C:\rsit
2013-04-22 17:25:14 ----AD---- C:\war2
2013-04-20 22:37:59 ----D---- C:\Program Files (x86)\ATnotes
2013-04-17 21:42:27 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-04-17 21:42:22 ----D---- C:\Users\Mrkew\AppData\Roaming\DAEMON Tools Lite
2013-04-17 21:42:17 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-04-17 21:41:09 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-04-16 21:45:52 ----A---- C:\Windows\EAConfigInfo.txt
2013-04-16 21:45:28 ----A---- C:\Windows\IsUninst.exe
2013-04-14 20:52:19 ----D---- C:\ProgramData\Blizzard Entertainment
2013-04-14 20:43:09 ----D---- C:\ProgramData\Battle.net
2013-04-14 12:41:29 ----D---- C:\ProgramData\id Software
2013-04-14 02:04:34 ----D---- C:\Users\Mrkew\AppData\Roaming\TechSmith
2013-04-14 02:02:00 ----D---- C:\Program Files (x86)\QuickTime
2013-04-14 02:00:42 ----D---- C:\ProgramData\TechSmith
2013-04-14 02:00:42 ----D---- C:\Program Files (x86)\TechSmith
2013-04-13 18:57:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-12 18:30:51 ----D---- C:\Windows\Minidump
2013-04-11 18:52:14 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2013-04-11 18:51:54 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2013-04-11 18:51:52 ----DC---- C:\Windows\system32\DRVSTORE
2013-04-11 18:51:45 ----D---- C:\Program Files\Oracle
2013-04-11 16:44:34 ----D---- C:\Program Files (x86)\DOSBox-0.74
2013-04-10 23:44:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ie4uinit.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iernonce.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-04-10 23:44:00 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iesysprep.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iertutil.dll
2013-04-10 23:43:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-10 23:43:58 ----A---- C:\Windows\system32\urlmon.dll
2013-04-10 23:43:57 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-10 23:43:57 ----A---- C:\Windows\system32\jscript.dll
2013-04-10 23:43:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-10 23:43:56 ----A---- C:\Windows\system32\jscript9.dll
2013-04-10 23:43:55 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-10 23:43:55 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-10 23:43:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-10 23:43:54 ----A---- C:\Windows\system32\wininet.dll
2013-04-10 23:43:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-10 23:43:52 ----A---- C:\Windows\system32\ieframe.dll
2013-04-10 23:43:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-10 23:43:48 ----A---- C:\Windows\system32\mshtml.dll
2013-04-10 20:43:55 ----D---- C:\Program Files (x86)\IDroo
2013-04-10 17:01:01 ----A---- C:\Windows\system32\win32k.sys
2013-04-10 16:58:38 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-10 16:58:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-10 16:58:11 ----A---- C:\Windows\system32\smss.exe
2013-04-10 16:58:11 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-09 22:19:36 ----A---- C:\Windows\ODBC.INI
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\sscsdk32.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\ntwdblib.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mxintl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\msjet35.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmdl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlg30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwpg60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwmf60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftif60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftga60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpsd60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpng60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpcx60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpct60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmsp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmac60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lffax60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfeps60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfcmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfbmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crutl13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crsyb13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror813.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror713.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crgup13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crflt13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crdb213.dll
2013-04-09 22:17:57 ----A---- C:\Windows\SYSWOW64\crbas13.dll
2013-04-09 22:16:05 ----D---- C:\OrCAD
2013-04-06 19:58:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Ubisoft
2013-04-06 19:57:46 ----D---- C:\ProgramData\Solidshield
2013-04-06 19:51:33 ----A---- C:\Windows\system32\drivers\atksgt.sys
2013-04-06 19:51:32 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2013-04-04 22:02:49 ----D---- C:\Users\Mrkew\AppData\Roaming\Avira
2013-04-04 21:59:05 ----D---- C:\Program Files (x86)\Oldgames
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-04-04 21:58:27 ----D---- C:\ProgramData\Avira
2013-04-04 21:58:27 ----D---- C:\Program Files (x86)\Avira
2013-04-04 21:14:50 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.0
2013-04-04 21:13:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.02
2013-04-03 16:52:53 ----D---- C:\Users\Mrkew\AppData\Roaming\TeamViewer
2013-04-02 22:13:02 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-04-02 21:59:43 ----A---- C:\Windows\system32\aswBoot.exe
2013-04-02 21:58:01 ----D---- C:\Program Files\AVAST Software
2013-04-02 21:56:38 ----D---- C:\ProgramData\AVAST Software
2013-03-26 07:12:41 ----A---- C:\Windows\system32\drivers\usb8023.sys

======List of files/folders modified in the last 1 month======

2013-04-25 15:58:22 ----D---- C:\Windows\Temp
2013-04-25 15:57:53 ----D---- C:\Windows\system32\config
2013-04-25 15:56:54 ----D---- C:\Users\Mrkew\AppData\Roaming\Skype
2013-04-25 15:41:45 ----D---- C:\Users\Mrkew\AppData\Roaming\Dropbox
2013-04-25 15:41:10 ----RD---- C:\Dropbox
2013-04-25 15:40:45 ----D---- C:\Program Files (x86)\Steam
2013-04-25 15:39:53 ----D---- C:\Windows
2013-04-25 15:39:49 ----D---- C:\Windows\winsxs
2013-04-24 23:12:48 ----D---- C:\Windows\system32\drivers
2013-04-24 23:12:34 ----D---- C:\Program Files (x86)\Trillian
2013-04-24 21:51:25 ----D---- C:\Mrkew
2013-04-24 21:47:39 ----D---- C:\Users\Mrkew\AppData\Roaming\FileZilla
2013-04-24 21:21:06 ----RD---- C:\Program Files
2013-04-24 21:18:33 ----SHD---- C:\Windows\Installer
2013-04-24 21:18:31 ----D---- C:\Windows\System32
2013-04-24 21:18:15 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-04-24 21:18:15 ----A---- C:\Windows\system32\deployJava1.dll
2013-04-24 21:18:13 ----D---- C:\Program Files\Java
2013-04-24 21:17:23 ----SHD---- C:\System Volume Information
2013-04-24 20:39:09 ----D---- C:\Windows\system32\catroot
2013-04-24 20:39:08 ----D---- C:\Windows\system32\DriverStore
2013-04-24 20:39:08 ----D---- C:\Windows\inf
2013-04-24 20:38:14 ----D---- C:\Windows\system32\catroot2
2013-04-24 20:36:32 ----HD---- C:\ProgramData
2013-04-24 20:08:27 ----D---- C:\Users\Mrkew\AppData\Roaming\.minecraft
2013-04-24 18:48:11 ----D---- C:\Users\Mrkew\AppData\Roaming\vlc
2013-04-24 15:39:04 ----RD---- C:\Program Files (x86)
2013-04-23 20:07:57 ----D---- C:\Games
2013-04-23 19:53:53 ----D---- C:\Users\Mrkew\AppData\Roaming\Audacity
2013-04-21 09:55:08 ----D---- C:\Users\Mrkew\AppData\Roaming\Adobe
2013-04-21 00:26:46 ----RSD---- C:\Windows\Fonts
2013-04-20 22:33:50 ----SD---- C:\Users\Mrkew\AppData\Roaming\Microsoft
2013-04-20 15:27:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-17 21:51:31 ----D---- C:\Users\Mrkew\AppData\Roaming\uTorrent
2013-04-15 22:55:17 ----D---- C:\Users\Mrkew\AppData\Roaming\gtk-2.0
2013-04-14 20:52:25 ----D---- C:\Program Files (x86)\Common Files
2013-04-14 20:00:08 ----D---- C:\Windows\Prefetch
2013-04-14 15:11:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-14 02:01:59 ----D---- C:\Windows\SysWOW64
2013-04-14 02:01:38 ----D---- C:\Users\Mrkew\AppData\Roaming\Tunngle
2013-04-14 02:01:38 ----D---- C:\ProgramData\Tunngle
2013-04-13 16:44:25 ----SD---- C:\ProgramData\Microsoft
2013-04-13 12:10:16 ----D---- C:\Users\Mrkew\AppData\Roaming\Sublime Text 2
2013-04-11 16:06:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-11 16:06:41 ----D---- C:\Program Files\Internet Explorer
2013-04-10 23:45:18 ----A---- C:\Windows\system32\MRT.exe
2013-04-10 20:37:27 ----D---- C:\ProgramData\Skype
2013-04-10 20:37:21 ----RD---- C:\Program Files (x86)\Skype
2013-04-10 00:07:08 ----D---- C:\Bordel
2013-04-09 22:17:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-07 11:41:47 ----D---- C:\Program Files\ShareX
2013-04-06 19:50:38 ----RSD---- C:\Windows\assembly
2013-04-05 17:15:04 ----D---- C:\Program Files\Sublime Text 2
2013-04-04 19:46:11 ----D---- C:\Program Files (x86)\Opera
2013-04-02 22:13:09 ----D---- C:\Windows\system32\Tasks
2013-04-02 22:09:10 ----D---- C:\ProgramData\Adobe
2013-04-02 21:31:04 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-04-04 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-04-04 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-04-17 283200]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2013-02-16 30112]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-03-15 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-03-15 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-04-06 314016]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-04-04 100712]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-04-06 43680]
R3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM); C:\Windows\system32\DRIVERS\vrtaucbl.sys [2013-03-02 66728]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-02-25 2426672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-18 189288]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-08-12 350952]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2013-03-15 146704]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-05-25 36328]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2010-05-25 125416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2010-05-25 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2010-05-25 159208]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2010-05-25 126952]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-03-15 131856]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [2012-11-13 14544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-04-04 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-04-04 86752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-10 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-04-19 543656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-13 115608]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S4 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Márty84]

Vypnete antivir
Najdete tento soubor C:\Program Files\trend micro\Mrkew.exe , kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Kliknete na Main menu a na Do a system scan only
U techto radku dejte vlevo zatrzitko

Kód: Vybrat vše

O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1871362649-4237718759-919936708-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1871362649-4237718759-919936708-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe

Kliknete na nápis Fix checked a potvrdte



Vypnete antivir
Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]

:services
SkypeUpdate
SwitchBoard

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] /64

Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)

[mrkew2]

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57616 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mrkew
->Temp folder emptied: 46744364 bytes
->Temporary Internet Files folder emptied: 1232178 bytes
->Java cache emptied: 30445115 bytes
->FireFox cache emptied: 7780890 bytes
->Opera cache emptied: 55613309 bytes
->Flash cache emptied: 59367 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 1785840 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3844896 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50635 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 141,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Mrkew
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== SERVICES/DRIVERS ==========
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service SwitchBoard stopped successfully!
Service SwitchBoard deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 04252013_183914

Files moved on Reboot...
C:\Users\Mrkew\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Mrkew\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...

[Márty84]

Zapomnel jsem, ze tam mame OTLko

Vypnete antivir
Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:otl
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1871362649-4237718759-919936708-1002\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1871362649-4237718759-919936708-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[7 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[11 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[33 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

[mrkew2]

Omylem jsem ten test udělal se zapnutým AV takže jsem test musel udělat na 2x. Poslal jsem oba logy z toho.

#1 LOG

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mrkew
->Temp folder emptied: 1912696 bytes
->Temporary Internet Files folder emptied: 1015083 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 3705536 bytes
->Opera cache emptied: 66458896 bytes
->Flash cache emptied: 926 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 70,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Mrkew
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
Error: Unble to create default HOSTS file!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-1871362649-4237718759-919936708-1002\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1871362649-4237718759-919936708-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP261C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP42B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP562A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9459.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP95A1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC4DA.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1940.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP222.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3EF3.tmp\Microsoft.PowerShell.Editor.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3EF3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5E0D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP7F8B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP8DA5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE008.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFDC2.tmp folder deleted successfully.
C:\Windows\Installer\MSI658D.tmp- folder deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 04252013_193617

Files\Folders moved on Reboot...
C:\Users\Mrkew\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Mrkew\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...


#2 LOG

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mrkew
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 258 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 5195134 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 5,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Mrkew
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-1871362649-4237718759-919936708-1002\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1871362649-4237718759-919936708-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File/Folder C:\Windows\*.tmp not found.
File/Folder C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp not found.
File/Folder C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp not found.
File/Folder C:\Windows\Installer\*.tmp not found.
File/Folder C:\Windows\Temp\*.tmp not found.

OTL by OldTimer - Version 3.2.69.0 log created on 04252013_194104

Files\Folders moved on Reboot...
C:\Users\Mrkew\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Mrkew\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[Márty84]

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak dejte novy log z RSIT a napiste, jak je na tom pc.

[mrkew2]

Tak všechny program jsem spustil a udělal, ale ještě se dělá defragmentace, ale už dám log.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mrkew at 2013-04-26 07:41:26
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 193 GB (41%) free of 477 GB
Total RAM: 4092 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:41:32, on 26.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\trend micro\Mrkew.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - Startup: Dropbox.lnk = C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: ShareX.lnk = C:\Program Files\ShareX\ShareX.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 5162 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000634
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"taskhost.exe"
"C:\Windows\system32\taskmgr.exe" /4
"C:\Program Files\Defraggler\Defraggler64.exe"
"C:\Users\Mrkew\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
wmiadap.exe /R /T
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Mrkew\AppData\Roaming\Mozilla\Firefox\Profiles\bvoep98d.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\ProgramData\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-24 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-24 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-04-19 1631144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson Stylus SX420W(Síť)]
C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2013-02-07 224768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-04-04 345312]

C:\Users\Mrkew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
ShareX.lnk - C:\Program Files\ShareX\ShareX.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-26 07:41:26 ----D---- C:\rsit
2013-04-25 21:38:32 ----D---- C:\Program Files\Defraggler
2013-04-25 16:04:13 ----D---- C:\Program Files\CCleaner
2013-04-24 21:21:06 ----D---- C:\Program Files\eclipse
2013-04-24 21:18:31 ----A---- C:\Windows\system32\javaws.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2013-04-24 21:18:24 ----A---- C:\Windows\system32\javaw.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\java.exe
2013-04-24 20:38:29 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwhnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwh.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdm.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdfl.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcmnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcm.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadserd.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadbus.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadadb.sys
2013-04-24 20:36:59 ----D---- C:\Program Files\SAMSUNG
2013-04-24 20:36:32 ----D---- C:\ProgramData\Samsung
2013-04-24 15:20:21 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-22 22:17:29 ----D---- C:\Users\Mrkew\AppData\Roaming\Malwarebytes
2013-04-22 22:17:13 ----D---- C:\ProgramData\Malwarebytes
2013-04-22 17:56:34 ----D---- C:\Program Files\trend micro
2013-04-22 17:25:14 ----AD---- C:\war2
2013-04-20 22:37:59 ----D---- C:\Program Files (x86)\ATnotes
2013-04-17 21:42:27 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-04-17 21:42:22 ----D---- C:\Users\Mrkew\AppData\Roaming\DAEMON Tools Lite
2013-04-17 21:42:17 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-04-17 21:41:09 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-04-16 21:45:52 ----A---- C:\Windows\EAConfigInfo.txt
2013-04-16 21:45:28 ----A---- C:\Windows\IsUninst.exe
2013-04-14 20:52:19 ----D---- C:\ProgramData\Blizzard Entertainment
2013-04-14 20:43:09 ----D---- C:\ProgramData\Battle.net
2013-04-14 12:41:29 ----D---- C:\ProgramData\id Software
2013-04-14 02:04:34 ----D---- C:\Users\Mrkew\AppData\Roaming\TechSmith
2013-04-14 02:02:00 ----D---- C:\Program Files (x86)\QuickTime
2013-04-14 02:00:42 ----D---- C:\ProgramData\TechSmith
2013-04-14 02:00:42 ----D---- C:\Program Files (x86)\TechSmith
2013-04-13 18:57:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-12 18:30:51 ----D---- C:\Windows\Minidump
2013-04-11 18:52:14 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2013-04-11 18:51:54 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2013-04-11 18:51:52 ----DC---- C:\Windows\system32\DRVSTORE
2013-04-11 18:51:45 ----D---- C:\Program Files\Oracle
2013-04-11 16:44:34 ----D---- C:\Program Files (x86)\DOSBox-0.74
2013-04-10 23:44:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ie4uinit.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iernonce.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-04-10 23:44:00 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iesysprep.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iertutil.dll
2013-04-10 23:43:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-10 23:43:58 ----A---- C:\Windows\system32\urlmon.dll
2013-04-10 23:43:57 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-10 23:43:57 ----A---- C:\Windows\system32\jscript.dll
2013-04-10 23:43:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-10 23:43:56 ----A---- C:\Windows\system32\jscript9.dll
2013-04-10 23:43:55 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-10 23:43:55 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-10 23:43:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-10 23:43:54 ----A---- C:\Windows\system32\wininet.dll
2013-04-10 23:43:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-10 23:43:52 ----A---- C:\Windows\system32\ieframe.dll
2013-04-10 23:43:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-10 23:43:48 ----A---- C:\Windows\system32\mshtml.dll
2013-04-10 20:43:55 ----D---- C:\Program Files (x86)\IDroo
2013-04-10 17:01:01 ----A---- C:\Windows\system32\win32k.sys
2013-04-10 16:58:38 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-10 16:58:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-10 16:58:11 ----A---- C:\Windows\system32\smss.exe
2013-04-10 16:58:11 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-09 22:19:36 ----A---- C:\Windows\ODBC.INI
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\sscsdk32.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\ntwdblib.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mxintl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\msjet35.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmdl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlg30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwpg60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwmf60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftif60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftga60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpsd60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpng60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpcx60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpct60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmsp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmac60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lffax60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfeps60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfcmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfbmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crutl13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crsyb13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror813.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror713.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crgup13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crflt13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crdb213.dll
2013-04-09 22:17:57 ----A---- C:\Windows\SYSWOW64\crbas13.dll
2013-04-09 22:16:05 ----D---- C:\OrCAD
2013-04-06 19:58:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Ubisoft
2013-04-06 19:57:46 ----D---- C:\ProgramData\Solidshield
2013-04-06 19:51:33 ----A---- C:\Windows\system32\drivers\atksgt.sys
2013-04-06 19:51:32 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2013-04-04 22:02:49 ----D---- C:\Users\Mrkew\AppData\Roaming\Avira
2013-04-04 21:59:05 ----D---- C:\Program Files (x86)\Oldgames
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-04-04 21:58:27 ----D---- C:\ProgramData\Avira
2013-04-04 21:58:27 ----D---- C:\Program Files (x86)\Avira
2013-04-04 21:14:50 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.0
2013-04-04 21:13:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.02
2013-04-03 16:52:53 ----D---- C:\Users\Mrkew\AppData\Roaming\TeamViewer
2013-04-02 22:13:02 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-04-02 21:59:43 ----A---- C:\Windows\system32\aswBoot.exe
2013-04-02 21:58:01 ----D---- C:\Program Files\AVAST Software
2013-04-02 21:56:38 ----D---- C:\ProgramData\AVAST Software

======List of files/folders modified in the last 1 month======

2013-04-26 07:41:32 ----D---- C:\Windows\Prefetch
2013-04-26 00:41:43 ----D---- C:\Users\Mrkew\AppData\Roaming\Skype
2013-04-25 23:14:01 ----D---- C:\Program Files (x86)\Steam
2013-04-25 22:57:44 ----D---- C:\Windows\Temp
2013-04-25 22:57:27 ----D---- C:\Windows
2013-04-25 22:57:15 ----SHD---- C:\System Volume Information
2013-04-25 22:56:41 ----SHD---- C:\Windows\Installer
2013-04-25 22:56:41 ----D---- C:\Windows\Logs
2013-04-25 22:35:55 ----D---- C:\Windows\inf
2013-04-25 22:10:43 ----D---- C:\Users\Mrkew\AppData\Roaming\Audacity
2013-04-25 21:55:49 ----D---- C:\Users\Mrkew\AppData\Roaming\vlc
2013-04-25 21:48:48 ----D---- C:\Windows\system32\config
2013-04-25 21:38:32 ----RD---- C:\Program Files
2013-04-25 21:35:23 ----D---- C:\Users\Mrkew\AppData\Roaming\Dropbox
2013-04-25 21:35:19 ----RD---- C:\Dropbox
2013-04-25 19:41:14 ----D---- C:\Windows\system32\drivers\etc
2013-04-25 18:39:50 ----D---- C:\Windows\System32
2013-04-25 16:27:06 ----RD---- C:\Program Files (x86)
2013-04-25 16:24:31 ----D---- C:\Windows\SysWOW64
2013-04-25 16:23:45 ----D---- C:\Program Files (x86)\Common Files
2013-04-25 16:17:55 ----D---- C:\Windows\system32\Tasks
2013-04-25 16:12:32 ----D---- C:\Windows\Panther
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\uTorrent
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\inkscape
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\FileZilla
2013-04-25 16:12:31 ----D---- C:\Windows\debug
2013-04-25 15:39:49 ----D---- C:\Windows\winsxs
2013-04-24 23:12:48 ----D---- C:\Windows\system32\drivers
2013-04-24 23:12:34 ----D---- C:\Program Files (x86)\Trillian
2013-04-24 21:51:25 ----D---- C:\Mrkew
2013-04-24 21:18:15 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-04-24 21:18:15 ----A---- C:\Windows\system32\deployJava1.dll
2013-04-24 21:18:13 ----D---- C:\Program Files\Java
2013-04-24 20:39:09 ----D---- C:\Windows\system32\catroot
2013-04-24 20:39:08 ----D---- C:\Windows\system32\DriverStore
2013-04-24 20:38:14 ----D---- C:\Windows\system32\catroot2
2013-04-24 20:36:32 ----HD---- C:\ProgramData
2013-04-24 20:11:53 ----D---- C:\Users\Mrkew\AppData\Roaming\.minecraft
2013-04-23 20:07:57 ----D---- C:\Games
2013-04-21 09:55:08 ----D---- C:\Users\Mrkew\AppData\Roaming\Adobe
2013-04-21 00:26:46 ----RSD---- C:\Windows\Fonts
2013-04-20 22:33:50 ----SD---- C:\Users\Mrkew\AppData\Roaming\Microsoft
2013-04-20 15:27:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-15 22:55:17 ----D---- C:\Users\Mrkew\AppData\Roaming\gtk-2.0
2013-04-14 15:11:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-14 02:01:38 ----D---- C:\Users\Mrkew\AppData\Roaming\Tunngle
2013-04-14 02:01:38 ----D---- C:\ProgramData\Tunngle
2013-04-13 16:44:25 ----SD---- C:\ProgramData\Microsoft
2013-04-13 12:10:16 ----D---- C:\Users\Mrkew\AppData\Roaming\Sublime Text 2
2013-04-11 16:06:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-11 16:06:41 ----D---- C:\Program Files\Internet Explorer
2013-04-10 23:45:18 ----A---- C:\Windows\system32\MRT.exe
2013-04-10 20:37:27 ----D---- C:\ProgramData\Skype
2013-04-10 20:37:21 ----RD---- C:\Program Files (x86)\Skype
2013-04-10 00:07:08 ----D---- C:\Bordel
2013-04-09 22:17:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-07 11:41:47 ----D---- C:\Program Files\ShareX
2013-04-06 19:50:38 ----RSD---- C:\Windows\assembly
2013-04-05 17:15:04 ----D---- C:\Program Files\Sublime Text 2
2013-04-04 19:46:11 ----D---- C:\Program Files (x86)\Opera
2013-04-02 22:09:10 ----D---- C:\ProgramData\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-04-04 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-04-04 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-04-17 283200]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2013-02-16 30112]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-03-15 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-03-15 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-04-06 314016]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-04-04 100712]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-04-06 43680]
R3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM); C:\Windows\system32\DRIVERS\vrtaucbl.sys [2013-03-02 66728]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-02-25 2426672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-18 189288]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-08-12 350952]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2013-03-15 146704]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-05-25 36328]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2010-05-25 125416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2010-05-25 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2010-05-25 159208]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2010-05-25 126952]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-03-15 131856]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-04-04 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-04-04 86752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-10 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-13 115608]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-04-19 543656]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S4 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Márty84]

1) Otevrte Poznamkovy blok (pokud ho nemate na plose, tak kliknete na Start, pak programy a prislusenstvi)
2) Zkopirujte do nej ten zeleny text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]

3) Vlevo nahore kliknete na napis Soubor
4) Kliknete na napis Ulozit jako...
5) Napiste spravne ten cerveny nazev oprava.reg a pak vyberte u moznosti Ulozit jako typ : Vsechny soubory
6) Ulozte, nejlepe na plochu
7) Vypnete antivir, at do toho nekeca
8) Na to, co jste prave ulozil/a, 2x kliknete, ono se to spusti a vy to jen potvrdte
9) Pak ten soubor muzete smazat
10) Restartujte pc

...a napiste, jak je na tom pc.

[mrkew2]

Takže, počítač se o dost zrychlil. Děkuji za veškerou pomoc. Ještě pro jistotu pošlu závěrečný LOG.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mrkew at 2013-04-26 21:23:37
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 195 GB (41%) free of 477 GB
Total RAM: 4092 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:23:51, on 26.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\trend micro\Mrkew.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - Startup: Dropbox.lnk = C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: ShareX.lnk = C:\Program Files\ShareX\ShareX.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 5259 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000005e4
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\ShareX\ShareX.exe" -silent
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\taskmgr.exe" /1
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Mrkew\Desktop\RSITx64.exe"
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

=========Mozilla firefox=========

ProfilePath - C:\Users\Mrkew\AppData\Roaming\Mozilla\Firefox\Profiles\bvoep98d.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\ProgramData\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.168 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-24 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-24 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-04-19 1631144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson Stylus SX420W(Síť)]
C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2013-02-07 224768]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-04-04 345312]

C:\Users\Mrkew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe
ShareX.lnk - C:\Program Files\ShareX\ShareX.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-26 07:41:26 ----D---- C:\rsit
2013-04-25 21:38:32 ----D---- C:\Program Files\Defraggler
2013-04-25 16:04:13 ----D---- C:\Program Files\CCleaner
2013-04-24 21:21:06 ----D---- C:\Program Files\eclipse
2013-04-24 21:18:31 ----A---- C:\Windows\system32\javaws.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2013-04-24 21:18:24 ----A---- C:\Windows\system32\javaw.exe
2013-04-24 21:18:24 ----A---- C:\Windows\system32\java.exe
2013-04-24 20:38:29 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwhnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadwh.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdm.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadmdfl.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcmnt.sys
2013-04-24 20:38:29 ----A---- C:\Windows\system32\drivers\ssadcm.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadserd.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadbus.sys
2013-04-24 20:38:28 ----A---- C:\Windows\system32\drivers\ssadadb.sys
2013-04-24 20:36:59 ----D---- C:\Program Files\SAMSUNG
2013-04-24 20:36:32 ----D---- C:\ProgramData\Samsung
2013-04-24 15:20:21 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-22 22:17:29 ----D---- C:\Users\Mrkew\AppData\Roaming\Malwarebytes
2013-04-22 22:17:13 ----D---- C:\ProgramData\Malwarebytes
2013-04-22 17:56:34 ----D---- C:\Program Files\trend micro
2013-04-22 17:25:14 ----AD---- C:\war2
2013-04-20 22:37:59 ----D---- C:\Program Files (x86)\ATnotes
2013-04-17 21:42:27 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-04-17 21:42:22 ----D---- C:\Users\Mrkew\AppData\Roaming\DAEMON Tools Lite
2013-04-17 21:42:17 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-04-17 21:41:09 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-04-16 21:45:52 ----A---- C:\Windows\EAConfigInfo.txt
2013-04-16 21:45:28 ----A---- C:\Windows\IsUninst.exe
2013-04-14 20:52:19 ----D---- C:\ProgramData\Blizzard Entertainment
2013-04-14 20:43:09 ----D---- C:\ProgramData\Battle.net
2013-04-14 12:41:29 ----D---- C:\ProgramData\id Software
2013-04-14 02:04:34 ----D---- C:\Users\Mrkew\AppData\Roaming\TechSmith
2013-04-14 02:02:00 ----D---- C:\Program Files (x86)\QuickTime
2013-04-14 02:00:42 ----D---- C:\ProgramData\TechSmith
2013-04-14 02:00:42 ----D---- C:\Program Files (x86)\TechSmith
2013-04-13 18:57:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-12 18:30:51 ----D---- C:\Windows\Minidump
2013-04-11 18:52:14 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2013-04-11 18:51:54 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2013-04-11 18:51:52 ----DC---- C:\Windows\system32\DRVSTORE
2013-04-11 18:51:45 ----D---- C:\Program Files\Oracle
2013-04-11 16:44:34 ----D---- C:\Program Files (x86)\DOSBox-0.74
2013-04-10 23:44:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ieui.dll
2013-04-10 23:44:02 ----A---- C:\Windows\system32\ie4uinit.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iesetup.dll
2013-04-10 23:44:01 ----A---- C:\Windows\system32\iernonce.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-04-10 23:44:00 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iesysprep.dll
2013-04-10 23:44:00 ----A---- C:\Windows\system32\iertutil.dll
2013-04-10 23:43:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-10 23:43:58 ----A---- C:\Windows\system32\urlmon.dll
2013-04-10 23:43:57 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-10 23:43:57 ----A---- C:\Windows\system32\jscript.dll
2013-04-10 23:43:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-10 23:43:56 ----A---- C:\Windows\system32\jscript9.dll
2013-04-10 23:43:55 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-10 23:43:55 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-10 23:43:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-10 23:43:54 ----A---- C:\Windows\system32\wininet.dll
2013-04-10 23:43:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-10 23:43:52 ----A---- C:\Windows\system32\ieframe.dll
2013-04-10 23:43:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-10 23:43:48 ----A---- C:\Windows\system32\mshtml.dll
2013-04-10 20:43:55 ----D---- C:\Program Files (x86)\IDroo
2013-04-10 17:01:01 ----A---- C:\Windows\system32\win32k.sys
2013-04-10 16:58:38 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-10 16:58:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-10 16:58:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-10 16:58:11 ----A---- C:\Windows\system32\smss.exe
2013-04-10 16:58:11 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-09 22:19:36 ----A---- C:\Windows\ODBC.INI
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\sscsdk32.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\ntwdblib.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mxintl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\msjet35.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\mitmdl30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlin30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\midlg30.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwpg60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfwmf60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftif60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lftga60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpsd60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpng60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpcx60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfpct60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmsp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfmac60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lffax60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfeps60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfcmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\lfbmp60n.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crutl13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crsyb13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror813.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\cror713.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crgup13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crflt13.dll
2013-04-09 22:17:58 ----A---- C:\Windows\SYSWOW64\crdb213.dll
2013-04-09 22:17:57 ----A---- C:\Windows\SYSWOW64\crbas13.dll
2013-04-09 22:16:05 ----D---- C:\OrCAD
2013-04-06 19:58:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Ubisoft
2013-04-06 19:57:46 ----D---- C:\ProgramData\Solidshield
2013-04-06 19:51:33 ----A---- C:\Windows\system32\drivers\atksgt.sys
2013-04-06 19:51:32 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2013-04-04 22:02:49 ----D---- C:\Users\Mrkew\AppData\Roaming\Avira
2013-04-04 21:59:05 ----D---- C:\Program Files (x86)\Oldgames
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-04-04 21:58:28 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-04-04 21:58:27 ----D---- C:\ProgramData\Avira
2013-04-04 21:58:27 ----D---- C:\Program Files (x86)\Avira
2013-04-04 21:14:50 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.0
2013-04-04 21:13:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Warsow 1.02
2013-04-03 16:52:53 ----D---- C:\Users\Mrkew\AppData\Roaming\TeamViewer
2013-04-02 22:13:02 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-04-02 21:59:43 ----A---- C:\Windows\system32\aswBoot.exe
2013-04-02 21:58:01 ----D---- C:\Program Files\AVAST Software
2013-04-02 21:56:38 ----D---- C:\ProgramData\AVAST Software

======List of files/folders modified in the last 1 month======

2013-04-26 21:23:43 ----D---- C:\Windows\Temp
2013-04-26 21:22:05 ----D---- C:\Users\Mrkew\AppData\Roaming\Dropbox
2013-04-26 21:21:46 ----RD---- C:\Dropbox
2013-04-26 21:20:58 ----D---- C:\Program Files (x86)\Steam
2013-04-26 21:18:12 ----D---- C:\Windows\system32\config
2013-04-26 21:17:02 ----D---- C:\Windows\Prefetch
2013-04-26 21:16:21 ----D---- C:\Users\Mrkew\AppData\Roaming\Skype
2013-04-26 17:45:55 ----D---- C:\Users\Mrkew\AppData\Roaming\.minecraft
2013-04-26 17:14:53 ----D---- C:\Users\Mrkew\AppData\Roaming\Audacity
2013-04-26 17:01:34 ----D---- C:\Users\Mrkew\AppData\Roaming\vlc
2013-04-26 15:58:16 ----D---- C:\Mrkew2
2013-04-26 15:18:56 ----D---- C:\Games
2013-04-26 15:16:13 ----D---- C:\Windows
2013-04-26 04:27:30 ----SHD---- C:\System Volume Information
2013-04-25 22:56:41 ----SHD---- C:\Windows\Installer
2013-04-25 22:56:41 ----D---- C:\Windows\Logs
2013-04-25 22:35:55 ----D---- C:\Windows\inf
2013-04-25 21:38:32 ----RD---- C:\Program Files
2013-04-25 19:41:14 ----D---- C:\Windows\system32\drivers\etc
2013-04-25 18:39:50 ----D---- C:\Windows\System32
2013-04-25 16:27:06 ----RD---- C:\Program Files (x86)
2013-04-25 16:24:31 ----D---- C:\Windows\SysWOW64
2013-04-25 16:23:45 ----D---- C:\Program Files (x86)\Common Files
2013-04-25 16:17:55 ----D---- C:\Windows\system32\Tasks
2013-04-25 16:12:32 ----D---- C:\Windows\Panther
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\uTorrent
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\inkscape
2013-04-25 16:12:32 ----D---- C:\Users\Mrkew\AppData\Roaming\FileZilla
2013-04-25 16:12:31 ----D---- C:\Windows\debug
2013-04-25 15:39:49 ----D---- C:\Windows\winsxs
2013-04-24 23:12:48 ----D---- C:\Windows\system32\drivers
2013-04-24 23:12:34 ----D---- C:\Program Files (x86)\Trillian
2013-04-24 21:51:25 ----D---- C:\Mrkew
2013-04-24 21:18:15 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-04-24 21:18:15 ----A---- C:\Windows\system32\deployJava1.dll
2013-04-24 21:18:13 ----D---- C:\Program Files\Java
2013-04-24 20:39:09 ----D---- C:\Windows\system32\catroot
2013-04-24 20:39:08 ----D---- C:\Windows\system32\DriverStore
2013-04-24 20:38:14 ----D---- C:\Windows\system32\catroot2
2013-04-24 20:36:32 ----HD---- C:\ProgramData
2013-04-21 09:55:08 ----D---- C:\Users\Mrkew\AppData\Roaming\Adobe
2013-04-21 00:26:46 ----RSD---- C:\Windows\Fonts
2013-04-20 22:33:50 ----SD---- C:\Users\Mrkew\AppData\Roaming\Microsoft
2013-04-20 15:27:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-15 22:55:17 ----D---- C:\Users\Mrkew\AppData\Roaming\gtk-2.0
2013-04-14 15:11:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-14 02:01:38 ----D---- C:\Users\Mrkew\AppData\Roaming\Tunngle
2013-04-14 02:01:38 ----D---- C:\ProgramData\Tunngle
2013-04-13 16:44:25 ----SD---- C:\ProgramData\Microsoft
2013-04-13 12:10:16 ----D---- C:\Users\Mrkew\AppData\Roaming\Sublime Text 2
2013-04-11 16:06:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-11 16:06:41 ----D---- C:\Program Files\Internet Explorer
2013-04-10 23:45:18 ----A---- C:\Windows\system32\MRT.exe
2013-04-10 20:37:27 ----D---- C:\ProgramData\Skype
2013-04-10 20:37:21 ----RD---- C:\Program Files (x86)\Skype
2013-04-10 00:07:08 ----D---- C:\Bordel
2013-04-09 22:17:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-07 11:41:47 ----D---- C:\Program Files\ShareX
2013-04-06 19:50:38 ----RSD---- C:\Windows\assembly
2013-04-05 17:15:04 ----D---- C:\Program Files\Sublime Text 2
2013-04-04 19:46:11 ----D---- C:\Program Files (x86)\Opera
2013-04-02 22:09:10 ----D---- C:\ProgramData\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-04-04 130016]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-04-04 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-04-17 283200]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2013-02-16 30112]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-03-15 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-03-15 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-04-06 314016]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-04-04 100712]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-04-06 43680]
R3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM); C:\Windows\system32\DRIVERS\vrtaucbl.sys [2013-03-02 66728]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-02-25 2426672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-18 189288]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-08-12 350952]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2013-03-15 146704]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-05-25 36328]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2010-05-25 125416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2010-05-25 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2010-05-25 159208]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2010-05-25 126952]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-03-15 131856]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-04-04 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-04-04 86752]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-10 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-04-19 543656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-13 115608]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S4 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Márty84]

Log vypada cisty. Je tedy pc v norme a muzeme to uzavrit?

[mrkew2]

Ano, je v normě. Ještě jednou děkuji za veškerou pomoc. Nyní už můžeme téma uzamknout na vždy