Prosím o preventívnu kontrolu

Zpráva

jakoncek · #1 Příspěvek od **jakoncek** » 08 čer 2013 08:10

Dobry den

Prosil by som o preventivnu kontrolu logu .
PC mi ide vcelku v poriadku , len sa mi zda ze vyuzitie procesora dost casto
beha hore-dole ( z 20 na 90 percent ) pri necinnosti PC .

Dakujem - zasielam log z RSIT :

Logfile of random's system information tool 1.09 (written by random/random)
Run by My at 2013-06-08 08:56:53
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 55 GB (57%) free of 97 GB
Total RAM: 3581 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:57:06, on 8. 6. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\vsnp325.exe
C:\Program Files (x86)\POP Peeper\POPPeeper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\trend micro\My.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENWW/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.co.uk/0SEENWW/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.azet.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENWW/SAOS01?FORM=TOOLBR
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {FE69C007-C452-4d3e-86D2-1730DF8BC871} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
R3 - URLSearchHook: (no name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files (x86)\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 3CXPhone.lnk = C:\Program Files (x86)\3CXPhone\3CXPhone.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: ÔÚFoxmailÖĐĚíĽÓ¸ĂRSSĆµµŔ/ĆµµŔ×é - res://C:\Windows\system32\rsslink.dll/201
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9808 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x2c8
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"C:\Windows\vsnp325.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\POP Peeper\POPPeeper.exe" -min
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"D:\Plocha\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2142315196-1060382765-2288153273-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2142315196-1060382765-2288153273-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2142315196-1060382765-2288153273-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2142315196-1060382765-2288153273-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\My\AppData\Roaming\Mozilla\Firefox\Profiles\83m0avj5.default

"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\Web Assistant\Firefox

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
ffxtlbr@babylon.com
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml

C:\Users\My\AppData\Roaming\Mozilla\Firefox\Profiles\83m0avj5.default\searchplugins\
babylon.xml
claro.xml
conduit.xml
delta.xml
MyStart Search.xml
Search.xml
softonic.xml
sweetim.xml
yahoo-zugo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-02-17 205376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2013-03-19 2328760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-03-19 1724600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"snp325"=C:\Windows\vsnp325.exe [2006-10-10 827392]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-06-06 4090824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"POP Peeper"=C:\Program Files (x86)\POP Peeper\POPPeeper.exe [2011-11-16 1613824]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-09-02 13351304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp325]
C:\Windows\vsnp325.exe [2006-10-10 827392]

C:\Users\My\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
3CXPhone.lnk - C:\Program Files (x86)\3CXPhone\3CXPhone.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll [2010-03-24 633200]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"VIDC.FFDS"=ff_vfw.dll
"midi1"=VirtualMIDISynth\VirtualMIDISynth.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-08 08:56:54 ----D---- C:\Program Files\trend micro
2013-06-08 08:56:53 ----D---- C:\rsit
2013-06-07 23:15:37 ----A---- C:\Windows\SYSWOW64\mediarcpt.dll
2013-06-07 23:15:21 ----D---- C:\Program Files (x86)\Recepty doma
2013-06-07 22:14:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-07 22:14:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-07 22:14:45 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-06-07 22:14:44 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-06-07 22:14:44 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-06-07 22:14:40 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-06-07 22:14:40 ----A---- C:\Windows\system32\wksprtPS.dll
2013-06-07 22:14:40 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-06-07 22:14:40 ----A---- C:\Windows\system32\tsgqec.dll
2013-06-07 22:14:39 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-06-07 22:14:39 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-06-07 22:14:39 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-06-07 22:14:39 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-07 22:14:39 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-06-07 22:14:39 ----A---- C:\Windows\system32\wksprt.exe
2013-06-07 22:14:39 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-06-07 22:14:39 ----A---- C:\Windows\system32\rdpudd.dll
2013-06-07 22:14:39 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-06-07 22:14:39 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-06-07 22:14:39 ----A---- C:\Windows\system32\aaclient.dll
2013-06-07 22:14:38 ----A---- C:\Windows\system32\rdpcorets.dll
2013-06-07 22:14:38 ----A---- C:\Windows\system32\mstsc.exe
2013-06-07 22:14:37 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-06-07 22:14:36 ----A---- C:\Windows\system32\mstscax.dll
2013-06-07 22:12:14 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-06-07 22:12:14 ----A---- C:\Windows\system32\schannel.dll
2013-06-07 22:12:13 ----A---- C:\Windows\system32\lsasrv.dll
2013-06-07 22:12:13 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-06-07 22:12:13 ----A---- C:\Windows\system32\drivers\cng.sys
2013-06-07 22:12:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-06-07 22:12:12 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-06-07 22:12:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-06-07 22:12:08 ----A---- C:\Windows\system32\qdvd.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-07 21:59:45 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-06-07 21:59:45 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-07 21:59:45 ----A---- C:\Windows\system32\elshyph.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-06-07 21:59:44 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\url.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-06-07 21:59:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\wininet.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\urlmon.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\url.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-07 21:59:42 ----A---- C:\Windows\system32\msrating.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\msls31.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\iesetup.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\iertutil.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\iernonce.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\iedkcs32.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\ieapfltr.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-07 21:59:42 ----A---- C:\Windows\system32\icardie.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\dxtrans.dll
2013-06-07 21:59:42 ----A---- C:\Windows\system32\dxtmsft.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\wextract.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\webcheck.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\vbscript.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\pngfilt.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\occache.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\mshtmler.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\mshtmled.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\mshtml.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\mshta.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\msfeedssync.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\licmgr10.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\jscript9.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\jscript.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\inseng.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\imgutil.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\iexpress.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\ieUnatt.exe
2013-06-07 21:59:40 ----A---- C:\Windows\system32\ieui.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\iepeers.dll
2013-06-07 21:59:40 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-06-07 21:59:39 ----A---- C:\Windows\system32\ieframe.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-07 21:58:00 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-06-07 21:58:00 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\XpsPrint.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\WMPhoto.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\FntCache.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\dxgi.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\DWrite.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\d3d10warp.dll
2013-06-07 21:58:00 ----A---- C:\Windows\system32\d2d1.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-06-07 21:57:59 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\UIAnimation.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d11.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d10level9.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d10core.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d10_1.dll
2013-06-07 21:57:59 ----A---- C:\Windows\system32\d3d10.dll
2013-06-07 21:42:55 ----RD---- C:\Program Files (x86)\Skype
2013-06-07 21:40:33 ----D---- C:\Program Files (x86)\MSXML 4.0
2013-06-07 20:42:46 ----A---- C:\Windows\system32\Wdfres.dll
2013-06-07 20:42:46 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-06-07 20:42:46 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-06-07 20:33:00 ----A---- C:\Windows\system32\browserchoice.exe
2013-06-07 20:28:00 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2013-06-07 20:24:17 ----D---- C:\Users\My\AppData\Roaming\Skype
2013-06-07 20:07:22 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-06-07 20:07:22 ----A---- C:\Windows\system32\atmlib.dll
2013-06-07 20:07:21 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-06-07 20:07:21 ----A---- C:\Windows\system32\atmfd.dll
2013-06-07 20:06:25 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-06-07 20:06:25 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-06-07 20:06:25 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-06-07 20:06:25 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-06-07 20:06:24 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-06-07 20:06:23 ----A---- C:\Windows\system32\WUDFx.dll
2013-06-07 20:06:23 ----A---- C:\Windows\system32\WUDFHost.exe
2013-06-07 20:00:04 ----D---- C:\Program Files\Microsoft Silverlight
2013-06-07 20:00:04 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-06-07 19:51:40 ----A---- C:\Windows\system32\winsrv.dll
2013-06-07 19:51:38 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-06-07 19:51:37 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-06-07 19:51:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-06-07 19:51:37 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-06-07 19:51:33 ----A---- C:\Windows\SYSWOW64\user.exe
2013-06-07 19:49:22 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-06-07 19:49:22 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-06-07 19:49:22 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-06-07 19:49:21 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-06-07 19:49:00 ----A---- C:\Windows\system32\Wpc.dll
2013-06-07 19:48:59 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-06-07 19:48:59 ----A---- C:\Windows\system32\gameux.dll
2013-06-07 19:48:58 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-06-07 19:48:25 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-06-07 19:48:25 ----A---- C:\Windows\system32\netcorehc.dll
2013-06-07 19:48:25 ----A---- C:\Windows\system32\ncsi.dll
2013-06-07 19:48:25 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-06-07 19:48:24 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-06-07 19:48:24 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-06-07 19:48:24 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-06-07 19:48:24 ----A---- C:\Windows\system32\nlasvc.dll
2013-06-07 19:48:24 ----A---- C:\Windows\system32\nlaapi.dll
2013-06-07 19:48:24 ----A---- C:\Windows\system32\netevent.dll
2013-06-07 19:48:24 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-06-07 19:48:10 ----A---- C:\Windows\system32\shell32.dll
2013-06-07 19:48:07 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-06-07 19:48:06 ----A---- C:\Windows\system32\shdocvw.dll
2013-06-07 19:48:06 ----A---- C:\Windows\system32\consent.exe
2013-06-07 19:48:06 ----A---- C:\Windows\system32\authui.dll
2013-06-07 19:48:05 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-06-07 19:48:05 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-06-07 19:48:05 ----A---- C:\Windows\system32\appinfo.dll
2013-06-07 19:47:33 ----A---- C:\Windows\system32\KernelBase.dll
2013-06-07 19:47:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-06-07 19:47:31 ----A---- C:\Windows\system32\kernel32.dll
2013-06-07 19:47:28 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-06-07 19:47:28 ----A---- C:\Windows\system32\wow64win.dll
2013-06-07 19:47:28 ----A---- C:\Windows\system32\wow64cpu.dll
2013-06-07 19:47:28 ----A---- C:\Windows\system32\wow64.dll
2013-06-07 19:47:28 ----A---- C:\Windows\system32\conhost.exe
2013-06-07 19:47:27 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-07 19:47:27 ----A---- C:\Windows\system32\ntvdm64.dll
2013-06-07 19:47:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-07 19:47:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-07 19:47:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-07 19:47:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-07 19:47:24 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-07 19:47:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-07 19:47:22 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-07 19:47:21 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-07 19:47:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-07 19:47:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-07 19:47:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-07 19:47:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-07 19:47:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-07 19:47:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-07 19:47:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-07 19:47:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-07 19:47:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-07 19:46:48 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-06-07 19:46:48 ----A---- C:\Windows\system32\tzres.dll
2013-06-07 19:46:10 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-06-07 19:45:52 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-06-07 19:45:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-06-07 19:45:31 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-07 19:45:31 ----A---- C:\Windows\system32\drivers\netio.sys
2013-06-07 19:45:31 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-06-07 19:45:27 ----A---- C:\Windows\system32\msxml6.dll
2013-06-07 19:45:27 ----A---- C:\Windows\system32\msxml3.dll
2013-06-07 19:45:26 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-06-07 19:45:25 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-06-07 19:45:25 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-06-07 19:45:24 ----A---- C:\Windows\system32\msxml3r.dll
2013-06-07 19:45:04 ----A---- C:\Windows\system32\win32k.sys
2013-06-07 19:45:01 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-06-07 19:45:01 ----A---- C:\Windows\system32\srcore.dll
2013-06-07 19:45:00 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-06-07 19:44:58 ----A---- C:\Windows\system32\usp10.dll
2013-06-07 19:44:57 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-06-07 19:44:48 ----A---- C:\Windows\system32\crypt32.dll
2013-06-07 19:44:47 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-07 19:44:46 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-07 19:44:46 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-07 19:44:46 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-07 19:44:46 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-07 19:44:10 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-06-07 19:44:10 ----A---- C:\Windows\system32\kerberos.dll
2013-06-07 19:44:08 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-06-07 19:44:06 ----A---- C:\Windows\system32\win32spl.dll
2013-06-07 19:44:05 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-07 19:44:04 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-06-07 19:44:03 ----A---- C:\Windows\system32\taskhost.exe
2013-06-07 19:44:01 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-06-07 19:44:01 ----A---- C:\Windows\system32\ncrypt.dll
2013-06-07 19:43:59 ----A---- C:\Windows\system32\dpnet.dll
2013-06-07 19:43:58 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-06-07 19:43:57 ----A---- C:\Windows\system32\localspl.dll
2013-06-07 19:43:55 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-06-07 19:43:55 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-06-07 19:43:53 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-06-07 19:43:53 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-06-07 19:43:53 ----A---- C:\Windows\system32\netapi32.dll
2013-06-07 19:43:53 ----A---- C:\Windows\system32\browser.dll
2013-06-07 19:43:53 ----A---- C:\Windows\system32\browcli.dll
2013-06-07 19:43:51 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-06-07 19:43:51 ----A---- C:\Windows\system32\wintrust.dll
2013-06-07 19:43:49 ----A---- C:\Windows\system32\wwansvc.dll
2013-06-07 19:43:49 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-06-07 19:43:48 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-06-07 19:43:48 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-06-07 19:43:48 ----A---- C:\Windows\system32\cdd.dll
2013-06-07 19:43:47 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-06-07 19:43:47 ----A---- C:\Windows\system32\synceng.dll
2013-06-07 19:43:43 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-06-07 19:43:42 ----A---- C:\Windows\system32\cdosys.dll
2013-06-07 19:36:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-06-07 19:36:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-06-07 19:36:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-06-07 19:36:34 ----A---- C:\Windows\system32\smss.exe
2013-06-07 19:36:33 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-06-07 19:36:33 ----A---- C:\Windows\system32\csrsrv.dll
2013-06-07 19:32:51 ----A---- C:\Windows\system32\spoolsv.exe
2013-06-07 19:32:50 ----A---- C:\Windows\splwow64.exe
2013-06-06 16:25:12 ----D---- C:\ProgramData\ESET
2013-06-06 15:04:55 ----A---- C:\Windows\system32\roboot64.exe
2013-06-06 15:04:53 ----D---- C:\Users\My\AppData\Roaming\systweak
2013-06-06 10:31:50 ----D---- C:\Program Files\ESET
2013-06-05 09:35:12 ----D---- C:\Users\My\AppData\Roaming\GoforFiles
2013-06-03 06:47:15 ----D---- C:\ProgramData\WNR
2013-06-03 06:46:25 ----D---- C:\Users\My\AppData\Roaming\WNR
2013-06-03 06:46:22 ----D---- C:\Program Files (x86)\Proxy Switcher Standard
2013-06-03 06:36:59 ----D---- C:\Program Files (x86)\Anonymous Browsing
2013-06-02 17:15:01 ----A---- C:\Windows\NoTrax.ini
2013-06-02 17:12:24 ----D---- C:\Program Files (x86)\NoTrax
2013-06-02 17:00:02 ----A---- C:\Windows\CD_Start.INI
2013-06-02 16:59:48 ----D---- C:\Users\My\AppData\Roaming\Thinstall
2013-06-02 16:43:37 ----D---- C:\Users\My\AppData\Roaming\SurfAnonymousFree
2013-06-02 16:43:37 ----D---- C:\ProgramData\SurfAnonymousFree
2013-05-30 09:00:14 ----D---- C:\Program Files (x86)\Opera Next
2013-05-29 15:40:43 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-05-29 15:40:43 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-05-29 15:40:43 ----A---- C:\Windows\SYSWOW64\java.exe
2013-05-28 07:57:55 ----D---- C:\Users\My\AppData\Roaming\HD Tune Pro
2013-05-28 07:56:24 ----D---- C:\Program Files (x86)\HD Tune Pro
2013-05-28 07:52:43 ----D---- C:\Users\My\AppData\Roaming\Python-Eggs
2013-05-28 07:52:36 ----D---- C:\Users\My\AppData\Roaming\BitLord
2013-05-28 07:52:36 ----A---- C:\Users\My\AppData\Roaming\bitlord_log.txt
2013-05-28 07:50:37 ----D---- C:\Program Files (x86)\BitLord 2
2013-05-22 13:05:26 ----D---- C:\Users\My\AppData\Roaming\Malwarebytes
2013-05-22 13:05:12 ----D---- C:\ProgramData\Malwarebytes
2013-05-22 13:05:08 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-22 13:05:08 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-05-20 20:51:41 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2013-06-08 08:56:55 ----D---- C:\Windows\Temp
2013-06-08 08:56:54 ----D---- C:\Program Files
2013-06-08 08:42:57 ----D---- C:\Windows\Microsoft.NET
2013-06-08 08:42:54 ----RSD---- C:\Windows\assembly
2013-06-08 08:23:45 ----SHD---- C:\Windows\Installer
2013-06-08 08:23:45 ----SHD---- C:\Config.Msi
2013-06-08 08:23:43 ----D---- C:\Users\My\AppData\Roaming\Mozilla
2013-06-08 08:09:34 ----D---- C:\Windows\system32\config
2013-06-08 07:53:52 ----D---- C:\Windows
2013-06-08 07:53:03 ----D---- C:\Users\My\AppData\Roaming\POP Peeper
2013-06-08 07:49:37 ----D---- C:\Users\My\AppData\Roaming\Winamp
2013-06-08 07:49:37 ----D---- C:\Users\My\AppData\Roaming\uTorrent
2013-06-08 07:47:36 ----D---- C:\Windows\Panther
2013-06-08 07:47:36 ----D---- C:\Windows\inf
2013-06-08 07:47:24 ----D---- C:\Windows\SoftwareDistribution
2013-06-08 07:47:24 ----D---- C:\Windows\Logs
2013-06-08 07:47:24 ----D---- C:\Windows\debug
2013-06-07 23:15:37 ----D---- C:\Windows\SysWOW64
2013-06-07 23:15:21 ----RD---- C:\Program Files (x86)
2013-06-07 23:04:50 ----D---- C:\Program Files (x86)\vanBasco's Karaoke Player
2013-06-07 22:42:48 ----D---- C:\Windows\winsxs
2013-06-07 22:42:33 ----D---- C:\Windows\system32\catroot
2013-06-07 22:42:31 ----D---- C:\Windows\system32\catroot2
2013-06-07 22:35:23 ----D---- C:\Windows\System32
2013-06-07 22:35:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-07 22:15:41 ----D---- C:\Windows\SYSWOW64\wbem
2013-06-07 22:15:41 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-06-07 22:15:41 ----D---- C:\Windows\SYSWOW64\en-US
2013-06-07 22:15:41 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-07 22:15:41 ----D---- C:\Windows\system32\wbem
2013-06-07 22:15:41 ----D---- C:\Windows\system32\sk-SK
2013-06-07 22:15:41 ----D---- C:\Windows\system32\en-US
2013-06-07 22:15:41 ----D---- C:\Windows\system32\drivers\en-US
2013-06-07 22:15:41 ----D---- C:\Windows\system32\drivers
2013-06-07 22:15:41 ----D---- C:\Windows\system32\cs-CZ
2013-06-07 22:15:41 ----D---- C:\Windows\PolicyDefinitions
2013-06-07 22:15:40 ----D---- C:\Windows\system32\DriverStore
2013-06-07 22:14:16 ----SHD---- C:\System Volume Information
2013-06-07 22:05:39 ----D---- C:\Windows\Prefetch
2013-06-07 22:02:43 ----D---- C:\Windows\SYSWOW64\migration
2013-06-07 22:02:43 ----D---- C:\Windows\system32\migration
2013-06-07 22:02:42 ----D---- C:\Program Files\Internet Explorer
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\it-IT
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\es-ES
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\el-GR
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\de-DE
2013-06-07 22:02:41 ----D---- C:\Windows\SYSWOW64\da-DK
2013-06-07 22:02:41 ----D---- C:\Windows\system32\pt-PT
2013-06-07 22:02:41 ----D---- C:\Windows\system32\pt-BR
2013-06-07 22:02:41 ----D---- C:\Windows\system32\pl-PL
2013-06-07 22:02:41 ----D---- C:\Windows\system32\ko-KR
2013-06-07 22:02:41 ----D---- C:\Windows\system32\it-IT
2013-06-07 22:02:41 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-07 22:02:40 ----D---- C:\Windows\system32\zh-TW
2013-06-07 22:02:40 ----D---- C:\Windows\system32\zh-HK
2013-06-07 22:02:40 ----D---- C:\Windows\system32\zh-CN
2013-06-07 22:02:40 ----D---- C:\Windows\system32\tr-TR
2013-06-07 22:02:40 ----D---- C:\Windows\system32\sv-SE
2013-06-07 22:02:40 ----D---- C:\Windows\system32\ru-RU
2013-06-07 22:02:40 ----D---- C:\Windows\system32\nl-NL
2013-06-07 22:02:40 ----D---- C:\Windows\system32\nb-NO
2013-06-07 22:02:40 ----D---- C:\Windows\system32\ja-JP
2013-06-07 22:02:40 ----D---- C:\Windows\system32\hu-HU
2013-06-07 22:02:40 ----D---- C:\Windows\system32\fr-FR
2013-06-07 22:02:40 ----D---- C:\Windows\system32\fi-FI
2013-06-07 22:02:40 ----D---- C:\Windows\system32\es-ES
2013-06-07 22:02:40 ----D---- C:\Windows\system32\el-GR
2013-06-07 22:02:40 ----D---- C:\Windows\system32\de-DE
2013-06-07 22:02:40 ----D---- C:\Windows\system32\da-DK
2013-06-07 21:55:26 ----D---- C:\ProgramData\Microsoft Help
2013-06-07 21:43:00 ----D---- C:\Windows\system32\Tasks
2013-06-07 21:42:56 ----D---- C:\Program Files (x86)\Common Files
2013-06-07 21:42:55 ----D---- C:\ProgramData\Skype
2013-06-07 21:18:49 ----D---- C:\Windows\AppPatch
2013-06-07 21:18:47 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-06-07 21:18:36 ----RSD---- C:\Windows\Fonts
2013-06-07 20:28:00 ----HD---- C:\ProgramData
2013-06-07 20:27:38 ----D---- C:\Users\My\AppData\Roaming\skypePM
2013-06-07 19:56:28 ----A---- C:\Windows\win.ini
2013-06-07 18:46:44 ----A---- C:\Windows\system32\systemcpl.dll
2013-06-07 13:56:21 ----D---- C:\Program Files\CCleaner
2013-06-06 15:08:30 ----D---- C:\Windows\Tasks
2013-06-06 15:03:21 ----HD---- C:\Program Files (x86)\Temp
2013-06-05 14:15:13 ----D---- C:\Program Files (x86)\Sound Forge
2013-06-05 14:15:13 ----A---- C:\Windows\FORGE32.ini
2013-06-05 12:36:21 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2013-06-05 12:36:18 ----A---- C:\Windows\system32\certsentry.dll
2013-06-05 12:36:11 ----D---- C:\Program Files (x86)\Comodo
2013-06-02 22:45:51 ----D---- C:\Users\My\AppData\Roaming\vlc
2013-05-30 09:00:18 ----D---- C:\Users\My\AppData\Roaming\Opera
2013-05-29 15:40:43 ----D---- C:\Program Files (x86)\Java
2013-05-28 22:35:33 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-28 22:06:53 ----D---- C:\ProgramData\Adobe
2013-05-26 09:29:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-25 11:26:40 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2013-05-22 13:13:28 ----D---- C:\Windows\system32\NDF
2013-05-22 12:47:08 ----D---- C:\ProgramData\AutoKMS
2013-05-18 06:50:23 ----D---- C:\Users\My\AppData\Roaming\dvdcss
2013-05-16 09:17:19 ----D---- C:\Users\My\AppData\Roaming\TorrentStream
2013-05-16 09:17:19 ----D---- C:\Users\My\AppData\Roaming\.Torrent Stream
2013-05-15 18:02:43 ----A---- C:\Windows\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2010-06-29 11832]
R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2010-04-06 23944]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-11-16 62024]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-11-16 209808]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-01 535656]
R3 SNP325;USB PC Camera (SNPSTD325); C:\Windows\system32\DRIVERS\snp325.sys [2007-04-03 10549248]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-12-15 47232]
S3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\amdhub30.sys [2011-03-17 87168]
S3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\amdxhc.sys [2011-03-17 188544]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
S3 BTCOM;Bluetooth Serial port driver; C:\Windows\system32\DRIVERS\btcomport.sys []
S3 BTCOMBUS;Bluetooth Serial Port Bus Service; C:\Windows\System32\Drivers\btcombus.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2010-04-06 30088]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys []
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
S3 cpuz134;cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys []
S3 cpuz135;cpuz135; \??\C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys []
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2012-08-07 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2013-04-08 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2012-08-07 30528]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2010-04-06 27016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-03-26 37888]
S3 tbhsd;Tunebite High-Speed Dubbing; C:\Windows\system32\drivers\tbhsd.sys [2010-03-30 46112]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2013-06-04 2095752]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-16 913184]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-06-06 100864]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-28 256904]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-20 117144]
S3 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-07-05 1255736]
S4 NetMsmqActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]
S4 NetPipeActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]
S4 NetTcpActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 08 čer 2013 10:57

Zdravim

Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna.

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam, ze ten ESET jak ma byt = zakoupena licence

jakoncek · #3 Příspěvek od **jakoncek** » 08 čer 2013 11:28

Ja som mal Windows XP , stale sa to sekalo tak som to odniesol do predajne PC
kde mi to preinstalovali .
Dali nove vnutro iba stary zdroj mi nechali + nainstalovali ostatne veci .
Takze asi by som to mal mat v poriadku - si myslim

info.txt logfile of random's system information tool 1.09 2013-06-08 08:57:08

======Uninstall list======

@BIOS-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}\Setup.exe" -l0x9 -removeonly
-->C:\Program Files (x86)\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
µTorrent-->"C:\Program Files (x86)\uTorrent\uTorrent.exe" /UNINSTALL
325 USB PC Camera -->C:\Program Files (x86)\InstallShield Installation Information\{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}\setup.exe -runfromtemp -l0x0009 -removeonly
3CXPhone-->MsiExec.exe /I{0DF8FA4D-299C-4250-9F09-C14E47E12224}
7-Zip 9.22beta-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Adobe Flash Player 11 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_202_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_202_Plugin.exe -maintain plugin
Adobe Reader X (10.1.7) - Slovak-->MsiExec.exe /I{AC76BA86-7AD7-1051-7B44-AA1000000001}
Agent Ransack 2010-->"C:\Program Files (x86)\Mythicsoft\Agent Ransack\unins000.exe"
AMD APP SDK Runtime-->MsiExec.exe /I{503F672D-6C84-448A-8F8F-4BC35AC83441}
ATI Catalyst Install Manager-->msiexec /q/x{DDD72DB8-BB69-1AE3-9E21-BFD1CB87AEDF} REBOOT=ReallySuppress
AutoGreen B10.1021.1-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{C75FAD21-EC08-42F3-92D6-C9C0AB355345}
Avant Browser (remove only)-->"C:\Program Files (x86)\Avant Browser\uninst.exe"
BitLord 2.3-->C:\Program Files (x86)\BitLord 2\Bitlord-uninst.exe
BusinessCards MX-->"C:\Program Files (x86)\mojosoft\BusinessCardsMX\unins000.exe"
Cakewalk Pro Audio 9-->C:\Windows\IsUninst.exe -f"C:\Program Files (x86)\Cakewalk\Cakewalk Pro Audio 9\CWPA9_Uninst.isu"
Cakewalk.Pro.Audio.9.03-TcC-->C:\audio\cw9\UNWISE.EXE C:\audio\cw9\INSTALL.LOG
Catalyst Control Center - Branding-->MsiExec.exe /I{19A492A0-888F-44A0-9B21-D91700763F62}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Comodo Dragon-->"C:\Program Files (x86)\Comodo\Dragon\uninstall.exe"
CoolSoft VirtualMIDISynth 1.4.0-->"C:\Windows\SysWOW64\VirtualMIDISynth\uninstall.exe"
Corel Applications-->C:\Windows\Corel\Uninst32.exe
COWON Media Center - jetAudio Basic VX-->C:\Program Files (x86)\InstallShield Installation Information\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}\setup.exe -runfromtemp -l0x0009 -removeonly
Crystal Skin Pack 1.0-X64-->C:\Windows\Crystal Skin Pack\uninst.exe
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{25881143-7B3A-46FA-B093-85C24957D08E}" "1051" "0"
Driver Genius Professional Edition-->"C:\Program Files (x86)\Driver-Soft\DriverGenius\unins000.exe"
Easy Tune 6 B11.0704.1-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{457D7505-D665-4F95-91C3-ECB8C56E9ACA}
Facebook Messenger 2.1.4814.0-->MsiExec.exe /X{7204BDEE-1A48-4D95-A964-44A9250B439E}
Facebook Video Calling 1.2.0.287-->MsiExec.exe /X{B92C5909-1D37-4C51-8397-A28BB28E5DC3}
Freemake Audio Converter verzia 1.1.0-->"C:\Program Files (x86)\Freemake\Freemake Audio Converter\Uninstall\unins000.exe"
GoldWave v5.25-->"C:\Program Files (x86)\GoldWave\unstall.exe" "GoldWave v5.25" "C:\Program Files (x86)\GoldWave\unstall.log"
Google Talk Plugin-->MsiExec.exe /I{51268A7D-4E1A-371A-9849-496D48930952}
HD Tune Pro 5.50-->"C:\Program Files (x86)\HD Tune Pro\unins000.exe"
IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe
Java 7 Update 21-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217017FF}
Java(TM) 6 Update 33-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216033FF}
Jelly Bean Skin Pack 4.0-X64-->C:\Program Files (x86)\Jelly Bean Skin Pack\uninst.exe
K-Lite Codec Pack 6.3.0 (64-bit)-->"C:\Program Files\K-Lite Codec Pack x64\unins000.exe"
K-Lite Codec Pack 8.8.0 (Standard)-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
Malwarebytes Anti-Malware verze 1.75.0.1300-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Maxthon 3-->C:\Program Files (x86)\Maxthon3\Bin\Mx3Uninstall.exe
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Access MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0015-041B-1000-0000000FF1CE}
Microsoft DCF MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0090-041B-1000-0000000FF1CE}
Microsoft Excel MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0016-041B-1000-0000000FF1CE}
Microsoft Groove MUI (Slovak) 2013-->MsiExec.exe /X{90150000-00BA-041B-1000-0000000FF1CE}
Microsoft InfoPath MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0044-041B-1000-0000000FF1CE}
Microsoft Lync MUI (Slovak) 2013-->MsiExec.exe /X{90150000-012B-041B-1000-0000000FF1CE}
Microsoft Office 2013 Professional Plus-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall PROPLUSR /dll OSETUP.DLL
Microsoft Office 32-bit Components 2013-->MsiExec.exe /X{90150000-00C1-0000-1000-0000000FF1CE}
Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-1000-0000000FF1CE}
Microsoft Office Nyelvi ellenőrző eszközök 2013 – magyar-->MsiExec.exe /X{90150000-001F-040E-1000-0000000FF1CE}
Microsoft Office OSM MUI (Slovak) 2013-->MsiExec.exe /X{90150000-00E1-041B-1000-0000000FF1CE}
Microsoft Office OSM UX MUI (Slovak) 2013-->MsiExec.exe /X{90150000-00E2-041B-1000-0000000FF1CE}
Microsoft Office Professional Plus 2013-->MsiExec.exe /X{91150000-0011-0000-1000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2013-->MsiExec.exe /X{90150000-002C-041B-1000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-1000-0000000FF1CE}
Microsoft Office Shared 32-bit MUI (Slovak) 2013-->MsiExec.exe /X{90150000-00C1-041B-1000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2013-->MsiExec.exe /X{90150000-006E-041B-1000-0000000FF1CE}
Microsoft OneNote MUI (Slovak) 2013-->MsiExec.exe /X{90150000-00A1-041B-1000-0000000FF1CE}
Microsoft Outlook MUI (Slovak) 2013-->MsiExec.exe /X{90150000-001A-041B-1000-0000000FF1CE}
Microsoft PowerPoint MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0018-041B-1000-0000000FF1CE}
Microsoft Publisher MUI (Slovak) 2013-->MsiExec.exe /X{90150000-0019-041B-1000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft Word MUI (Slovak) 2013-->MsiExec.exe /X{90150000-001B-041B-1000-0000000FF1CE}
MOBILedit! Support Libraries-->MsiExec.exe /I{1A834332-A9EE-440C-9505-2D07F445F05A}
MOBILedit! ver. 6.1.1.1806-->"C:\Program Files (x86)\MOBILedit!\Setup\unins000.exe"
Movie Maker 6.0 for Windows 7 (64-bit)-->MsiExec.exe /X{A7395F20-2B22-4CB8-8510-B452C0F47E02}
Mozilla Firefox 21.0 (x86 sk)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Mozilla Thunderbird 14.0 (x86 sk)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSVCRT Redists-->MsiExec.exe /I{D81C035E-D0A5-11DF-9450-0013D3D69929}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština-->MsiExec.exe /X{90150000-001F-0405-1000-0000000FF1CE}
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina-->MsiExec.exe /X{90150000-001F-041B-1000-0000000FF1CE}
Nero 8-->MsiExec.exe /X{B944FA21-81AF-4A77-8328-CE4F4CC51051}
Nero Backup Drivers-->MsiExec.exe /X{D600D357-5CB9-4DE9-8FD4-14E208BD1970}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
ObjectDock Plus 2-->C:\ProgramData\{0F4A7EFE-5950-4389-BF36-1E625D72456B}\shareware.exe REMOVE=TRUE MODIFY=FALSE
ON_OFF Charge B11.0110.1-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{3DECD372-76A1-4483-BF10-B547790A3261}\setup.exe" -l0x9 -removeonly
Opera 12.14-->"C:\Program Files (x86)\Opera\Opera.exe" /uninstall
Opera next 15.0.1147.24-->"C:\Program Files (x86)\Opera Next\Launcher.exe" /uninstall
Perfect Uninstaller v6.3.3.9-->"C:\Program Files\Perfect Uninstaller\unins000.exe"
Photo Notifier and Animation Creator-->MsiExec.exe /X{788A0222-5690-4212-AA9C-C48FD0E1C9AE}
Photo Pos Pro-->"C:\Windows\Photo Pos Pro Uninstaller.exe"
PhotoScape-->"C:\Program Files (x86)\PhotoScape\uninstall.exe"
PixiePack Codec Pack-->MsiExec.exe /I{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}
POP Peeper-->C:\Program Files (x86)\POP Peeper\Uninstall.exe
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.Exe -runfromtemp -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Recepty doma-->"C:\Program Files (x86)\Recepty doma\unins000.exe"
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DA36C2E5-6B34-3A6A-9C0A-7D1CC1C5A768} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7B82A51A-768B-3A7B-ADFA-F777097A8079} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E40184A4-4A61-3D2E-9035-CB6E1E610E07} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4736E989-32D9-3B91-90D7-C68848E118CA} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F1696E2F-4803-362F-A756-65B363483FE6} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8E6848A1-B790-34FE-921A-A5319258E254} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E7F6B64E-E11F-3D1C-868D-3F1443DA5A15} /parameterfolder Client
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Sound Forge 4.5c Build-281-->C:\PROGRA~2\SOUNDF~1\UNWISE.EXE C:\PROGRA~2\SOUNDF~1\FORGE32.LOG
Stardock Software-->C:\ProgramData\{0F4A7EFE-5950-4389-BF36-1E625D72456B}\shareware.exe
StrongDC++ 2.41-->"C:\Program Files\StrongDC++\uninstall.exe"
Super Finder XT 1.6.3.2-->"C:\Program Files (x86)\FSL\SuperFinder\unins001.exe"
Total Commander (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcuninst.exe
Total Commander 64-bit (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcunin64.exe
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client
Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{A784BEFA-1BAB-4285-9F90-7D1A40A72DF8}" "1051" "0"
Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{C5241E8F-37A5-40EC-90DD-FF1400818C4B}" "1051" "0"
Update for Microsoft Lync 2013 (KB2768004) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{D3F417A4-0DC5-489E-8196-90D9D9BC3B4B}" "1051" "0"
Update for Microsoft Lync 2013 (KB2768004) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{D3F417A4-0DC5-489E-8196-90D9D9BC3B4B}" "1051" "0"
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}" "1051" "0"
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}" "1051" "0"
Update for Microsoft Office 2013 (KB2726961) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{F0316FE0-38FC-4F3E-81FA-8B51BB649901}" "1051" "0"
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}" "1051" "0"
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}" "1051" "0"
Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{068372FB-7EAF-463F-8074-77AB35BB13E6}" "1051" "0"
Update for Microsoft Office 2013 (KB2752094) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{E911A320-7B4A-4383-82D2-007375B27EC2}" "1051" "0"
Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{8449754F-577E-4EC3-B9D4-108395B1680E}" "1051" "0"
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{3FF4EA9F-3505-4726-A974-6593A968FFCC}" "1051" "0"
Update for Microsoft Office 2013 (KB2760343) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{6215502A-6412-47AA-86D6-37DA058BC55B}" "1051" "0"
Update for Microsoft Office 2013 (KB2760343) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{6215502A-6412-47AA-86D6-37DA058BC55B}" "1051" "0"
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{8587E5B1-6279-4396-B9AC-20B334F4FF88}" "1051" "0"
Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{0C0A2F4A-757C-4F10-935F-508E1A2D4719}" "1051" "0"
Update for Microsoft Office 2013 (KB2768333) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{FA9970D1-FB2A-44C4-B99B-FD31CA9DD0FA}" "1051" "0"
Update for Microsoft Office 2013 (KB2768333) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{FA9970D1-FB2A-44C4-B99B-FD31CA9DD0FA}" "1051" "0"
Update for Microsoft Office 2013 (KB2768349) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-041B-1000-0000000FF1CE}" "{5DBBF1ED-AF5A-4005-BE0C-C57B11756690}" "1051" "0"
Update for Microsoft Office 2013 (KB2768349) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{53810164-C8E4-4AB7-9692-B69105E26997}" "1051" "0"
Update for Microsoft Office 2013 (KB2768349) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{53810164-C8E4-4AB7-9692-B69105E26997}" "1051" "0"
Update for Microsoft Office 2013 (KB2768355) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{58C3F796-13EF-4BB7-90C8-44AC58061294}" "1051" "0"
Update for Microsoft Office 2013 (KB2768355) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{58C3F796-13EF-4BB7-90C8-44AC58061294}" "1051" "0"
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-1000-0000000FF1CE}" "{5873FFD6-348A-45C7-968D-B815EF3650EB}" "1051" "0"
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{BFFD2D29-347B-4E0F-8F5D-89395E458570}" "1051" "0"
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{377DC0D5-A062-496A-ADE2-6D204B498DD8}" "1051" "0"
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-1000-0000000FF1CE}" "{AEB428C6-B10F-40EE-9F3C-3B5CB8329B81}" "1051" "0"
Update for Microsoft OneNote 2013 (KB2760334) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{D9F8079D-BA75-47BC-ABAB-018F64771EA1}" "1051" "0"
Update for Microsoft OneNote 2013 (KB2760334) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{D9F8079D-BA75-47BC-ABAB-018F64771EA1}" "1051" "0"
Update for Microsoft Outlook 2013 (KB2810015) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-041B-1000-0000000FF1CE}" "{4D4324D9-9799-49EA-AA59-48AF23E46F25}" "1051" "0"
Update for Microsoft Outlook 2013 (KB2810015) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{87043757-94A9-4E24-9E4E-3E3F8BAFFDBA}" "1051" "0"
Update for Microsoft PowerPoint 2013 (KB2727013) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{D6543BBD-68C5-4EF7-A8EF-A87E6602B063}" "1051" "0"
Update for Microsoft SkyDrive Pro (KB2810019) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-041B-1000-0000000FF1CE}" "{1FF05A65-A3B1-4A97-8E2A-A84F8720CC06}" "1051" "0"
Update for Microsoft SkyDrive Pro (KB2810019) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{87D820B2-64E3-492D-A617-122A8ABEAB20}" "1051" "0"
Update for Microsoft SkyDrive Pro (KB2810019) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-041B-1000-0000000FF1CE}" "{1FF05A65-A3B1-4A97-8E2A-A84F8720CC06}" "1051" "0"
Update for Microsoft SkyDrive Pro (KB2810019) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{87D820B2-64E3-492D-A617-122A8ABEAB20}" "1051" "0"
Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{54960E56-266C-417A-85F5-4769614C2694}" "1051" "0"
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{D1F1940B-94DF-4DCB-BF82-9530D7FBB1BF}" "1051" "0"
Update for Microsoft Word 2013 (KB2768007) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{BEF4A15A-E1CC-41A1-AAA8-23E0711219F0}" "1051" "0"
Update for Microsoft Word 2013 (KB2768337) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{91150000-0011-0000-1000-0000000FF1CE}" "{1E137370-60AB-48D4-9871-F2E789A17D92}" "1051" "0"
vanBasco's Karaoke Player-->C:\Program Files (x86)\vanBasco's Karaoke Player\uninst.exe
VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Vista Skin Pack 1.0-X64-->C:\Windows\Vista Skin Pack\uninst.exe
VLC media player 2.0.6-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Winamp-->"C:\Program Files (x86)\Winamp\UninstWA.exe"
Windows Movie Maker 2.6-->MsiExec.exe /X{B3DAF54F-DB25-4586-9EF1-96D24BB14088}
Windows Movie Maker 6.1-->"C:\Program Files (x86)\Windows Movie Maker\unins000.exe"
Windows Movie Maker-->C:\Program Files\Movie Maker\uninst.exe
WinZip 16.5-->MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240D3}

Hosts File Missing
======System event log======

Computer Name: MyA42cPC
Event Code: 6
Message: Filtr systému souborů FileInfo (verze 6.1, ‎2009‎-‎07‎-‎14T00:34:25.000000000Z) byl úspěšně načten a zaregistrován ve Správci filtrů.
Record Number: 208034
Source Name: Microsoft-Windows-FilterManager
Time Written: 20130201163411.838405-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: MyA42cPC
Event Code: 12
Message: Operační systém byl spuštěn v systémovém čase ‎2013‎-‎02‎-‎01T16:34:08.375199800Z.
Record Number: 208033
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20130201163408.687200-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: MyA42cPC
Event Code: 7036
Message: Stav služby Application Experience byl změněn na: Spustené
Record Number: 208032
Source Name: Service Control Manager
Time Written: 20130201161203.444278-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 7036
Message: Stav služby Application Experience byl změněn na: Zastavené
Record Number: 208031
Source Name: Service Control Manager
Time Written: 20130201155203.448642-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 7036
Message: Stav služby Application Experience byl změněn na: Spustené
Record Number: 208030
Source Name: Service Control Manager
Time Written: 20130201154203.447324-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: MyA42cPC
Event Code: 6000
Message: Odběratel oznámení přihlašování do systému Windows <SessionEnv> nemohl zpracovat událost upozornění.
Record Number: 19517
Source Name: Microsoft-Windows-Winlogon
Time Written: 20120928140804.000000-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 1003
Message: The Software Protection service has completed licensing status check.
Application Id=59a52881-a989-479d-af46-f275c6370663
Licensing Status=
1: 191301d3-a579-428c-b0c7-d7988500f9e3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 6f327760-8c5c-417c-9b61-836a98287e0c, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 258698)(?)(?)(?)])(1 )(2 )]
3: fdf3ecb9-b56f-43b2-a9b8-1b48b6bae1a7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Record Number: 19516
Source Name: Office Software Protection Platform Service
Time Written: 20120928134340.000000-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 1003
Message: The Software Protection service has completed licensing status check.
Application Id=59a52881-a989-479d-af46-f275c6370663
Licensing Status=
1: 191301d3-a579-428c-b0c7-d7988500f9e3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 6f327760-8c5c-417c-9b61-836a98287e0c, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 258700)(?)(?)(?)])(1 )(2 )]
3: fdf3ecb9-b56f-43b2-a9b8-1b48b6bae1a7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Record Number: 19515
Source Name: Office Software Protection Platform Service
Time Written: 20120928134213.000000-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 1003
Message: The Software Protection service has completed licensing status check.
Application Id=59a52881-a989-479d-af46-f275c6370663
Licensing Status=
1: 191301d3-a579-428c-b0c7-d7988500f9e3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 6f327760-8c5c-417c-9b61-836a98287e0c, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 258700)(?)(?)(?)])(1 )(2 )]
3: fdf3ecb9-b56f-43b2-a9b8-1b48b6bae1a7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Record Number: 19514
Source Name: Office Software Protection Platform Service
Time Written: 20120928134158.000000-000
Event Type: Informace
User:

Computer Name: MyA42cPC
Event Code: 1003
Message: The Software Protection service has completed licensing status check.
Application Id=59a52881-a989-479d-af46-f275c6370663
Licensing Status=
1: 191301d3-a579-428c-b0c7-d7988500f9e3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 6f327760-8c5c-417c-9b61-836a98287e0c, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 258701)(?)(?)(?)])(1 )(2 )]
3: fdf3ecb9-b56f-43b2-a9b8-1b48b6bae1a7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Record Number: 19513
Source Name: Office Software Protection Platform Service
Time Written: 20120928134126.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: MyA42cPC
Event Code: 5058
Message: Operace se souborem klíče.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MYA42CPC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: Není k dispozici.
Název klíče: 005D4B825150B105
Typ klíče: Klíč počítače

Informace o operaci se souborem klíče:
Cesta k souboru: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd82687a659150cd9c9da275ebbc4b46_aff84fa1-65f5-4130-83da-33607bbef47e
Operace: Čtení trvalého klíče ze souboru
Návratový kód: 0x0
Record Number: 442358
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130325201813.785562-000
Event Type: Úspěšný audit
User:

Computer Name: MyA42cPC
Event Code: 5061
Message: Kryptografická operace.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MYA42CPC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: RSA
Název klíče: 005A75115150B04B
Typ klíče: Klíč počítače

Kryptografická operace:
Operace: Otevřít klíč
Návratový kód: 0x0
Record Number: 442357
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130325201507.683233-000
Event Type: Úspěšný audit
User:

Computer Name: MyA42cPC
Event Code: 5058
Message: Operace se souborem klíče.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MYA42CPC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: Není k dispozici.
Název klíče: 005A75115150B04B
Typ klíče: Klíč počítače

Informace o operaci se souborem klíče:
Cesta k souboru: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ab922325731bcd2cb0dd602d942765b6_aff84fa1-65f5-4130-83da-33607bbef47e
Operace: Čtení trvalého klíče ze souboru
Návratový kód: 0x0
Record Number: 442356
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130325201507.683233-000
Event Type: Úspěšný audit
User:

Computer Name: MyA42cPC
Event Code: 5061
Message: Kryptografická operace.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MYA42CPC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: RSA
Název klíče: 004D0FE95150ACDD
Typ klíče: Klíč počítače

Kryptografická operace:
Operace: Otevřít klíč
Návratový kód: 0x0
Record Number: 442355
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130325200029.823606-000
Event Type: Úspěšný audit
User:

Computer Name: MyA42cPC
Event Code: 5058
Message: Operace se souborem klíče.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MYA42CPC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: Není k dispozici.
Název klíče: 004D0FE95150ACDD
Typ klíče: Klíč počítače

Informace o operaci se souborem klíče:
Cesta k souboru: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\889799260e2a0aff7f6e8a5f16fbef19_aff84fa1-65f5-4130-83da-33607bbef47e
Operace: Čtení trvalého klíče ze souboru
Návratový kód: 0x0
Record Number: 442354
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130325200029.823606-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\PROGRAM FILES (X86)\AMD APP\BIN\X86_64;C:\PROGRAM FILES (X86)\AMD APP\BIN\X86;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;%SYSTEMROOT%\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\PROGRAM FILES (X86)\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC;;
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=18
"PROCESSOR_IDENTIFIER"=AMD64 Family 18 Model 1 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=0100
"AMDAPPSDKROOT"=C:\Program Files (x86)\AMD APP\

-----------------EOF-----------------

#4 Příspěvek od **vyosek** » 08 čer 2013 12:26

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Pro nezajem resit tema na zaklade Pravidla o zamykani temat

VIRY.CZ

Prosím o preventívnu kontrolu

Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu