Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

WIN key vypina PC, left CTRl un/mutuje zvuk

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
entony_buric
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 11 čer 2013 04:45

WIN key vypina PC, left CTRl un/mutuje zvuk

#1 Příspěvek od entony_buric »

Zdravim vsechny, prihodila se mi takova nemila vec.
Trosku omacky kolem. Vcera jsem pripojil PC "primo" na modem (O2 adsl). Pripojen byl asi pul dne a krome hrani strilecky online jsem nic nestahoval ani neinstaloval(To plati pro poslednich nekolik dnu). Ovsem prehledl jsem jednu pomerne dulezitou vec - zablokovany firewall. Najednou z niceho nic zacal vypadavat zvuk (jak jsem pozdeji zjistil, bylo to vlivem stlacovani leveho ctrl). CTRL mutoval a odmutoval vychozi zarizeni pro prehravani zvuku. Chtel jsem se podivat do WIN, co se deje a po shozeni aplikace pomoci klavesy WIN, nasledovalo regulerni vypnuti pc. Po restartu porad stejne, obnoveni systemu taky nepomohlo. Antiviry NOD, zkousel jsem i Avast - ale system ok. Osobne bych to videl na nejaky hodne sikovny keyloger skryty v systemu. Jinak pri pouziti "klavesnice na obrazovce" tyto bugy nenastaly. Po nekolika restartech, respekt. vypinani PC, jsem prehodil klavesnici na jiny radic USB a klavesa WIN zacla fungovat normalne a CTRL porad spatne,avsak prerusovane. Tj. nekdy bylo potreba nekolik stisknuti, aby zamutoval zvuk a zase odmutoval, pokazde jiny pocet... po nekolika pokusech uz to nic nedela a chova se uplne standardne. Mam z toho hrozne divny pocit, uz tomu PC neverim, reinstall je samozrejme mozny,ale znacne zdlouhavy - mam tam spousty dat. Zkousel jsem googlit a nasel, ze to par lidem delalo taky,ale nikde kloudne reseni. Jsem ted v praci na ntb, jakmile budu doma, udelam log z RSIT. Jen kdyby nekoho neco napadlo... Omluvte pripadne moji neomalenost, ze jsem si o radu dovolil napsat sem. :)

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15717
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: WIN key vypina PC, left CTRl un/mutuje zvuk

#2 Příspěvek od JaRon »

ahoj,
skus nasledovne:
1. odinstalovat driver zvuk.karty - vycistit s CCleanerom - nainstalovat driver nanovo
2. prescanovat PC s AVPTool
3. vloz log RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

entony_buric
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 11 čer 2013 04:45

Re: WIN key vypina PC, left CTRl un/mutuje zvuk

#3 Příspěvek od entony_buric »

Diky za tipy. Vyzkousim. Nicmene se nedomnivam, ze by zvukovka mela co docineni s win klavesou, ktera vypina PC. Ale mozne je uz asi vsechno. :) Jinak jak jsem psal, vse se nyni chova naprosto normalne. Kazdopadne ta indispozice me hodne vystrasila....
AVP tool proskenoval a nic nenasel.
Prikladam log:
_________________________________________
Logfile of random's system information tool 1.09 (written by random/random)
Run by The Machine at 2013-06-11 17:39:03
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 63 GB (55%) free of 114 GB
Total RAM: 16348 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:10, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\trend micro\The Machine.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [GMouse] "C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE" /hide
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Verbatim GREEN BUTTON.lnk = C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://E:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{DA6EFB05-2536-4A7D-921A-469DE6E0DE70}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - e:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9431 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe"
"C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe" /a
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\GIGABYTE FORCE\GIGABYTE FORCE.exe" /hide
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\wuauclt.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
taskhost.exe C:\Windows\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\The Machine\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

=========Mozilla firefox=========

ProfilePath - C:\Users\The Machine\AppData\Roaming\Mozilla\Firefox\Profiles\cm0ay086.default-1366905023333

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-31 12446824]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-11-15 1156712]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-12-21 6326448]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-28 172168]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-28 400008]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-28 441992]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ipTray.exe]
C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-04 291608]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]
"GMouse"=C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [2011-11-08 667648]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"=grpconv -o []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe

C:\Users\The Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Verbatim GREEN BUTTON.lnk - C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-12 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-11 17:39:04 ----D---- C:\Program Files\trend micro
2013-06-11 17:39:03 ----D---- C:\rsit
2013-06-11 16:38:10 ----D---- C:\ProgramData\Kaspersky Lab
2013-06-11 00:02:45 ----D---- C:\Users\The Machine\AppData\Roaming\Wireshark
2013-06-10 23:57:58 ----D---- C:\Program Files (x86)\WinPcap
2013-06-10 23:57:41 ----D---- C:\Program Files\Wireshark
2013-06-10 23:54:44 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-06-10 22:44:16 ----A---- C:\Windows\system32\aswBoot.exe
2013-06-10 22:43:52 ----D---- C:\Program Files\AVAST Software
2013-06-10 22:43:33 ----D---- C:\ProgramData\AVAST Software
2013-06-10 22:15:36 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-29 12:44:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-29 12:44:37 ----A---- C:\Windows\system32\mshtml.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\consent.exe
2013-05-29 12:40:12 ----A---- C:\Windows\system32\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\appinfo.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\aaclient.dll
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-29 12:39:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-29 12:39:54 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-29 12:39:54 ----A---- C:\Windows\system32\smss.exe
2013-05-29 12:39:54 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-29 12:39:52 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\cdd.dll
2013-05-29 12:39:43 ----A---- C:\Windows\system32\win32k.sys
2013-05-29 12:39:41 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-26 17:36:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:01:45 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvIFR64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvFBC64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispgenco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-25 12:53:22 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-25 12:53:22 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-15 10:23:42 ----D---- C:\Users\The Machine\AppData\Roaming\Leadertech
2013-05-14 00:14:42 ----D---- C:\ProgramData\Steam
2013-05-12 15:43:36 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe

======List of files/folders modified in the last 1 month======

2013-06-11 17:39:06 ----D---- C:\Windows\Temp
2013-06-11 17:39:04 ----RD---- C:\Program Files
2013-06-11 17:38:23 ----D---- C:\Windows\system32\drivers
2013-06-11 17:38:17 ----D---- C:\Windows\system32\config
2013-06-11 17:38:15 ----SHD---- C:\System Volume Information
2013-06-11 16:38:10 ----HD---- C:\ProgramData
2013-06-11 16:37:45 ----D---- C:\Windows\inf
2013-06-11 16:33:42 ----D---- C:\Windows\System32
2013-06-11 16:33:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 16:29:04 ----A---- C:\Windows\SYSWOW64\log.txt
2013-06-11 16:28:01 ----A---- C:\IFRToolLog.txt
2013-06-11 16:26:56 ----D---- C:\Windows
2013-06-11 16:26:56 ----D---- C:\ProgramData\NVIDIA
2013-06-11 16:26:28 ----A---- C:\Users\The Machine\AppData\Roaming\Network Meter_Usage.ini
2013-06-11 16:25:19 ----D---- C:\Windows\SoftwareDistribution
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\uTorrent
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\TS3Client
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\AIMP3
2013-06-11 16:23:54 ----D---- C:\Windows\system32\NDF
2013-06-10 23:57:58 ----RD---- C:\Program Files (x86)
2013-06-10 23:57:58 ----D---- C:\Windows\SysWOW64
2013-06-10 23:57:49 ----SHD---- C:\Windows\Installer
2013-06-10 23:54:45 ----D---- C:\Windows\system32\Tasks
2013-06-10 23:36:42 ----D---- C:\Users\The Machine\AppData\Roaming\vlc
2013-06-10 22:26:57 ----D---- C:\Windows\Tasks
2013-06-10 22:26:57 ----D---- C:\Windows\SYSWOW64\wbem
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wfp
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wbem
2013-06-10 22:26:56 ----D---- C:\Windows\winsxs
2013-06-10 22:26:36 ----RSD---- C:\Windows\Media
2013-06-10 22:26:36 ----D---- C:\Windows\SYSWOW64\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\DriverStore
2013-06-10 22:26:36 ----D---- C:\Windows\system32\catroot2
2013-06-10 22:26:36 ----D---- C:\Program Files\Internet Explorer
2013-06-10 22:26:36 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-10 22:26:34 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-10 22:26:34 ----D---- C:\Windows\AppCompat
2013-06-10 22:26:32 ----RD---- C:\Program Files (x86)\Skype
2013-06-10 22:26:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-10 22:26:31 ----D---- C:\Windows\registration
2013-06-10 22:26:30 ----D---- C:\Windows\system32\catroot
2013-06-10 22:26:30 ----D---- C:\Users\The Machine\AppData\Roaming\Skype
2013-06-10 22:26:29 ----D---- C:\ProgramData\Skype
2013-06-10 21:58:06 ----D---- C:\Windows\Logs
2013-05-30 18:32:02 ----D---- C:\Windows\rescache
2013-05-30 18:08:35 ----RSD---- C:\Windows\assembly
2013-05-30 18:08:35 ----D---- C:\Windows\Microsoft.NET
2013-05-30 17:38:17 ----A---- C:\Windows\SYSWOW64\msvcsv60.dll
2013-05-29 12:58:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-29 12:58:18 ----D---- C:\Windows\system32\cs-CZ
2013-05-27 11:07:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-25 15:49:28 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-25 13:03:11 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-25 13:00:17 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-25 13:00:17 ----D---- C:\Windows\system32\en-US
2013-05-25 13:00:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-21 20:27:04 ----D---- C:\Users\The Machine\AppData\Roaming\NVIDIA
2013-05-19 22:47:28 ----D---- C:\Users\The Machine\AppData\Roaming\Tunngle
2013-05-19 21:33:24 ----D---- C:\ProgramData\Tunngle
2013-05-19 10:20:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvshext.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nvmctray.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-04 16152]
R0 mvs91xx;mvs91xx; C:\Windows\system32\DRIVERS\mvs91xx.sys [2011-11-11 316208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 GPCIDrv;GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [2010-02-04 14376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-06 4740456]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-04 355096]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-04 786200]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-10-25 96768]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-10-25 213504]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 cpuio;CPUIO Service; \??\C:\Windows\SysWOW64\Drivers\cpuiox64.sys []
S3 EfiInvoker;Efi Invoker Service; \??\C:\Windows\SysWOW64\Drivers\invoker64.sys [2013-03-08 13080]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-12 5353888]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-12-13 342528]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-12-21 1333424]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-01-11 128280]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-11-20 182088]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-01-11 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-01-11 277784]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-05-12 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-05-12 413472]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-02-26 3560800]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-01-11 363800]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-28 277640]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-26 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TunngleService;TunngleService; e:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15717
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: WIN key vypina PC, left CTRl un/mutuje zvuk

#4 Příspěvek od JaRon »

myslim, ze toto nebude AV problem ,,,
vidim to skor ako problem ovladacov prip. HW
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Odpovědět