Trosku omacky kolem. Vcera jsem pripojil PC "primo" na modem (O2 adsl). Pripojen byl asi pul dne a krome hrani strilecky online jsem nic nestahoval ani neinstaloval(To plati pro poslednich nekolik dnu). Ovsem prehledl jsem jednu pomerne dulezitou vec - zablokovany firewall. Najednou z niceho nic zacal vypadavat zvuk (jak jsem pozdeji zjistil, bylo to vlivem stlacovani leveho ctrl). CTRL mutoval a odmutoval vychozi zarizeni pro prehravani zvuku. Chtel jsem se podivat do WIN, co se deje a po shozeni aplikace pomoci klavesy WIN, nasledovalo regulerni vypnuti pc. Po restartu porad stejne, obnoveni systemu taky nepomohlo. Antiviry NOD, zkousel jsem i Avast - ale system ok. Osobne bych to videl na nejaky hodne sikovny keyloger skryty v systemu. Jinak pri pouziti "klavesnice na obrazovce" tyto bugy nenastaly. Po nekolika restartech, respekt. vypinani PC, jsem prehodil klavesnici na jiny radic USB a klavesa WIN zacla fungovat normalne a CTRL porad spatne,avsak prerusovane. Tj. nekdy bylo potreba nekolik stisknuti, aby zamutoval zvuk a zase odmutoval, pokazde jiny pocet... po nekolika pokusech uz to nic nedela a chova se uplne standardne. Mam z toho hrozne divny pocit, uz tomu PC neverim, reinstall je samozrejme mozny,ale znacne zdlouhavy - mam tam spousty dat. Zkousel jsem googlit a nasel, ze to par lidem delalo taky,ale nikde kloudne reseni. Jsem ted v praci na ntb, jakmile budu doma, udelam log z RSIT. Jen kdyby nekoho neco napadlo... Omluvte pripadne moji neomalenost, ze jsem si o radu dovolil napsat sem.
WIN key vypina PC, left CTRl un/mutuje zvuk
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
-
entony_buric
- Návštěvník

- Příspěvky: 2
- Registrován: 11 Črv 2013 04:45
WIN key vypina PC, left CTRl un/mutuje zvuk
Zdravim vsechny, prihodila se mi takova nemila vec.
Trosku omacky kolem. Vcera jsem pripojil PC "primo" na modem (O2 adsl). Pripojen byl asi pul dne a krome hrani strilecky online jsem nic nestahoval ani neinstaloval(To plati pro poslednich nekolik dnu). Ovsem prehledl jsem jednu pomerne dulezitou vec - zablokovany firewall. Najednou z niceho nic zacal vypadavat zvuk (jak jsem pozdeji zjistil, bylo to vlivem stlacovani leveho ctrl). CTRL mutoval a odmutoval vychozi zarizeni pro prehravani zvuku. Chtel jsem se podivat do WIN, co se deje a po shozeni aplikace pomoci klavesy WIN, nasledovalo regulerni vypnuti pc. Po restartu porad stejne, obnoveni systemu taky nepomohlo. Antiviry NOD, zkousel jsem i Avast - ale system ok. Osobne bych to videl na nejaky hodne sikovny keyloger skryty v systemu. Jinak pri pouziti "klavesnice na obrazovce" tyto bugy nenastaly. Po nekolika restartech, respekt. vypinani PC, jsem prehodil klavesnici na jiny radic USB a klavesa WIN zacla fungovat normalne a CTRL porad spatne,avsak prerusovane. Tj. nekdy bylo potreba nekolik stisknuti, aby zamutoval zvuk a zase odmutoval, pokazde jiny pocet... po nekolika pokusech uz to nic nedela a chova se uplne standardne. Mam z toho hrozne divny pocit, uz tomu PC neverim, reinstall je samozrejme mozny,ale znacne zdlouhavy - mam tam spousty dat. Zkousel jsem googlit a nasel, ze to par lidem delalo taky,ale nikde kloudne reseni. Jsem ted v praci na ntb, jakmile budu doma, udelam log z RSIT. Jen kdyby nekoho neco napadlo... Omluvte pripadne moji neomalenost, ze jsem si o radu dovolil napsat sem.
Trosku omacky kolem. Vcera jsem pripojil PC "primo" na modem (O2 adsl). Pripojen byl asi pul dne a krome hrani strilecky online jsem nic nestahoval ani neinstaloval(To plati pro poslednich nekolik dnu). Ovsem prehledl jsem jednu pomerne dulezitou vec - zablokovany firewall. Najednou z niceho nic zacal vypadavat zvuk (jak jsem pozdeji zjistil, bylo to vlivem stlacovani leveho ctrl). CTRL mutoval a odmutoval vychozi zarizeni pro prehravani zvuku. Chtel jsem se podivat do WIN, co se deje a po shozeni aplikace pomoci klavesy WIN, nasledovalo regulerni vypnuti pc. Po restartu porad stejne, obnoveni systemu taky nepomohlo. Antiviry NOD, zkousel jsem i Avast - ale system ok. Osobne bych to videl na nejaky hodne sikovny keyloger skryty v systemu. Jinak pri pouziti "klavesnice na obrazovce" tyto bugy nenastaly. Po nekolika restartech, respekt. vypinani PC, jsem prehodil klavesnici na jiny radic USB a klavesa WIN zacla fungovat normalne a CTRL porad spatne,avsak prerusovane. Tj. nekdy bylo potreba nekolik stisknuti, aby zamutoval zvuk a zase odmutoval, pokazde jiny pocet... po nekolika pokusech uz to nic nedela a chova se uplne standardne. Mam z toho hrozne divny pocit, uz tomu PC neverim, reinstall je samozrejme mozny,ale znacne zdlouhavy - mam tam spousty dat. Zkousel jsem googlit a nasel, ze to par lidem delalo taky,ale nikde kloudne reseni. Jsem ted v praci na ntb, jakmile budu doma, udelam log z RSIT. Jen kdyby nekoho neco napadlo... Omluvte pripadne moji neomalenost, ze jsem si o radu dovolil napsat sem.
Re: WIN key vypina PC, left CTRl un/mutuje zvuk
ahoj,
skus nasledovne:
1. odinstalovat driver zvuk.karty - vycistit s CCleanerom - nainstalovat driver nanovo
2. prescanovat PC s AVPTool
3. vloz log RSIT
skus nasledovne:
1. odinstalovat driver zvuk.karty - vycistit s CCleanerom - nainstalovat driver nanovo
2. prescanovat PC s AVPTool
3. vloz log RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
-
entony_buric
- Návštěvník

- Příspěvky: 2
- Registrován: 11 Črv 2013 04:45
Re: WIN key vypina PC, left CTRl un/mutuje zvuk
Diky za tipy. Vyzkousim. Nicmene se nedomnivam, ze by zvukovka mela co docineni s win klavesou, ktera vypina PC. Ale mozne je uz asi vsechno.
Jinak jak jsem psal, vse se nyni chova naprosto normalne. Kazdopadne ta indispozice me hodne vystrasila....
AVP tool proskenoval a nic nenasel.
Prikladam log:
_________________________________________
Logfile of random's system information tool 1.09 (written by random/random)
Run by The Machine at 2013-06-11 17:39:03
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 63 GB (55%) free of 114 GB
Total RAM: 16348 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:10, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\trend micro\The Machine.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [GMouse] "C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE" /hide
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Verbatim GREEN BUTTON.lnk = C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://E:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{DA6EFB05-2536-4A7D-921A-469DE6E0DE70}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - e:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9431 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe"
"C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe" /a
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\GIGABYTE FORCE\GIGABYTE FORCE.exe" /hide
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\wuauclt.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
taskhost.exe C:\Windows\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\The Machine\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
=========Mozilla firefox=========
ProfilePath - C:\Users\The Machine\AppData\Roaming\Mozilla\Firefox\Profiles\cm0ay086.default-1366905023333
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-31 12446824]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-11-15 1156712]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-12-21 6326448]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-28 172168]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-28 400008]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-28 441992]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ipTray.exe]
C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-04 291608]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]
"GMouse"=C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [2011-11-08 667648]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"=grpconv -o []
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
C:\Users\The Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Verbatim GREEN BUTTON.lnk - C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-12 442880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-06-11 17:39:04 ----D---- C:\Program Files\trend micro
2013-06-11 17:39:03 ----D---- C:\rsit
2013-06-11 16:38:10 ----D---- C:\ProgramData\Kaspersky Lab
2013-06-11 00:02:45 ----D---- C:\Users\The Machine\AppData\Roaming\Wireshark
2013-06-10 23:57:58 ----D---- C:\Program Files (x86)\WinPcap
2013-06-10 23:57:41 ----D---- C:\Program Files\Wireshark
2013-06-10 23:54:44 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-06-10 22:44:16 ----A---- C:\Windows\system32\aswBoot.exe
2013-06-10 22:43:52 ----D---- C:\Program Files\AVAST Software
2013-06-10 22:43:33 ----D---- C:\ProgramData\AVAST Software
2013-06-10 22:15:36 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-29 12:44:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-29 12:44:37 ----A---- C:\Windows\system32\mshtml.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\consent.exe
2013-05-29 12:40:12 ----A---- C:\Windows\system32\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\appinfo.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\aaclient.dll
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-29 12:39:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-29 12:39:54 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-29 12:39:54 ----A---- C:\Windows\system32\smss.exe
2013-05-29 12:39:54 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-29 12:39:52 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\cdd.dll
2013-05-29 12:39:43 ----A---- C:\Windows\system32\win32k.sys
2013-05-29 12:39:41 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-26 17:36:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:01:45 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvIFR64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvFBC64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispgenco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-25 12:53:22 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-25 12:53:22 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-15 10:23:42 ----D---- C:\Users\The Machine\AppData\Roaming\Leadertech
2013-05-14 00:14:42 ----D---- C:\ProgramData\Steam
2013-05-12 15:43:36 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
======List of files/folders modified in the last 1 month======
2013-06-11 17:39:06 ----D---- C:\Windows\Temp
2013-06-11 17:39:04 ----RD---- C:\Program Files
2013-06-11 17:38:23 ----D---- C:\Windows\system32\drivers
2013-06-11 17:38:17 ----D---- C:\Windows\system32\config
2013-06-11 17:38:15 ----SHD---- C:\System Volume Information
2013-06-11 16:38:10 ----HD---- C:\ProgramData
2013-06-11 16:37:45 ----D---- C:\Windows\inf
2013-06-11 16:33:42 ----D---- C:\Windows\System32
2013-06-11 16:33:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 16:29:04 ----A---- C:\Windows\SYSWOW64\log.txt
2013-06-11 16:28:01 ----A---- C:\IFRToolLog.txt
2013-06-11 16:26:56 ----D---- C:\Windows
2013-06-11 16:26:56 ----D---- C:\ProgramData\NVIDIA
2013-06-11 16:26:28 ----A---- C:\Users\The Machine\AppData\Roaming\Network Meter_Usage.ini
2013-06-11 16:25:19 ----D---- C:\Windows\SoftwareDistribution
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\uTorrent
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\TS3Client
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\AIMP3
2013-06-11 16:23:54 ----D---- C:\Windows\system32\NDF
2013-06-10 23:57:58 ----RD---- C:\Program Files (x86)
2013-06-10 23:57:58 ----D---- C:\Windows\SysWOW64
2013-06-10 23:57:49 ----SHD---- C:\Windows\Installer
2013-06-10 23:54:45 ----D---- C:\Windows\system32\Tasks
2013-06-10 23:36:42 ----D---- C:\Users\The Machine\AppData\Roaming\vlc
2013-06-10 22:26:57 ----D---- C:\Windows\Tasks
2013-06-10 22:26:57 ----D---- C:\Windows\SYSWOW64\wbem
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wfp
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wbem
2013-06-10 22:26:56 ----D---- C:\Windows\winsxs
2013-06-10 22:26:36 ----RSD---- C:\Windows\Media
2013-06-10 22:26:36 ----D---- C:\Windows\SYSWOW64\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\DriverStore
2013-06-10 22:26:36 ----D---- C:\Windows\system32\catroot2
2013-06-10 22:26:36 ----D---- C:\Program Files\Internet Explorer
2013-06-10 22:26:36 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-10 22:26:34 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-10 22:26:34 ----D---- C:\Windows\AppCompat
2013-06-10 22:26:32 ----RD---- C:\Program Files (x86)\Skype
2013-06-10 22:26:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-10 22:26:31 ----D---- C:\Windows\registration
2013-06-10 22:26:30 ----D---- C:\Windows\system32\catroot
2013-06-10 22:26:30 ----D---- C:\Users\The Machine\AppData\Roaming\Skype
2013-06-10 22:26:29 ----D---- C:\ProgramData\Skype
2013-06-10 21:58:06 ----D---- C:\Windows\Logs
2013-05-30 18:32:02 ----D---- C:\Windows\rescache
2013-05-30 18:08:35 ----RSD---- C:\Windows\assembly
2013-05-30 18:08:35 ----D---- C:\Windows\Microsoft.NET
2013-05-30 17:38:17 ----A---- C:\Windows\SYSWOW64\msvcsv60.dll
2013-05-29 12:58:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-29 12:58:18 ----D---- C:\Windows\system32\cs-CZ
2013-05-27 11:07:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-25 15:49:28 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-25 13:03:11 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-25 13:00:17 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-25 13:00:17 ----D---- C:\Windows\system32\en-US
2013-05-25 13:00:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-21 20:27:04 ----D---- C:\Users\The Machine\AppData\Roaming\NVIDIA
2013-05-19 22:47:28 ----D---- C:\Users\The Machine\AppData\Roaming\Tunngle
2013-05-19 21:33:24 ----D---- C:\ProgramData\Tunngle
2013-05-19 10:20:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvshext.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nvmctray.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-04 16152]
R0 mvs91xx;mvs91xx; C:\Windows\system32\DRIVERS\mvs91xx.sys [2011-11-11 316208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 GPCIDrv;GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [2010-02-04 14376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-06 4740456]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-04 355096]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-04 786200]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-10-25 96768]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-10-25 213504]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 cpuio;CPUIO Service; \??\C:\Windows\SysWOW64\Drivers\cpuiox64.sys []
S3 EfiInvoker;Efi Invoker Service; \??\C:\Windows\SysWOW64\Drivers\invoker64.sys [2013-03-08 13080]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-12 5353888]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-12-13 342528]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-12-21 1333424]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-01-11 128280]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-11-20 182088]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-01-11 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-01-11 277784]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-05-12 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-05-12 413472]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-02-26 3560800]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-01-11 363800]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-28 277640]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-26 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TunngleService;TunngleService; e:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
AVP tool proskenoval a nic nenasel.
Prikladam log:
_________________________________________
Logfile of random's system information tool 1.09 (written by random/random)
Run by The Machine at 2013-06-11 17:39:03
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 63 GB (55%) free of 114 GB
Total RAM: 16348 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:10, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\trend micro\The Machine.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [GMouse] "C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE" /hide
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1350028739-1489669248-537434932-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Verbatim GREEN BUTTON.lnk = C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://E:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{DA6EFB05-2536-4A7D-921A-469DE6E0DE70}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - e:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9431 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe"
"C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe" /a
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\GIGABYTE FORCE\GIGABYTE FORCE.exe" /hide
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\wuauclt.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
taskhost.exe C:\Windows\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\The Machine\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
=========Mozilla firefox=========
ProfilePath - C:\Users\The Machine\AppData\Roaming\Mozilla\Firefox\Profiles\cm0ay086.default-1366905023333
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-31 12446824]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-11-15 1156712]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-12-21 6326448]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-28 172168]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-28 400008]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-28 441992]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ipTray.exe]
C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-04 291608]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]
"GMouse"=C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [2011-11-08 667648]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"=grpconv -o []
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
C:\Users\The Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Verbatim GREEN BUTTON.lnk - C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-12 442880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-06-11 17:39:04 ----D---- C:\Program Files\trend micro
2013-06-11 17:39:03 ----D---- C:\rsit
2013-06-11 16:38:10 ----D---- C:\ProgramData\Kaspersky Lab
2013-06-11 00:02:45 ----D---- C:\Users\The Machine\AppData\Roaming\Wireshark
2013-06-10 23:57:58 ----D---- C:\Program Files (x86)\WinPcap
2013-06-10 23:57:41 ----D---- C:\Program Files\Wireshark
2013-06-10 23:54:44 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-06-10 22:44:16 ----A---- C:\Windows\system32\aswBoot.exe
2013-06-10 22:43:52 ----D---- C:\Program Files\AVAST Software
2013-06-10 22:43:33 ----D---- C:\ProgramData\AVAST Software
2013-06-10 22:15:36 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-29 12:44:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-29 12:44:37 ----A---- C:\Windows\system32\mshtml.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shell32.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\consent.exe
2013-05-29 12:40:12 ----A---- C:\Windows\system32\authui.dll
2013-05-29 12:40:12 ----A---- C:\Windows\system32\appinfo.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\mstscax.dll
2013-05-29 12:39:57 ----A---- C:\Windows\system32\aaclient.dll
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-29 12:39:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-29 12:39:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-29 12:39:54 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-29 12:39:54 ----A---- C:\Windows\system32\smss.exe
2013-05-29 12:39:54 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-29 12:39:52 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-29 12:39:45 ----A---- C:\Windows\system32\cdd.dll
2013-05-29 12:39:43 ----A---- C:\Windows\system32\win32k.sys
2013-05-29 12:39:41 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-26 17:36:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:01:45 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvIFR64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\NvFBC64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispgenco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvdispco6432018.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-25 12:53:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-25 12:53:22 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-25 12:53:22 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-15 10:23:42 ----D---- C:\Users\The Machine\AppData\Roaming\Leadertech
2013-05-14 00:14:42 ----D---- C:\ProgramData\Steam
2013-05-12 15:43:36 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
======List of files/folders modified in the last 1 month======
2013-06-11 17:39:06 ----D---- C:\Windows\Temp
2013-06-11 17:39:04 ----RD---- C:\Program Files
2013-06-11 17:38:23 ----D---- C:\Windows\system32\drivers
2013-06-11 17:38:17 ----D---- C:\Windows\system32\config
2013-06-11 17:38:15 ----SHD---- C:\System Volume Information
2013-06-11 16:38:10 ----HD---- C:\ProgramData
2013-06-11 16:37:45 ----D---- C:\Windows\inf
2013-06-11 16:33:42 ----D---- C:\Windows\System32
2013-06-11 16:33:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 16:29:04 ----A---- C:\Windows\SYSWOW64\log.txt
2013-06-11 16:28:01 ----A---- C:\IFRToolLog.txt
2013-06-11 16:26:56 ----D---- C:\Windows
2013-06-11 16:26:56 ----D---- C:\ProgramData\NVIDIA
2013-06-11 16:26:28 ----A---- C:\Users\The Machine\AppData\Roaming\Network Meter_Usage.ini
2013-06-11 16:25:19 ----D---- C:\Windows\SoftwareDistribution
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\uTorrent
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\TS3Client
2013-06-11 16:24:53 ----D---- C:\Users\The Machine\AppData\Roaming\AIMP3
2013-06-11 16:23:54 ----D---- C:\Windows\system32\NDF
2013-06-10 23:57:58 ----RD---- C:\Program Files (x86)
2013-06-10 23:57:58 ----D---- C:\Windows\SysWOW64
2013-06-10 23:57:49 ----SHD---- C:\Windows\Installer
2013-06-10 23:54:45 ----D---- C:\Windows\system32\Tasks
2013-06-10 23:36:42 ----D---- C:\Users\The Machine\AppData\Roaming\vlc
2013-06-10 22:26:57 ----D---- C:\Windows\Tasks
2013-06-10 22:26:57 ----D---- C:\Windows\SYSWOW64\wbem
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wfp
2013-06-10 22:26:57 ----D---- C:\Windows\system32\wbem
2013-06-10 22:26:56 ----D---- C:\Windows\winsxs
2013-06-10 22:26:36 ----RSD---- C:\Windows\Media
2013-06-10 22:26:36 ----D---- C:\Windows\SYSWOW64\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\migration
2013-06-10 22:26:36 ----D---- C:\Windows\system32\DriverStore
2013-06-10 22:26:36 ----D---- C:\Windows\system32\catroot2
2013-06-10 22:26:36 ----D---- C:\Program Files\Internet Explorer
2013-06-10 22:26:36 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-10 22:26:34 ----D---- C:\Windows\system32\CodeIntegrity
2013-06-10 22:26:34 ----D---- C:\Windows\AppCompat
2013-06-10 22:26:32 ----RD---- C:\Program Files (x86)\Skype
2013-06-10 22:26:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-10 22:26:31 ----D---- C:\Windows\registration
2013-06-10 22:26:30 ----D---- C:\Windows\system32\catroot
2013-06-10 22:26:30 ----D---- C:\Users\The Machine\AppData\Roaming\Skype
2013-06-10 22:26:29 ----D---- C:\ProgramData\Skype
2013-06-10 21:58:06 ----D---- C:\Windows\Logs
2013-05-30 18:32:02 ----D---- C:\Windows\rescache
2013-05-30 18:08:35 ----RSD---- C:\Windows\assembly
2013-05-30 18:08:35 ----D---- C:\Windows\Microsoft.NET
2013-05-30 17:38:17 ----A---- C:\Windows\SYSWOW64\msvcsv60.dll
2013-05-29 12:58:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-29 12:58:18 ----D---- C:\Windows\system32\cs-CZ
2013-05-27 11:07:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-25 15:49:28 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-25 13:03:11 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-25 13:00:17 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-25 13:00:17 ----D---- C:\Windows\system32\en-US
2013-05-25 13:00:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-21 20:27:04 ----D---- C:\Users\The Machine\AppData\Roaming\NVIDIA
2013-05-19 22:47:28 ----D---- C:\Users\The Machine\AppData\Roaming\Tunngle
2013-05-19 21:33:24 ----D---- C:\ProgramData\Tunngle
2013-05-19 10:20:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-12 23:42:27 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-12 23:42:27 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvshext.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nvmctray.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-04 16152]
R0 mvs91xx;mvs91xx; C:\Windows\system32\DRIVERS\mvs91xx.sys [2011-11-11 316208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-01-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 GPCIDrv;GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [2010-02-04 14376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-06 4740456]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-04 355096]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-04 786200]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-10-25 96768]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-10-25 213504]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 cpuio;CPUIO Service; \??\C:\Windows\SysWOW64\Drivers\cpuiox64.sys []
S3 EfiInvoker;Efi Invoker Service; \??\C:\Windows\SysWOW64\Drivers\invoker64.sys [2013-03-08 13080]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-12 5353888]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-12-13 342528]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-12-21 1333424]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-01-11 128280]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-11-20 182088]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-01-11 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-01-11 277784]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-05-12 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-05-12 413472]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-02-26 3560800]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-01-11 363800]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-28 277640]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-26 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TunngleService;TunngleService; e:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Re: WIN key vypina PC, left CTRl un/mutuje zvuk
myslim, ze toto nebude AV problem ,,,
vidim to skor ako problem ovladacov prip. HW
vidim to skor ako problem ovladacov prip. HW
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/

Přispějete na provoz fóra?