
ComboFix 14-01-16.03 - Marcel . 01. 2014 23:58:12.6.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.8094.5476 [GMT 1:00]
Running from: C:\Users\Marcel\Desktop\ComboFix.exe
AV: ESET Smart Security 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
* Resident AV is active
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files (x86)\Torntv 2\ToRNtv 2-bho.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_ctypes.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_elementtree.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_hashlib.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_multiprocessing.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_socket.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\_ssl.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\pyexpat.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\pysqlite2._sqlite.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\python27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\pythoncom27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\PyWinTypes27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\select.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\unicodedata.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32api.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32com.shell.shell.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32crypt.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32event.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32file.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32inet.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32pdh.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32pipe.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32process.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32profile.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32security.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\win32ts.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\windows._lib_cacheinvalidation.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._controls_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._core_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._gdi_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._html2.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._misc_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._windows_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wx._wizard.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxbase294u_net_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxbase294u_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxmsw294u_adv_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxmsw294u_core_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxmsw294u_html_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI68762\wxmsw294u_webview_vc90.dll
---- Previous Run -------
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_ctypes.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_elementtree.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_hashlib.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_multiprocessing.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_socket.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\_ssl.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\pyexpat.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\pysqlite2._sqlite.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\python27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\pythoncom27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\PyWinTypes27.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\select.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\unicodedata.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32api.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32com.shell.shell.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32crypt.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32event.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32file.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32inet.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32pdh.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32pipe.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32process.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32profile.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32security.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\win32ts.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\windows._lib_cacheinvalidation.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._controls_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._core_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._gdi_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._html2.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._misc_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._windows_.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wx._wizard.pyd
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxbase294u_net_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxbase294u_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxmsw294u_adv_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxmsw294u_core_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxmsw294u_html_vc90.dll
C:\Users\Marcel\AppData\Local\Temp\_MEI63322\wxmsw294u_webview_vc90.dll
((((((((((((((((((((((((( Files Created from 2013-12-20 to 2014-01-20 )))))))))))))))))))))))))))))))
2014-01-20 23:03:48 . 2014-01-20 23:03:48 -------- d-----w- C:\Users\Public\AppData\Local\temp
2014-01-20 23:03:48 . 2014-01-20 23:03:48 -------- d-----w- C:\Users\Default\AppData\Local\temp
2014-01-11 14:35:58 . 2014-01-11 14:35:58 -------- d-----w- C:\Users\Marcel\AppData\Roaming\Canon
2014-01-11 14:19:42 . 2014-01-11 14:19:42 -------- d-----w- C:\Program Files (x86)\Canon
2014-01-11 14:16:31 . 2014-01-11 14:16:31 -------- d--h--w- C:\Windows\system32\CanonMF Uninstaller Information
2014-01-11 14:16:30 . 2013-02-25 17:58:16 118272 ----a-w- C:\Windows\system32\CNCLSI44b.DLL
2014-01-11 14:16:30 . 2013-02-25 17:58:14 132096 ----a-w- C:\Windows\system32\CNCLSD44b.DLL
2014-01-11 14:16:30 . 2013-02-25 17:58:10 90624 ----a-w- C:\Windows\system32\CNCLSC44b.DLL
2014-01-11 14:16:30 . 2013-02-25 17:58:10 105472 ----a-w- C:\Windows\system32\CNCLST44b.DLL
2014-01-11 14:16:30 . 2013-02-25 17:58:06 189952 ----a-w- C:\Windows\system32\CNCLSU44b.DLL
2014-01-11 14:16:29 . 2013-02-25 17:58:04 374272 ----a-w- C:\Windows\system32\CNCC4700.DLL
2014-01-11 14:16:29 . 2013-02-25 17:57:52 152576 ----a-w- C:\Windows\system32\CNCE4700.DLL
2014-01-11 14:16:29 . 2013-02-25 17:57:50 118272 ----a-w- C:\Windows\system32\CNCI4700.DLL
2014-01-11 14:16:29 . 2013-02-25 17:57:46 134144 ----a-w- C:\Windows\system32\CNCL4700.DLL
2014-01-11 14:16:20 . 2012-08-09 11:59:00 1006080 ----a-w- C:\Windows\system32\CNAS0MOK.DLL
2014-01-11 14:16:17 . 2014-01-11 14:16:17 -------- d-----w- C:\Program Files\Canon
2014-01-09 16:30:59 . 2014-01-09 16:30:59 276576 ----a-w- C:\Windows\system32\drivers\snapman.sys
2014-01-09 16:30:52 . 2014-01-09 16:30:58 -------- d-----w- C:\Program Files (x86)\Common Files\Acronis
2014-01-06 19:23:36 . 2014-01-06 19:23:36 4558848 ----a-w- C:\Windows\SysWow64\GPhotos.scr
2014-01-05 15:44:46 . 2014-01-05 15:44:46 -------- d-----w- C:\Program Files (x86)\ICQ6Toolbar
2014-01-05 15:44:45 . 2014-01-05 15:44:46 -------- d-----w- C:\ProgramData\ICQ
2014-01-05 15:44:33 . 2014-01-20 23:03:55 -------- d-----w- C:\Users\Marcel\AppData\Roaming\ICQ
2014-01-05 15:44:31 . 2014-01-07 15:47:21 -------- d-----w- C:\Program Files (x86)\ICQ7.5
2014-01-04 04:44:22 . 2013-12-04 03:28:24 10315576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E84C446B-4C96-4F41-BCD0-A898863B78E0}\mpengine.dll
2014-01-03 18:22:54 . 2014-01-03 18:22:54 -------- d-----w- C:\Users\Marcel\voip
2013-12-31 17:53:10 . 2013-12-31 17:53:10 -------- d-----w- C:\Users\Marcel\AppData\Local\Setup Integrity Check
2013-12-31 11:43:54 . 2013-12-31 11:43:54 -------- d-----w- C:\Users\Marcel\AppData\Roaming\InstallShield
2013-12-30 13:40:15 . 2013-12-30 13:40:26 -------- d-----w- C:\Users\Marcel\AppData\Local\NVIDIA Corporation
2013-12-30 13:40:00 . 2013-12-05 08:42:30 39200 ----a-w- C:\Windows\system32\drivers\nvvad64v.sys
2013-12-30 13:40:00 . 2013-12-05 08:42:26 32544 ----a-w- C:\Windows\SysWow64\nvaudcap32v.dll
2013-12-30 13:39:09 . 2013-12-30 13:40:38 -------- d-----w- C:\Users\Marcel\AppData\Local\NVIDIA
2013-12-30 13:37:38 . 2013-12-10 02:13:11 982232 ----a-w- C:\Windows\SysWow64\nvspcap.dll
2013-12-30 13:37:38 . 2013-12-10 02:13:01 1100248 ----a-w- C:\Windows\system32\nvspcap64.dll
2013-12-30 13:37:25 . 2013-12-30 13:37:25 -------- d-----w- C:\Program Files (x86)\AGEIA Technologies
2013-12-30 13:37:16 . 2013-12-30 13:37:16 -------- d-----w- C:\Windows\SysWow64\NV
2013-12-30 13:37:16 . 2013-12-30 13:37:16 -------- d-----w- C:\Windows\system32\NV
2013-12-29 14:26:33 . 2013-12-29 14:26:33 -------- d-----w- C:\found.000
2013-12-27 20:29:02 . 2013-12-27 20:29:02 -------- d-----w- C:\cestina
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2014-01-20 23:04:40 . 2012-11-22 17:21:01 78848 ----a-w- C:\Windows\KMSEmulator.exe
2013-12-11 18:06:21 . 2012-12-05 14:42:54 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 18:06:21 . 2012-12-05 14:42:54 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-11-26 11:25:52 . 2010-11-21 03:27:21 267936 ------w- C:\Windows\system32\MpSigStub.exe
2013-11-14 11:58:17 . 2012-11-19 16:16:44 1436528 ----a-w- C:\Windows\system32\nvumdshimx.dll
2013-11-14 11:58:16 . 2013-01-29 20:49:48 1242400 ----a-w- C:\Windows\SysWow64\nvumdshim.dll
2013-11-14 11:58:11 . 2012-11-19 16:16:44 141336 ----a-w- C:\Windows\SysWow64\nvinit.dll
2013-11-14 11:58:01 . 2012-11-19 16:16:44 3069608 ----a-w- C:\Windows\system32\nvapi64.dll
2013-11-11 15:02:02 . 2012-11-19 16:17:00 6674208 ----a-w- C:\Windows\system32\nvcpl.dll
2013-11-11 15:02:02 . 2012-11-19 16:17:00 3490080 ----a-w- C:\Windows\system32\nvsvc64.dll
2013-11-11 15:01:59 . 2012-11-19 16:17:00 922912 ----a-w- C:\Windows\system32\nvvsvc.exe
2013-11-11 15:01:59 . 2012-11-19 16:17:00 67072 ----a-w- C:\Windows\system32\nv3dappshextr.dll
2013-11-11 15:01:59 . 2012-11-19 16:17:00 63776 ----a-w- C:\Windows\system32\nvshext.dll
2013-11-11 15:01:59 . 2012-11-19 16:17:00 2559776 ----a-w- C:\Windows\system32\nvsvcr.dll
2013-11-11 15:01:59 . 2012-11-19 16:17:00 219424 ----a-w- C:\Windows\system32\nvmctray.dll
2013-11-11 15:01:59 . 2012-11-19 16:17:00 1065248 ----a-w- C:\Windows\system32\nv3dappshext.dll
2013-11-11 15:01:59 . 2012-11-19 16:16:59 598304 ----a-w- C:\Windows\SysWow64\oemdspif.dll
2013-11-11 15:01:58 . 2012-11-19 16:17:00 3467927 ----a-w- C:\Windows\system32\nvcoproc.bin
2013-10-24 19:28:00 . 2013-10-24 19:28:00 1115704 ----a-w- C:\Windows\SysWow64\O2CPlayer.OCX
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
2013-08-15 08:08:56 314264 ----a-w- C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{82E1477C-B154-48D3-9891-33D83C26BCD3}"= "C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll" [2013-08-15 08:08:56 300952]
[HKEY_CLASSES_ROOT\clsid\{82e1477c-b154-48d3-9891-33d83c26bcd3}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 10:46:46 3673728]
"PC Suite Tray"="C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 12:10:30 1516632]
"GoogleDriveSync"="C:\Program Files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 14:47:44 20203904]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 17:03:40 152872]
"KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe" [2013-09-04 10:16:40 1564528]
"SRDownloader"="C:\Users\Marcel\Downloads\SRDownloader (1).exe" [2013-03-03 17:09:42 905728]
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe" [2013-11-14 15:42:42 20584608]
"ICQ"="C:\Program Files (x86)\ICQ7.5\ICQ.exe" [2011-08-01 08:28:16 124480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2011-12-05 10:14:29 291096]
"LockKey"="C:\Program Files (x86)\LockKey\LockKey.exe" [2011-08-26 04:43:44 337776]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-30 04:04:54 284440]
"331BigDog"="C:\Program Files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 08:06:58 548864]
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 21:06:36 958576]
"RemoteControl10"="C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [2010-02-03 08:08:56 87336]
"Intelligent Touchpad"="C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe" [2011-12-08 19:12:40 291272]
"YouCam Mirage"="C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-29 07:29:36 136488]
"YouCam Tray"="C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-29 07:29:36 228448]
"UpdateP2GShortCut"="C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-27 00:35:56 222504]
"VeriFaceManager"="C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe" [2012-11-19 16:42:22 329056]
"UpdatePRCShortCut"="C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-14 00:38:24 222504]
"UnlockerAssistant"="C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" [2010-07-04 19:51:26 17408]
"KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-09-04 10:16:42 311152]
"tvncontrol"="C:\Program Files (x86)\ShowMyPCService\tvnserver.exe" [2010-07-08 13:28:56 815704]
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 07:16:26 254336]
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - C:\Users\Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]
Intel(R) Turbo Boost Technology Monitor 2.6.lnk - C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe [2012-5-30 207400]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe [2011-12-23 1344288]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\Windows\SysWOW64\nvinit.dll C:\Windows\SysWOW64\nvinit.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
R0 iohslij;iohslij;C:\Windows\system32\drivers\hwkvjy.sys;C:\Windows\SYSNATIVE\drivers\hwkvjy.sys [x]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 ICM_UpdaterService;ICM_UpdaterService Disp;C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe;C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [x]
R2 NSDSvc;Fast boot service of lenovo;C:\Windows\System32\NSDSvc.exe;C:\Windows\SYSNATIVE\NSDSvc.exe [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 ALSysIO;ALSysIO;C:\Users\Marcel\AppData\Local\Temp\ALSysIO64.sys;C:\Users\Marcel\AppData\Local\Temp\ALSysIO64.sys [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;C:\Windows\system32\DRIVERS\amppal.sys;C:\Windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;C:\Windows\system32\drivers\bcbtums.sys;C:\Windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;C:\Windows\system32\drivers\btwampfl.sys;C:\Windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 BTWDPAN;Bluetooth Personal Area Network;C:\Windows\system32\DRIVERS\btwdpan.sys;C:\Windows\SYSNATIVE\DRIVERS\btwdpan.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys;C:\Windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\system32\DRIVERS\ssudbus.sys;C:\Windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 HTCAND64;HTC Device Driver;C:\Windows\system32\Drivers\ANDROIDUSB.sys;C:\Windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;C:\Windows\system32\DRIVERS\htcnprot.sys;C:\Windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\Windows\system32\drivers\intelaud.sys;C:\Windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys;C:\Windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 slicedisk.sys;slicedisk.sys;C:\Windows\system32\slicedisk.sys;C:\Windows\SYSNATIVE\slicedisk.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\system32\DRIVERS\ssudmdm.sys;C:\Windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys;C:\Windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys;C:\Windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.6;C:\Program Files\Intel\TurboBoost\TurboBoost.exe;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;C:\Windows\system32\Wat\WatAdminSvc.exe;C:\Windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;C:\Windows\system32\DRIVERS\wsvd.sys;C:\Windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
S0 HybridDisk;HybridDisk;C:\Windows\System32\DRIVERS\HybridDiskX64.sys;C:\Windows\SYSNATIVE\DRIVERS\HybridDiskX64.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\system32\DRIVERS\iusb3hcs.sys;C:\Windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 LHDmgr;LHDmgr;C:\Windows\System32\DRIVERS\LhdX64.sys;C:\Windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 NSD;NSD;C:\Windows\system32\drivers\nsd.sys;C:\Windows\SYSNATIVE\drivers\nsd.sys [x]
S0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpciflt.sys;C:\Windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ehdrv;ehdrv;C:\Windows\system32\DRIVERS\ehdrv.sys;C:\Windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 hybridcfile;hybridcfile;C:\Windows\system32\DRIVERS\HybridCFileX64.sys;C:\Windows\SYSNATIVE\DRIVERS\HybridCFileX64.sys [x]
S1 LUMDriver;LUMDriver;C:\Windows\system32\drivers\LUMDriver.sys;C:\Windows\SYSNATIVE\drivers\LUMDriver.sys [x]
S1 Nsdfltr;Nsdfltr;C:\Windows\system32\drivers\Nsdfltr.sys;C:\Windows\SYSNATIVE\drivers\Nsdfltr.sys [x]
S2 Active@ Disk Monitor;Active@ Disk Monitor;C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe;C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 eamonm;eamonm;C:\Windows\system32\DRIVERS\eamonm.sys;C:\Windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe;C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 epfwwfp;epfwwfp;C:\Windows\system32\DRIVERS\epfwwfp.sys;C:\Windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S2 HTCMonitorService;HTCMonitorService;C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe;C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [x]
S2 ICQ Service;ICQ Service;C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe;C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe;C:\Program Files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NvNetworkService;NVIDIA Network Service;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PassThru Service;Internet Pass-Through Service;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe;C:\Program Files (x86)\Skype\Updater\Updater.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys;C:\Windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 tvnserver;TightVNC Server;C:\Program Files (x86)\ShowMyPCService\tvnserver.exe;C:\Program Files (x86)\ShowMyPCService\tvnserver.exe [x]
S2 Update qualitink;Update qualitink;C:\Program Files (x86)\qualitink\updatequalitink.exe;C:\Program Files (x86)\qualitink\updatequalitink.exe [x]
S2 Util qualitink;Util qualitink;C:\Program Files (x86)\qualitink\bin\utilqualitink.exe;C:\Program Files (x86)\qualitink\bin\utilqualitink.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe;C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;C:\Windows\system32\DRIVERS\AcpiVpc.sys;C:\Windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;C:\Windows\system32\DRIVERS\AMPPAL.sys;C:\Windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\system32\DRIVERS\clwvd.sys;C:\Windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys;C:\Windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 hswpan;WPAN Driver;C:\Windows\system32\DRIVERS\hswpan.sys;C:\Windows\SYSNATIVE\DRIVERS\hswpan.sys [x]
S3 IntcDAud;Intel(R) Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys;C:\Windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\iusb3hub.sys;C:\Windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\system32\DRIVERS\iusb3xhc.sys;C:\Windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 iwdbus;IWD Bus Enumerator;C:\Windows\system32\DRIVERS\iwdbus.sys;C:\Windows\SYSNATIVE\DRIVERS\iwdbus.sys [x]
S3 JMCR;JMCR;C:\Windows\system32\DRIVERS\jmcr.sys;C:\Windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys;C:\Windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:\Windows\system32\drivers\nvvad64v.sys;C:\Windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 vm331avs;Digital Camera 1;C:\Windows\system32\Drivers\vm331avs.sys;C:\Windows\SYSNATIVE\Drivers\vm331avs.sys [x]
Contents of the 'Scheduled Tasks' folder
2014-01-20 C:\Windows\Tasks\Adobe Flash Player Updater.job
- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-05 14:42:55 . 2013-12-11 18:06:21]
2014-01-20 C:\Windows\Tasks\AutoKMS.job
- C:\Windows\AutoKMS.exe [2012-11-22 17:21:25 . 2012-11-22 17:21:25]
2014-01-20 C:\Windows\Tasks\AutoKMSDaily.job
- C:\Windows\AutoKMS.exe [2012-11-22 17:21:25 . 2012-11-22 17:21:25]
2014-01-19 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3955068742-157067115-1406957638-1002Core.job
- C:\Users\Marcel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-16 07:13:44 . 2012-11-16 07:13:39]
2014-01-19 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3955068742-157067115-1406957638-1002UA.job
- C:\Users\Marcel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-16 07:13:44 . 2012-11-16 07:13:39]
2014-01-20 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-19 16:43:42 . 2012-11-19 16:43:40]
2014-01-20 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-19 16:43:42 . 2012-11-19 16:43:40]
2014-01-20 C:\Windows\Tasks\Torntv 2-codedownloader.job
- C:\Program Files (x86)\Torntv 2\Torntv 2-codedownloader.exe [2013-09-25 21:21:12 . 2013-09-25 21:21:12]
2014-01-20 C:\Windows\Tasks\Torntv 2-enabler.job
- C:\Program Files (x86)\Torntv 2\Torntv 2-enabler.exe [2013-09-25 21:21:20 . 2013-12-25 10:21:03]
2014-01-20 C:\Windows\Tasks\Torntv 2-updater.job
- C:\Program Files (x86)\Torntv 2\Torntv 2-updater.exe [2013-09-25 21:21:23 . 2013-09-25 21:21:23]
--------- X64 Entries -----------
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 164016 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 164016 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 164016 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 164016 ----a-w- C:\Users\Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47:48 778704 ----a-w- C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-11-19 16:42:24 1508192 ----a-w- C:\Windows\System32\IcnOvrly.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"SynLenovoGestureMgr"="C:\Program Files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe" [BU]
"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-27 13:28:28 12343400]
"RtHDVBg_Dolby"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" [2011-11-15 11:18:24 1156712]
"OnekeyStudio"="C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" [2012-11-19 16:41:08 789856]
"UpdatePRCShortCut"="C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-14 00:38:24 222504]
"Energy Management"="C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-11-19 16:43:57 8076848]
"EnergyUtility"="C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe" [2012-11-19 16:43:57 6199344]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2011-01-12 15:41:26 2918656]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [2012-10-10 01:22:24 171040]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2012-10-10 01:22:28 399392]
"Persistence"="C:\Windows\system32\igfxpers.exe" [2012-10-10 01:22:30 441888]
"BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 13:54:26 112512]
"Autodesk Sync"="C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe" [2012-02-05 22:01:28 415680]
"Nvtmru"="C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 11:58:33 1028384]
"ShadowPlay"="C:\Windows\system32\nvspcap64.dll" [2013-12-10 02:13:01 1100248]
"NvBackend"="C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 02:15:27 2279712]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 01:39:57 168960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\Windows\System32\nvinitx.dll c:\Windows\System32\nvinitx.dll c:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll
------- Supplementary Scan -------
uStart Page = hxxp://start.icq.com/
uLocal Page = C:\Windows\system32\blank.htm
mLocal Page = C:\Windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200
IE: E&xportovať do programu Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
IE: Od&oslať do programu OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
IE: Stáhnout pomocí &BitSpiritu - C:\Program Files (x86)\BitSpirit\bsurl.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.100.1
- - - - ORPHANS REMOVED - - - -
BHO-{11111111-1111-1111-1111-110311551178} - C:\Program Files (x86)\Torntv 2\Torntv 2-bho.dll
BHO-{73ad5d47-66e5-4127-80ca-c0eedabafbcc} - (no file)
Toolbar-Locked - (no file)
AddRemove-FIFA 13 CZ_is1 - G:\Hry\FIFA 13\unins000.exe