Trojský kůň

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Trojský kůň

#1 Příspěvek od mafka »

Zdravím,
po delší době jsem opět nucen využít Vaše služby :)
Při instalací věciček na nové ntb mi McAfee firewall zatruhlil trojana, tak bych Vás chtěl poprosit o kontrolu logu, zda je vše ok, nebo tu mám ještě nějaké breberky :) .
Předem mockrát děkuji za veškerou pomoc a přikládám log z RSITu.

pozn: Kvůli délce přikládám do dvou zpráv log


Logfile of random's system information tool 1.08 (written by random/random)
Run by Jiří at 2014-04-21 22:12:44
Microsoft Windows 8
System drive C: has 327 GB (86%) free of 382 GB
Total RAM: 8078 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:19, on 21. 4. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKUS\S-1-5-18\..\RunOnce: [Application Restart #0] C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe /Crashed (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Application Restart #0] C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe /Crashed (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\P4G\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee OOBE Service2 (McOobeSv2) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12271 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskhostex.exe
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ASUS\P4G\InsOnSrv.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
"C:\Program Files\ASUS\P4G\InsOnWMI.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\windows\system32\mfevtps.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
KBFiltr.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui /runkey
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\RuntimeBroker.exe -Embedding

"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Jiří\Downloads\RSITx64.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-12 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-12 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-11-21 171064]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-11-21 399416]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-12 13263072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-12-18 40312]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
"mcpltui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2014-01-28 537992]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-03 364544]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-08 95192]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-12 3854640]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-11-21 441344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Re: Trojský kůň

#2 Příspěvek od mafka »

======List of files/folders created in the last 1 months======

2014-04-21 22:12:45 ----D---- C:\Program Files\trend micro
2014-04-21 22:12:44 ----D---- C:\rsit
2014-04-21 22:00:18 ----A---- C:\Windows\AutoKMS.ini
2014-04-21 21:55:17 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2014-04-21 21:54:50 ----D---- C:\Windows\PCHEALTH
2014-04-21 21:54:50 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2014-04-21 21:52:27 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-04-21 21:52:03 ----D---- C:\Program Files\Microsoft Office
2014-04-21 21:51:51 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-04-21 21:51:38 ----RHD---- C:\MSOCache
2014-04-21 20:29:11 ----A---- C:\Windows\system32\drivers\HipShieldK.sys
2014-04-21 19:49:59 ----D---- C:\Program Files\CCleaner
2014-04-21 19:35:47 ----D---- C:\Windows\AutoKMS
2014-04-21 19:30:53 ----D---- C:\Users\Jiří\AppData\Roaming\uTorrent
2014-04-21 18:50:23 ----D---- C:\Users\Jiří\AppData\Roaming\DAEMON Tools Lite
2014-04-21 18:49:42 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-04-19 17:41:57 ----D---- C:\Users\Jiří\AppData\Roaming\OpenOffice
2014-04-15 14:38:34 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-04-15 14:38:34 ----A---- C:\Windows\system32\comctl32.dll
2014-04-15 14:37:56 ----N---- C:\Windows\system32\MpSigStub.exe
2014-04-15 14:33:24 ----A---- C:\Windows\system32\WSService.dll
2014-04-15 14:33:24 ----A---- C:\Windows\system32\sppsvc.exe
2014-04-15 14:33:23 ----A---- C:\Windows\system32\sppobjs.dll
2014-04-15 14:33:22 ----A---- C:\Windows\system32\WinSetupUI.dll
2014-04-15 14:33:21 ----A---- C:\Windows\system32\sppc.dll
2014-04-15 14:33:20 ----A---- C:\Windows\SYSWOW64\sppc.dll
2014-04-15 14:33:20 ----A---- C:\Windows\system32\WSSync.dll
2014-04-15 14:33:20 ----A---- C:\Windows\system32\sppwinob.dll
2014-04-15 14:33:19 ----A---- C:\Windows\SYSWOW64\WSSync.dll
2014-04-15 14:33:19 ----A---- C:\Windows\system32\WSClient.dll
2014-04-15 14:33:18 ----A---- C:\Windows\system32\drivers\dam.sys
2014-04-15 14:33:17 ----A---- C:\Windows\SYSWOW64\WSClient.dll
2014-04-15 14:33:15 ----A---- C:\Windows\system32\setupcln.dll
2014-04-15 14:33:13 ----A---- C:\Windows\SYSWOW64\OEMLicense.dll
2014-04-15 14:33:12 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2014-04-15 14:32:46 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-04-15 14:32:46 ----A---- C:\Windows\system32\msxml3.dll
2014-04-15 14:32:45 ----A---- C:\Windows\system32\drivers\afd.sys
2014-04-15 14:32:44 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-04-15 14:32:44 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2014-04-15 14:32:44 ----A---- C:\Windows\system32\BFE.DLL
2014-04-13 18:27:47 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-04-13 18:27:47 ----A---- C:\Windows\system32\imagehlp.dll
2014-04-13 17:53:30 ----A---- C:\Windows\system32\dwmcore.dll
2014-04-13 17:53:29 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-04-13 17:53:29 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2014-04-13 17:53:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-04-13 17:53:29 ----A---- C:\Windows\explorer.exe
2014-04-13 17:53:27 ----A---- C:\Windows\system32\samsrv.dll
2014-04-13 17:53:27 ----A---- C:\Windows\system32\mfcore.dll
2014-04-13 17:53:26 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2014-04-13 17:53:26 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-04-13 17:53:25 ----A---- C:\Windows\system32\winload.exe
2014-04-13 17:53:24 ----A---- C:\Windows\system32\winresume.exe
2014-04-13 17:53:24 ----A---- C:\Windows\system32\vds.exe
2014-04-13 17:53:23 ----A---- C:\Windows\SYSWOW64\mscms.dll
2014-04-13 17:53:23 ----A---- C:\Windows\system32\mscms.dll
2014-04-13 17:53:23 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2014-04-13 17:53:23 ----A---- C:\Windows\system32\audiosrv.dll
2014-04-13 17:53:22 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2014-04-13 17:53:22 ----A---- C:\Windows\system32\samlib.dll
2014-04-13 17:53:22 ----A---- C:\Windows\system32\MbaeParserTask.exe
2014-04-13 17:53:22 ----A---- C:\Windows\system32\DeviceSetupManager.dll
2014-04-13 17:53:19 ----A---- C:\Windows\SYSWOW64\samlib.dll
2014-04-13 17:53:19 ----A---- C:\Windows\system32\vdsutil.dll
2014-04-13 17:53:18 ----A---- C:\Windows\system32\drivers\BthAvrcpTg.sys
2014-04-13 17:53:13 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-04-13 17:53:02 ----A---- C:\Windows\system32\shell32.dll
2014-04-13 17:53:01 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-04-13 17:52:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-04-13 17:52:59 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-04-13 17:52:57 ----A---- C:\Windows\system32\NotificationUI.exe
2014-04-13 17:52:57 ----A---- C:\Windows\system32\mstscax.dll
2014-04-13 17:52:56 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-04-13 17:52:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-04-13 17:52:54 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-04-13 17:52:53 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2014-04-13 17:52:53 ----A---- C:\Windows\system32\WSShared.dll
2014-04-13 17:52:53 ----A---- C:\Windows\system32\WSDApi.dll
2014-04-13 17:52:53 ----A---- C:\Windows\system32\drivers\storport.sys
2014-04-13 17:52:53 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-04-13 17:52:52 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-04-13 17:52:51 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-04-13 17:52:51 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-04-13 17:52:50 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-13 17:52:50 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-13 17:50:56 ----A---- C:\Windows\system32\wuaueng.dll
2014-04-13 17:50:54 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-04-13 17:50:54 ----A---- C:\Windows\system32\wuapi.dll
2014-04-13 17:50:54 ----A---- C:\Windows\system32\oleaut32.dll
2014-04-13 17:50:54 ----A---- C:\Windows\system32\clusapi.dll
2014-04-13 17:50:53 ----A---- C:\Windows\system32\wucltux.dll
2014-04-13 17:50:53 ----A---- C:\Windows\system32\resutils.dll
2014-04-13 17:50:53 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-04-13 17:50:52 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-04-13 17:50:52 ----A---- C:\Windows\SYSWOW64\resutils.dll
2014-04-13 17:50:52 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-04-13 17:50:52 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2014-04-13 17:50:51 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-04-13 17:50:51 ----A---- C:\Windows\system32\wuwebv.dll
2014-04-13 17:50:51 ----A---- C:\Windows\system32\wudriver.dll
2014-04-13 17:50:51 ----A---- C:\Windows\system32\wuauclt.exe
2014-04-13 17:50:51 ----A---- C:\Windows\system32\storewuauth.dll
2014-04-13 17:50:51 ----A---- C:\Windows\system32\drivers\spaceport.sys
2014-04-13 17:50:50 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-04-13 17:50:50 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-04-13 17:50:50 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-04-13 17:50:50 ----A---- C:\Windows\system32\wuapp.exe
2014-04-13 17:48:43 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2014-04-13 17:48:41 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2014-04-13 17:48:40 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2014-04-13 17:48:40 ----A---- C:\Windows\system32\UIAutomationCore.dll
2014-04-13 17:48:39 ----A---- C:\Windows\system32\ubpm.dll
2014-04-13 17:48:39 ----A---- C:\Windows\system32\drivers\tpm.sys
2014-04-13 17:48:38 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2014-04-13 17:48:38 ----A---- C:\Windows\system32\wups2.dll
2014-04-13 17:48:38 ----A---- C:\Windows\system32\wups.dll
2014-04-13 17:48:38 ----A---- C:\Windows\system32\kerberos.dll
2014-04-13 17:48:38 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-04-13 17:48:37 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-04-13 17:48:37 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-04-13 17:48:37 ----A---- C:\Windows\system32\drivers\crashdmp.sys
2014-04-13 17:48:23 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2014-04-13 17:48:22 ----A---- C:\Windows\system32\msftedit.dll
2014-04-13 17:48:21 ----A---- C:\Windows\system32\localspl.dll
2014-04-13 17:48:20 ----A---- C:\Windows\SYSWOW64\winmmbase.dll
2014-04-13 17:48:20 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-04-13 17:48:20 ----A---- C:\Windows\SYSWOW64\WerFault.exe
2014-04-13 17:48:20 ----A---- C:\Windows\system32\wwansvc.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\wwanconn.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\WinSCard.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\winmmbase.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\winmm.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\WerFault.exe
2014-04-13 17:48:20 ----A---- C:\Windows\system32\wcmsvc.dll
2014-04-13 17:48:20 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-04-13 17:48:20 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-04-13 17:48:19 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-04-13 17:48:19 ----A---- C:\Windows\system32\drivers\sdbus.sys
2014-04-13 17:48:19 ----A---- C:\Windows\system32\drivers\msgpioclx.sys
2014-04-13 17:48:19 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2014-04-13 17:48:19 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2014-04-13 17:48:18 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-04-13 17:48:18 ----A---- C:\Windows\system32\wwanmm.dll
2014-04-13 17:48:18 ----A---- C:\Windows\system32\Wwanadvui.dll
2014-04-13 17:48:18 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-04-13 17:48:18 ----A---- C:\Windows\system32\wcmcsp.dll
2014-04-13 17:48:18 ----A---- C:\Windows\system32\openfiles.exe
2014-04-13 17:48:18 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-04-13 17:48:17 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-04-13 17:48:17 ----A---- C:\Windows\SYSWOW64\openfiles.exe
2014-04-13 17:48:17 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-04-13 17:48:17 ----A---- C:\Windows\SYSWOW64\LocationApi.dll
2014-04-13 17:48:17 ----A---- C:\Windows\system32\nshwfp.dll
2014-04-13 17:48:17 ----A---- C:\Windows\system32\LocationApi.dll
2014-04-13 17:48:17 ----A---- C:\Windows\system32\drivers\udfs.sys
2014-04-13 17:48:14 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-04-13 17:47:25 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2014-04-13 17:47:25 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2014-04-13 17:47:25 ----A---- C:\Windows\system32\SHCore.dll
2014-04-13 17:47:25 ----A---- C:\Windows\system32\MPSSVC.dll
2014-04-13 17:47:25 ----A---- C:\Windows\system32\FirewallAPI.dll
2014-04-13 17:47:24 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-04-13 17:47:24 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-04-13 17:47:24 ----A---- C:\Windows\system32\WebClnt.dll
2014-04-13 17:47:24 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2014-04-13 17:47:24 ----A---- C:\Windows\system32\drivers\disk.sys
2014-04-13 17:47:24 ----A---- C:\Windows\system32\davclnt.dll
2014-04-13 17:46:34 ----D---- C:\Users\Jiří\AppData\Roaming\Identities
2014-04-13 17:43:12 ----A---- C:\Windows\SYSWOW64\msctf.dll
2014-04-13 17:43:12 ----A---- C:\Windows\system32\msctf.dll
2014-04-13 17:43:11 ----A---- C:\Windows\system32\shdocvw.dll
2014-04-13 17:43:11 ----A---- C:\Windows\system32\SettingSync.dll
2014-04-13 17:43:11 ----A---- C:\Windows\system32\mbsmsapi.dll
2014-04-13 17:43:10 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-04-13 17:43:10 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2014-04-13 17:43:10 ----A---- C:\Windows\SYSWOW64\mbsmsapi.dll
2014-04-13 17:43:10 ----A---- C:\Windows\system32\SettingSyncInfo.dll
2014-04-13 17:43:05 ----A---- C:\Windows\SYSWOW64\wvc.dll
2014-04-13 17:43:05 ----A---- C:\Windows\SYSWOW64\wdc.dll
2014-04-13 17:43:05 ----A---- C:\Windows\system32\wvc.dll
2014-04-13 17:43:05 ----A---- C:\Windows\system32\wdc.dll
2014-04-13 17:37:15 ----A---- C:\Windows\SYSWOW64\SHORTCUT.INI
2014-04-13 17:34:29 ----A---- C:\Windows\SYSWOW64\REMOTEDEVICE.INI
2014-04-13 17:11:48 ----RD---- C:\Windows\BrowserChoice
2014-04-13 16:20:43 ----D---- C:\Windows\system32\MRT
2014-04-13 16:20:41 ----A---- C:\Windows\system32\MRT.exe
2014-04-12 20:44:42 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2014-04-12 20:44:42 ----A---- C:\Windows\system32\drivers\UCX01000.SYS
2014-04-12 20:44:41 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-04-12 20:44:41 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-04-12 20:44:39 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-04-12 20:44:28 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-04-12 20:44:28 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-04-12 20:44:26 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-04-12 20:44:26 ----A---- C:\Windows\system32\rpcrt4.dll
2014-04-12 20:43:55 ----A---- C:\Windows\system32\KernelBase.dll
2014-04-12 20:43:55 ----A---- C:\Windows\system32\kernel32.dll
2014-04-12 20:43:54 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-04-12 20:43:54 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-04-12 20:43:52 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-04-12 20:43:52 ----A---- C:\Windows\system32\DWrite.dll
2014-04-12 20:43:29 ----A---- C:\Windows\system32\wmp.dll
2014-04-12 20:43:29 ----A---- C:\Windows\system32\tquery.dll
2014-04-12 20:43:27 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-04-12 20:43:26 ----A---- C:\Windows\system32\mssrch.dll
2014-04-12 20:43:25 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-04-12 20:43:24 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-04-12 20:43:22 ----A---- C:\Windows\system32\ntdll.dll
2014-04-12 20:43:20 ----A---- C:\Windows\system32\MSAudDecMFT.dll
2014-04-12 20:43:18 ----A---- C:\Windows\SYSWOW64\MSAudDecMFT.dll
2014-04-12 20:43:17 ----A---- C:\Windows\system32\schedsvc.dll
2014-04-12 20:43:17 ----A---- C:\Windows\system32\kd_02_10ec.dll
2014-04-12 20:43:16 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-04-12 20:43:16 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-04-12 20:43:16 ----A---- C:\Windows\system32\rsaenh.dll
2014-04-12 20:43:16 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-04-12 20:43:15 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-04-12 20:43:15 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-04-12 20:43:15 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-04-12 20:43:15 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-04-12 20:43:15 ----A---- C:\Windows\system32\AudioSes.dll
2014-04-12 20:43:15 ----A---- C:\Windows\system32\AudioEng.dll
2014-04-12 20:43:14 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-04-12 20:43:14 ----A---- C:\Windows\system32\Windows.Networking.dll
2014-04-12 20:43:14 ----A---- C:\Windows\system32\mssph.dll
2014-04-12 20:43:14 ----A---- C:\Windows\system32\dwmredir.dll
2014-04-12 20:43:14 ----A---- C:\Windows\system32\conhost.exe
2014-04-12 20:43:14 ----A---- C:\Windows\system32\audiodg.exe
2014-04-12 20:43:13 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-04-12 20:43:13 ----A---- C:\Windows\SYSWOW64\rsaenh.dll
2014-04-12 20:43:13 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-04-12 20:43:13 ----A---- C:\Windows\system32\wpncore.dll
2014-04-12 20:43:13 ----A---- C:\Windows\system32\RecoveryDrive.exe
2014-04-12 20:43:13 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-04-12 20:43:12 ----A---- C:\Windows\system32\MFMediaEngine.dll
2014-04-12 20:43:10 ----A---- C:\Windows\system32\fhengine.dll
2014-04-12 20:43:10 ----A---- C:\Windows\system32\dmvdsitf.dll
2014-04-12 20:43:10 ----A---- C:\Windows\system32\ci.dll
2014-04-12 20:43:09 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2014-04-12 20:43:09 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-04-12 20:43:09 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2014-04-12 20:43:08 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2014-04-12 20:43:08 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-04-12 20:43:08 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-04-12 20:43:08 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2014-04-12 20:43:07 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-04-12 20:43:07 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-04-12 20:43:07 ----A---- C:\Windows\system32\Robocopy.exe
2014-04-12 20:43:07 ----A---- C:\Windows\system32\kdvm.dll
2014-04-12 20:43:06 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-04-12 20:43:06 ----A---- C:\Windows\SYSWOW64\dmvdsitf.dll
2014-04-12 20:43:06 ----A---- C:\Windows\system32\kdnet.dll
2014-04-12 20:43:06 ----A---- C:\Windows\system32\iuilp.dll
2014-04-12 20:43:06 ----A---- C:\Windows\system32\drivers\hidbth.sys
2014-04-12 20:43:05 ----A---- C:\Windows\system32\wscsvc.dll
2014-04-12 20:43:05 ----A---- C:\Windows\system32\mssvp.dll
2014-04-12 20:43:05 ----A---- C:\Windows\system32\GenuineCenter.dll
2014-04-12 20:43:05 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-04-12 20:43:05 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-04-12 20:43:04 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-04-12 20:43:04 ----A---- C:\Windows\SYSWOW64\fmifs.dll
2014-04-12 20:43:04 ----A---- C:\Windows\system32\mssprxy.dll
2014-04-12 20:43:04 ----A---- C:\Windows\system32\msshooks.dll
2014-04-12 20:43:04 ----A---- C:\Windows\system32\fmifs.dll
2014-04-12 20:43:03 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2014-04-12 20:43:03 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2014-04-12 20:43:03 ----A---- C:\Windows\system32\msscntrs.dll
2014-04-12 20:39:55 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2014-04-12 20:39:55 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2014-04-12 20:39:02 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-04-12 20:39:01 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-04-12 20:39:00 ----A---- C:\Windows\system32\drivers\usbprint.sys
2014-04-12 20:39:00 ----A---- C:\Windows\system32\drivers\hidusb.sys
2014-04-12 20:39:00 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-04-12 20:38:39 ----A---- C:\Windows\system32\d2d1.dll
2014-04-12 20:38:38 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-04-12 20:38:38 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-04-12 20:38:38 ----A---- C:\Windows\system32\d3d10warp.dll
2014-04-12 20:38:11 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-12 20:38:10 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-12 20:37:59 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2014-04-12 20:37:56 ----A---- C:\Windows\system32\sysmain.dll
2014-04-12 20:37:56 ----A---- C:\Windows\system32\drivers\rdbss.sys
2014-04-12 20:37:55 ----A---- C:\Windows\system32\VSSVC.exe
2014-04-12 20:37:55 ----A---- C:\Windows\system32\BCP47Langs.dll
2014-04-12 20:37:54 ----A---- C:\Windows\SYSWOW64\BCP47Langs.dll
2014-04-12 20:37:54 ----A---- C:\Windows\system32\netprofmsvc.dll
2014-04-12 20:37:51 ----A---- C:\Windows\system32\stobject.dll
2014-04-12 20:37:51 ----A---- C:\Windows\system32\netprofm.dll
2014-04-12 20:37:51 ----A---- C:\Windows\system32\netplwiz.dll
2014-04-12 20:37:51 ----A---- C:\Windows\system32\Magnify.exe
2014-04-12 20:37:51 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2014-04-12 20:37:50 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-04-12 20:37:50 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2014-04-12 20:37:50 ----A---- C:\Windows\system32\taskhost.exe
2014-04-12 20:37:50 ----A---- C:\Windows\system32\psmsrv.dll
2014-04-12 20:37:50 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2014-04-12 20:37:50 ----A---- C:\Windows\system32\DevicePairing.dll
2014-04-12 20:37:49 ----A---- C:\Windows\system32\AuthHost.exe
2014-04-12 20:37:48 ----A---- C:\Windows\SYSWOW64\netprofm.dll
2014-04-12 20:37:48 ----A---- C:\Windows\SYSWOW64\Magnify.exe
2014-04-12 20:37:48 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2014-04-12 20:37:48 ----A---- C:\Windows\system32\biwinrt.dll
2014-04-12 20:37:47 ----A---- C:\Windows\SYSWOW64\biwinrt.dll
2014-04-12 20:37:46 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2014-04-12 20:37:46 ----A---- C:\Windows\system32\taskhostex.exe
2014-04-12 20:37:46 ----A---- C:\Windows\system32\bisrv.dll
2014-04-12 20:37:45 ----A---- C:\Windows\SYSWOW64\npmproxy.dll
2014-04-12 20:37:45 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2014-04-12 20:37:45 ----A---- C:\Windows\system32\muifontsetup.dll
2014-04-12 20:35:31 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-04-12 20:35:30 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-04-12 20:35:19 ----A---- C:\Windows\system32\cryptnet.dll
2014-04-12 20:35:19 ----A---- C:\Windows\system32\certutil.exe
2014-04-12 20:35:17 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-04-12 20:35:17 ----A---- C:\Windows\SYSWOW64\autochk.exe
2014-04-12 20:35:17 ----A---- C:\Windows\system32\untfs.dll
2014-04-12 20:35:17 ----A---- C:\Windows\system32\autochk.exe
2014-04-12 20:34:47 ----A---- C:\Windows\system32\win32k.sys
2014-04-12 20:34:11 ----A---- C:\Windows\system32\wmpmde.dll
2014-04-12 20:34:10 ----A---- C:\Windows\system32\winmde.dll
2014-04-12 20:34:10 ----A---- C:\Windows\system32\Windows.Globalization.dll
2014-04-12 20:34:09 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-04-12 20:34:09 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-12 20:34:08 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2014-04-12 20:34:08 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2014-04-12 20:34:08 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-04-12 20:34:07 ----A---- C:\Windows\SYSWOW64\winmde.dll
2014-04-12 20:34:07 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2014-04-12 20:34:07 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-04-12 20:34:07 ----A---- C:\Windows\system32\usbmon.dll
2014-04-12 20:34:07 ----A---- C:\Windows\system32\netcfgx.dll
2014-04-12 20:34:07 ----A---- C:\Windows\system32\drivers\bthport.sys
2014-04-12 20:34:06 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-04-12 20:34:06 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2014-04-12 20:34:06 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-04-12 20:34:05 ----A---- C:\Windows\system32\drvstore.dll
2014-04-12 20:34:04 ----A---- C:\Windows\system32\drivers\rfcomm.sys
2014-04-12 20:34:04 ----A---- C:\Windows\system32\discan.dll
2014-04-12 20:34:03 ----A---- C:\Windows\system32\NdisImPlatform.dll
2014-04-12 20:34:03 ----A---- C:\Windows\system32\drivers\storahci.sys
2014-04-12 20:34:02 ----A---- C:\Windows\SYSWOW64\SettingSyncInfo.dll
2014-04-12 20:34:02 ----A---- C:\Windows\system32\WSDPrintProxy.DLL
2014-04-12 20:34:02 ----A---- C:\Windows\system32\fsquirt.exe
2014-04-12 20:34:02 ----A---- C:\Windows\system32\drivers\bthmodem.sys
2014-04-12 20:34:02 ----A---- C:\Windows\system32\DevDispItemProvider.dll
2014-04-12 20:34:01 ----A---- C:\Windows\SYSWOW64\DevDispItemProvider.dll
2014-04-12 20:34:01 ----A---- C:\Windows\system32\drivers\mouhid.sys
2014-04-12 20:34:00 ----A---- C:\Windows\system32\drivers\monitor.sys
2014-04-12 20:32:57 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-04-12 20:32:56 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-04-12 20:32:56 ----A---- C:\Windows\system32\qedit.dll
2014-04-12 20:32:56 ----A---- C:\Windows\system32\gdi32.dll
2014-04-12 20:32:47 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-04-12 20:32:45 ----A---- C:\Windows\SYSWOW64\apprepsync.dll
2014-04-12 20:32:45 ----A---- C:\Windows\SYSWOW64\apprepapi.dll
2014-04-12 20:32:19 ----A---- C:\Windows\system32\wintrust.dll
2014-04-12 20:32:19 ----A---- C:\Windows\system32\cryptsvc.dll
2014-04-12 20:32:17 ----A---- C:\Windows\system32\apprepsync.dll
2014-04-12 20:32:17 ----A---- C:\Windows\system32\apprepapi.dll
2014-04-12 20:32:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-04-12 20:32:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-04-12 20:32:14 ----A---- C:\Windows\system32\vbscript.dll
2014-04-12 20:32:14 ----A---- C:\Windows\system32\atmlib.dll
2014-04-12 20:32:14 ----A---- C:\Windows\system32\atmfd.dll
2014-04-12 20:32:13 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-12 20:31:50 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-04-12 20:31:50 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-04-12 20:31:47 ----A---- C:\Windows\system32\win32spl.dll
2014-04-12 20:31:37 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-04-12 20:31:01 ----A---- C:\Windows\system32\crypt32.dll
2014-04-12 20:30:58 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-04-12 20:29:11 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-04-12 20:29:11 ----A---- C:\Windows\SYSWOW64\scrobj.dll
2014-04-12 20:29:11 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-04-12 20:29:10 ----A---- C:\Windows\system32\scrrun.dll
2014-04-12 20:29:10 ----A---- C:\Windows\system32\scrobj.dll
2014-04-12 20:29:10 ----A---- C:\Windows\system32\cscript.exe
2014-04-12 20:29:08 ----A---- C:\Windows\system32\drivers\http.sys
2014-04-12 20:29:07 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-04-12 20:29:04 ----A---- C:\Windows\system32\cryptdlg.dll
2014-04-12 20:27:46 ----A---- C:\Windows\system32\consent.exe
2014-04-12 20:27:45 ----A---- C:\Windows\system32\appinfo.dll
2014-04-12 20:27:41 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-04-12 20:27:40 ----A---- C:\Windows\system32\d3d11.dll
2014-04-12 20:27:38 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2014-04-12 20:27:36 ----A---- C:\Windows\system32\ReAgentc.exe
2014-04-12 20:27:33 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-04-12 20:27:32 ----A---- C:\Windows\system32\msieftp.dll
2014-04-12 20:27:29 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-04-12 20:27:23 ----A---- C:\Windows\system32\poqexec.exe
2014-04-12 20:27:21 ----A---- C:\Windows\system32\VmHostAI.dll
2014-04-12 20:27:21 ----A---- C:\Windows\system32\tssdisai.dll
2014-04-12 20:27:20 ----A---- C:\Windows\system32\RDWebAI.dll
2014-04-12 20:27:20 ----A---- C:\Windows\system32\appserverai.dll
2014-04-12 20:27:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-04-12 20:27:18 ----A---- C:\Windows\system32\WMPhoto.dll
2014-04-12 20:27:12 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-04-12 20:26:54 ----A---- C:\Windows\system32\msdrm.dll
2014-04-12 20:25:55 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-04-12 20:25:52 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-04-12 20:25:29 ----A---- C:\Windows\system32\twinui.dll
2014-04-12 20:25:29 ----A---- C:\Windows\system32\drivers\pdc.sys
2014-04-12 20:25:28 ----A---- C:\Windows\system32\authui.dll
2014-04-12 20:25:28 ----A---- C:\Windows\system32\actxprxy.dll
2014-04-12 20:25:21 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-04-12 20:25:20 ----A---- C:\Windows\system32\schannel.dll
2014-04-12 20:25:17 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2014-04-12 20:24:08 ----A---- C:\Windows\system32\mshtml.dll
2014-04-12 20:23:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-04-12 20:23:43 ----A---- C:\Windows\system32\ieframe.dll
2014-04-12 20:23:41 ----A---- C:\Windows\system32\jscript9.dll
2014-04-12 20:23:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-12 20:23:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-12 20:23:37 ----A---- C:\Windows\system32\iertutil.dll
2014-04-12 20:23:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-12 20:23:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-12 20:23:34 ----A---- C:\Windows\system32\wininet.dll
2014-04-12 20:23:33 ----A---- C:\Windows\system32\urlmon.dll
2014-04-12 20:23:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-12 20:23:32 ----A---- C:\Windows\system32\uxtheme.dll
2014-04-12 20:23:31 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2014-04-12 20:23:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-04-12 20:23:31 ----A---- C:\Windows\system32\jscript.dll
2014-04-12 20:23:29 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-04-12 20:23:29 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-12 20:23:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-12 20:23:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-12 20:23:27 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-12 20:23:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-12 20:23:27 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-12 20:23:27 ----A---- C:\Windows\system32\iesysprep.dll
2014-04-12 20:23:27 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-12 20:23:26 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2014-04-12 20:23:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-12 20:23:26 ----A---- C:\Windows\system32\UXInit.dll
2014-04-12 20:23:18 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2014-04-12 20:23:17 ----A---- C:\Windows\system32\reseteng.dll
2014-04-12 20:23:15 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-04-12 20:23:13 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-04-12 20:22:01 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-04-12 20:22:00 ----A---- C:\Windows\system32\esent.dll
2014-04-12 19:27:18 ----D---- C:\Users\Jiří\AppData\Roaming\AVAST Software
2014-04-12 19:26:14 ----D---- C:\Program Files (x86)\Google
2014-04-12 19:26:00 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-12 19:26:00 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-04-12 19:25:59 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-04-12 19:25:59 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-04-12 19:25:59 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-12 19:25:59 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-04-12 19:25:59 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-04-12 19:25:57 ----A---- C:\Windows\system32\aswBoot.exe
2014-04-12 19:24:19 ----D---- C:\Program Files\AVAST Software
2014-04-12 19:23:42 ----D---- C:\ProgramData\AVAST Software
2014-04-12 18:22:13 ----D---- C:\ProgramData\Microsoft Help
2014-04-12 18:12:02 ----D---- C:\Users\Jiří\AppData\Roaming\Mozilla
2014-04-12 18:11:44 ----D---- C:\ProgramData\Mozilla
2014-04-12 18:11:43 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-12 18:11:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-04-12 11:12:15 ----D---- C:\Users\Jiří\AppData\Roaming\Macromedia
2014-04-12 11:11:32 ----D---- C:\Users\Jiří\AppData\Roaming\ASUS WebStorage
2014-04-12 11:11:02 ----A---- C:\Users\Jiří\AppData\Roaming\sp_data.sys
2014-04-12 11:10:57 ----D---- C:\Users\Jiří\AppData\Roaming\Adobe
2014-04-12 11:09:46 ----SD---- C:\Users\Jiří\AppData\Roaming\Microsoft
2014-04-12 11:02:22 ----SHD---- C:\ProgramData\Šablony
2014-04-12 11:02:22 ----SHD---- C:\ProgramData\Plocha
2014-04-12 11:02:22 ----SHD---- C:\ProgramData\Nabídka Start
2014-04-12 11:02:22 ----SHD---- C:\ProgramData\Dokumenty
2014-04-12 11:02:22 ----SHD---- C:\ProgramData\Data aplikací

======List of files/folders modified in the last 1 months======

2014-04-21 22:12:46 ----D---- C:\Windows\Temp
2014-04-21 22:12:45 ----RD---- C:\Program Files
2014-04-21 22:12:43 ----D---- C:\Windows\Prefetch
2014-04-21 22:08:59 ----SHD---- C:\Windows\Installer
2014-04-21 22:06:52 ----RD---- C:\Windows\assembly
2014-04-21 22:06:50 ----RD---- C:\Program Files (x86)
2014-04-21 22:06:06 ----A---- C:\Windows\SYSWOW64\bscs.ini
2014-04-21 22:05:54 ----RSD---- C:\Windows\Fonts
2014-04-21 22:05:27 ----A---- C:\Windows\SYSWOW64\log.txt
2014-04-21 22:04:20 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2014-04-21 22:04:13 ----D---- C:\Windows\system32\Tasks
2014-04-21 22:04:12 ----D---- C:\Windows\Tasks
2014-04-21 22:03:01 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2014-04-21 22:00:19 ----D---- C:\Windows
2014-04-21 22:00:01 ----D---- C:\Windows\system32\sru
2014-04-21 21:58:59 ----D---- C:\Windows\system32\config
2014-04-21 21:57:41 ----D---- C:\Windows\Microsoft.NET
2014-04-21 21:56:14 ----D---- C:\Windows\SysWOW64
2014-04-21 21:55:51 ----D---- C:\Program Files (x86)\MSBuild
2014-04-21 21:55:16 ----D---- C:\Program Files (x86)\Common Files
2014-04-21 21:54:52 ----D---- C:\Program Files (x86)\Microsoft Office
2014-04-21 21:54:50 ----SD---- C:\ProgramData\Microsoft
2014-04-21 21:54:50 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-04-21 21:54:50 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-04-21 21:53:47 ----D---- C:\Program Files\Common Files\microsoft shared
2014-04-21 21:52:08 ----A---- C:\Windows\win.ini
2014-04-21 21:51:56 ----D---- C:\Windows\ShellNew
2014-04-21 21:44:43 ----D---- C:\Program Files (x86)\McAfee
2014-04-21 21:44:39 ----D---- C:\Windows\Inf
2014-04-21 21:44:11 ----RD---- C:\Windows\System32
2014-04-21 21:43:44 ----D---- C:\Windows\system32\catroot
2014-04-21 21:42:16 ----D---- C:\Windows\system32\DriverStore
2014-04-21 21:42:16 ----D---- C:\Windows\system32\Drivers
2014-04-21 20:56:00 ----D---- C:\Windows\system32\wdi
2014-04-21 20:23:40 ----HD---- C:\Windows\ELAMBKUP
2014-04-21 19:14:43 ----D---- C:\Windows\rescache
2014-04-21 19:03:07 ----D---- C:\Windows\WinSxS
2014-04-21 18:57:44 ----SHD---- C:\System Volume Information
2014-04-21 18:52:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-21 18:49:42 ----HD---- C:\ProgramData
2014-04-19 17:18:13 ----D---- C:\Windows\Logs
2014-04-19 17:12:45 ----D---- C:\Windows\CbsTemp
2014-04-19 16:41:56 ----D---- C:\Program Files\Windows Media Player
2014-04-19 16:41:56 ----D---- C:\Program Files\Windows Mail
2014-04-19 16:41:56 ----D---- C:\Program Files\Internet Explorer
2014-04-19 16:41:53 ----D---- C:\Program Files\Windows Photo Viewer
2014-04-19 16:41:53 ----D---- C:\Program Files\Windows Journal
2014-04-19 16:41:52 ----D---- C:\Program Files\Windows Defender
2014-04-19 16:41:52 ----D---- C:\Program Files\Common Files\System
2014-04-19 16:41:52 ----D---- C:\Program Files (x86)\Windows Mail
2014-04-19 16:41:52 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-19 16:41:51 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-19 16:41:47 ----D---- C:\Windows\WinStore
2014-04-19 16:41:47 ----D---- C:\Windows\servicing
2014-04-19 16:41:47 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-04-19 16:41:47 ----D---- C:\Program Files (x86)\Windows Defender
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\XPSViewer
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\winrm
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\slmgr
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\oobe
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\MUI
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\migwiz
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\migration
2014-04-19 16:41:14 ----D---- C:\Windows\SYSWOW64\drivers
2014-04-19 16:41:13 ----D---- C:\Windows\SYSWOW64\WCN
2014-04-19 16:41:13 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-04-19 16:41:13 ----D---- C:\Windows\SYSWOW64\Dism
2014-04-19 16:40:55 ----D---- C:\Windows\SYSWOW64\wbem
2014-04-19 16:40:55 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2014-04-19 16:40:55 ----D---- C:\Windows\SYSWOW64\Com
2014-04-19 16:40:49 ----RD---- C:\Windows\ImmersiveControlPanel
2014-04-19 16:40:48 ----D---- C:\Windows\PolicyDefinitions
2014-04-19 16:40:47 ----D---- C:\Windows\system32\winrm
2014-04-19 16:40:47 ----D---- C:\Windows\system32\oobe
2014-04-19 16:40:47 ----D---- C:\Windows\system32\migwiz
2014-04-19 16:40:46 ----D---- C:\Windows\system32\Sysprep
2014-04-19 16:40:46 ----D---- C:\Windows\system32\slmgr
2014-04-19 16:40:46 ----D---- C:\Windows\system32\migration
2014-04-19 16:40:46 ----D---- C:\Windows\system32\Boot
2014-04-19 16:40:40 ----D---- C:\Windows\system32\MUI
2014-04-19 16:40:40 ----D---- C:\Windows\system32\drivers\UMDF
2014-04-19 16:40:39 ----D---- C:\Windows\system32\WCN
2014-04-19 16:40:39 ----D---- C:\Windows\system32\pl-PL
2014-04-19 16:40:39 ----D---- C:\Windows\system32\Dism
2014-04-19 16:40:03 ----D---- C:\Windows\SoftwareDistribution
2014-04-19 16:39:00 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2014-04-19 16:38:59 ----D---- C:\Windows\system32\wbem
2014-04-19 16:38:48 ----D---- C:\Windows\system32\SystemResetPlatform
2014-04-19 16:38:48 ----D---- C:\Windows\system32\Com
2014-04-19 16:38:46 ----D---- C:\Windows\apppatch
2014-04-19 16:27:27 ----D---- C:\Windows\system32\catroot2
2014-04-19 15:47:42 ----RD---- C:\Windows\ToastData
2014-04-19 15:47:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-19 15:47:17 ----D---- C:\Windows\system32\cs-CZ
2014-04-15 15:23:18 ----HD---- C:\Program Files\WindowsApps
2014-04-15 15:23:17 ----D---- C:\Windows\AUInstallAgent
2014-04-15 14:59:12 ----D---- C:\Windows\system32\SecureBootUpdates
2014-04-13 17:44:17 ----D---- C:\Program Files\Common Files\mcafee
2014-04-13 17:30:44 ----D---- C:\ProgramData\PRICache
2014-04-13 17:23:10 ----D---- C:\ProgramData\McAfee
2014-04-13 17:11:22 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-13 17:11:21 ----D---- C:\Windows\system32\en-US
2014-04-13 17:09:53 ----D---- C:\Windows\SYSWOW64\en
2014-04-13 17:09:52 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-04-13 17:09:45 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2014-04-13 17:09:40 ----D---- C:\Windows\en-US
2014-04-13 17:09:37 ----D---- C:\Windows\system32\sk-SK
2014-04-13 17:09:37 ----D---- C:\Windows\system32\en
2014-04-13 17:09:03 ----D---- C:\Windows\system32\drivers\en-US
2014-04-13 17:06:52 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-04-13 17:06:12 ----D---- C:\Windows\system32\hu-HU
2014-04-13 17:04:27 ----D---- C:\Windows\en-GB
2014-04-13 17:04:26 ----D---- C:\Windows\SYSWOW64\en-GB
2014-04-13 17:04:19 ----D---- C:\Windows\system32\en-GB
2014-04-13 16:20:43 ----D---- C:\Windows\debug
2014-04-12 19:25:57 ----D---- C:\Windows\system32\LogFiles
2014-04-12 17:58:35 ----D---- C:\Windows\Log
2014-04-12 14:02:44 ----D---- C:\Windows\system32\restore
2014-04-12 11:16:32 ----D---- C:\ProgramData\Adobe
2014-04-12 11:11:21 ----SHD---- C:\$Recycle.Bin
2014-04-12 11:09:46 ----RD---- C:\Users
2014-04-12 11:02:22 ----D---- C:\Program Files\Windows NT
2014-03-31 23:18:15 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys [2013-05-01 425192]
R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys [2012-07-26 77040]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-12 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-12 208928]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys [2012-07-26 361200]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2013-05-01 562392]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys [2013-10-13 100696]
R0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys [2012-07-26 81136]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys [2012-07-26 71920]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys [2012-07-26 374512]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2013-08-21 465240]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2012-09-14 647736]
R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [2013-05-01 100072]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2013-05-01 172264]
R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2014-03-17 783864]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2014-03-17 345456]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys [2012-07-26 93936]
R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys [2012-07-26 17136]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys [2012-07-26 83696]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys [2013-06-17 997632]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-05-24 30496]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys [2013-05-01 91880]
R0 pci;@machine.inf,%pci_svcdesc%;PCI Bus Driver; C:\Windows\System32\drivers\pci.sys [2012-07-26 234224]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2012-07-26 52464]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys [2013-03-02 69864]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-07-26 217328]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys [2013-10-05 285016]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys [2014-01-27 2232664]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys [2012-07-26 36080]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys [2012-07-26 83184]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2012-07-26 378608]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys [2013-06-01 327936]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys [2013-09-04 576512]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-12 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-12 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-12 423240]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2013-07-02 19768]
R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [2012-07-26 48640]
R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys [2012-07-26 29696]
R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys [2012-07-26 7680]
R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys [2012-07-26 174080]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys [2014-01-16 118784]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2012-07-26 50688]
R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys [2012-07-26 26112]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys [2012-07-26 37616]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys [2012-07-26 46080]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys [2012-07-26 331776]
R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys [2012-07-26 49152]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys [2012-07-26 23552]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2012-07-26 34304]
R1 Null;Null; C:\Windows\system32\drivers\Null.sys [2012-07-26 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys [2012-07-26 145408]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys [2013-05-04 427520]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2012-07-26 117248]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2013-04-09 83456]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-12 79184]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys [2012-07-26 60416]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2012-07-26 134144]
R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys [2012-07-26 427520]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys [2012-07-26 97792]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2013-04-09 805376]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys [2012-07-26 78848]
R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys [2012-07-26 23040]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2012-07-26 45056]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-12 84816]
R3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys [2012-07-26 26624]
R3 ATP;@oem11.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\Windows\System32\drivers\AsusTP.sys [2013-11-08 70928]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2012-07-26 101888]
R3 BtAudioBusSrv;@oem17.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-05-01 51712]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\Windows\System32\drivers\bthmodem.sys [2013-03-01 66048]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2013-05-01 74752]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2012-08-14 48736]
R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2014-03-17 70592]
R3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys [2012-07-26 25600]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys [2012-07-26 36352]
R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys [2012-07-26 33792]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2013-09-19 1455448]
R3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys [2012-07-26 210672]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys [2013-05-01 71168]
R3 HIDSwitch;@oem20.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\Windows\System32\drivers\AsHIDSwitch64.sys [2013-10-08 20280]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys [2013-03-15 861184]
R3 i8042prt;@msmouse.inf,%i8042prt.SvcDesc%;Ovladač portu klávesnice a myši PS/2; C:\Windows\System32\drivers\i8042prt.sys [2012-07-26 112640]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-11-21 5337184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-12-18 3262816]
R3 IntcDAud;@oem6.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-11-15 342528]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys [2013-05-01 89088]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\Windows\System32\drivers\kbdclass.sys [2012-07-26 48368]
R3 kbfiltr;@oem21.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\Windows\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Microsoft Kernel Debug Network Miniport (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys [2012-07-26 18432]
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys [2012-07-26 21376]
R3 L1C;@oem3.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C63x64.sys [2012-07-19 110744]
R3 MEIx64;@oem8.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2014-03-17 180272]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2014-03-17 311600]
R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2014-03-17 522360]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [2014-01-21 422712]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\Windows\System32\drivers\monitor.sys [2013-03-01 30720]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\Windows\System32\drivers\mouclass.sys [2012-07-26 45808]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2013-10-31 74752]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys [2013-02-06 370688]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2012-07-26 279552]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2013-02-06 215552]
R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys [2013-05-01 25088]
R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys [2012-07-26 58880]
R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys [2013-04-09 60416]
R3 netr28x;@oem12.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-11-02 2606768]
R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys [2014-01-27 1939288]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-05-24 11095328]
R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys [2012-07-26 114176]
R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2012-07-26 68608]
R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys [2012-07-26 124928]
R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys [2012-07-26 81920]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2012-07-26 92672]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys [2012-07-26 22528]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 rtbth;@oem14.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\Windows\System32\drivers\rtbth.sys [2012-09-05 695904]
R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys [2012-07-26 416768]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2013-04-09 623104]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2013-04-09 247808]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys [2012-07-26 13680]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys [2013-08-10 151896]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2012-07-26 149504]
R3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys [2013-07-02 213336]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys [2012-07-26 48128]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver; C:\Windows\System32\drivers\usbccgp.sys [2013-06-29 120832]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\System32\drivers\usbehci.sys [2013-07-01 79192]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Ovladač standardního rozbočovače USB; C:\Windows\System32\drivers\usbhub.sys [2013-07-01 623448]
R3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys [2013-10-02 447320]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-06 210560]
R3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS [2013-07-02 337752]
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2012-07-26 24064]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys [2012-07-26 106736]
S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys [2012-07-26 492272]
S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys [2012-07-26 340720]
S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys [2012-07-26 184048]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys [2012-07-26 63216]
S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys [2012-07-26 76016]
S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys [2012-07-26 258288]
S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys [2012-07-26 26352]
S0 arc;arc; C:\Windows\System32\drivers\arc.sys [2012-07-26 104688]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys [2012-07-26 108272]
S0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys [2012-07-26 25840]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\Windows\System32\drivers\bxvbda.sys [2013-05-01 533224]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\System32\drivers\evbda.sys [2013-05-01 3265256]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys [2012-07-26 113904]
S0 gagp30kx;@agp.inf,%gagp30kx_svcdesc%;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\System32\drivers\gagp30kx.sys [2012-07-26 66800]
S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [2012-07-26 64752]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2012-07-26 24816]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys [2012-07-26 411888]
S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys [2012-07-26 45296]
S0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys [2012-07-26 18672]
S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys [2012-07-26 22256]
S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [2012-07-26 108784]
S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [2012-07-26 92400]
S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys [2012-07-26 116976]
S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [2012-07-26 81136]
S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys [2012-07-26 51952]
S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys [2012-07-26 353008]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [2014-03-17 69344]
S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys [2012-07-26 64240]
S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys [2012-07-26 52464]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys [2012-07-26 125168]
S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys [2012-07-26 150256]
S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys [2012-07-26 168176]
S0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys [2012-07-26 14064]
S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys [2012-07-26 237808]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys [2012-07-26 107760]
S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [2012-07-26 44784]
S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [2012-07-26 81648]
S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys [2012-07-26 30960]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\Windows\System32\drivers\storahci.sys [2013-03-02 77544]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2012-07-26 45160]
S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys [2012-07-26 37992]
S0 uagp35;@agp.inf,%uagp35_svcdesc%;Microsoft AGPv3.5 Filter; C:\Windows\System32\drivers\uagp35.sys [2012-07-26 65776]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys [2012-07-26 66800]
S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys [2012-07-26 19184]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys [2012-07-26 137832]
S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys [2012-07-26 164080]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys [2012-07-26 322800]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys [2013-08-16 58200]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys [2012-07-26 226304]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys [2012-07-26 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys [2012-07-26 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys [2012-07-26 10752]
S3 AgereSoftModem;@mdmags64.inf,%FullProductName%;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2012-06-02 1146880]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys [2013-05-01 90624]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys [2013-05-01 88064]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2012-07-26 79360]
S3 athr;@netathrx.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-06-02 2935808]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys [2012-07-26 45056]
S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys [2012-07-26 33280]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers; C:\Windows\system32\drivers\drmkaud.sys [2013-05-01 5632]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys [2012-07-26 10240]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2012-07-26 194560]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys [2012-07-26 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2012-07-26 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys [2012-07-26 24576]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2012-07-26 57584]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys [2013-05-01 22528]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter; C:\Windows\System32\drivers\vmgencounter.sys [2012-07-26 12288]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys [2013-07-09 120144]
S3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2013-06-26 341504]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys [2012-07-26 27136]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys [2013-04-09 95744]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys [2013-05-01 39936]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys [2012-07-26 46080]
S3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys [2013-05-04 27648]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2013-09-23 197704]
S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [2012-07-26 11776]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2012-07-26 24576]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys [2012-07-26 89088]
S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [2012-07-26 78336]
S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys [2012-07-26 145920]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys [2012-07-26 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys [2014-02-04 278872]
S3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys [2012-07-26 29184]
S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [2014-01-21 96592]
S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys [2012-07-26 40448]
S3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys [2013-03-02 26112]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys [2012-07-26 141312]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-07-26 129536]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys [2013-05-01 28904]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2012-07-26 8704]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys [2012-07-26 10752]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2012-07-26 11008]
S3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys [2012-07-26 68608]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2012-07-26 7168]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2012-07-26 6912]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2012-07-26 390896]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2012-07-26 8192]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys [2012-07-26 14848]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys [2012-07-26 46592]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [2012-07-26 126464]
S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2012-06-02 8604672]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\Windows\System32\drivers\parport.sys [2012-07-26 105984]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys [2013-05-01 87552]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2012-07-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys [2012-07-26 16384]
S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys [2012-07-26 179712]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-05-01 27880]
S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys [2012-07-26 208384]
S3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-06-02 589824]
S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys [2012-07-26 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2012-07-26 36864]
S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys [2013-06-29 195416]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys [2013-05-01 56552]
S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys [2012-07-26 62976]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\Windows\System32\drivers\serenum.sys [2012-07-26 23040]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\Windows\System32\drivers\serial.sys [2012-07-26 76800]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys [2012-07-26 27136]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys [2012-07-26 16896]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys [2012-07-26 59392]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2014-01-27 2232664]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys [2012-07-26 36592]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-07-26 57344]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys [2012-07-26 30208]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys [2012-07-26 97008]
S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys [2012-07-26 11776]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys [2013-07-06 99328]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys [2013-05-01 27136]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys [2013-07-02 25600]
S3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\Windows\System32\drivers\USBSTOR.SYS [2013-06-06 119040]
S3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys [2013-06-29 32256]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys [2012-07-26 106224]
S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys [2013-03-02 495336]
S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [2012-07-26 22144]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\Windows\System32\drivers\vpci.sys [2012-07-26 67824]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys [2012-07-26 27008]
S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys [2013-04-09 83456]
S4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys [2012-07-26 108544]
S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys [2013-06-26 321536]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-09-09 111416]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files\ASUS\P4G\InsOnSrv.exe [2013-06-19 277120]
R2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-12 50344]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-03 1602560]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2014-01-28 178528]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-01-21 1025712]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-03-17 219752]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\windows\system32\mfevtps.exe [2014-03-17 185792]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-05-24 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe [2013-05-01 35840]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe [2012-07-26 769024]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-03 138752]
R3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe [2012-07-26 124416]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe [2013-05-01 29696]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
R3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12 116648]
S2 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2013-08-16 4917760]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-15 257712]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe [2012-07-26 94208]
S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe [2012-07-26 10752]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-11-21 277048]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2013-05-01 35840]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2012-07-26 669696]
S3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12 116648]
S3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2013-05-01 35840]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [2012-12-21 334760]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2013-08-02 602944]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-15 119408]
S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe [2012-07-26 144384]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe [2013-05-01 35840]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2012-07-26 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe [2012-07-26 9728]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2012-07-26 14848]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2013-05-16 98304]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2012-07-26 40960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2013-05-01 35840]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2013-06-01 680960]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\Windows\system32\vssvc.exe [2013-05-04 1483776]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\Windows\system32\svchost.exe [2013-05-01 29696]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2012-07-26 1616896]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2013-05-01 29952]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-12 139696]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\Windows\System32\svchost.exe [2013-05-01 29696]
S4 RemoteRegistry;@regsvc.dll,-1; C:\Windows\system32\svchost.exe [2013-05-01 29696]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Trojský kůň

#3 Příspěvek od motji »

Dobrý večer :)
:???: Systém a office jsou legální?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Re: Trojský kůň

#4 Příspěvek od mafka »

Systém ano, office ee

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Trojský kůň

#5 Příspěvek od motji »

Office prosím odinstalovat, nelegální programy a jejich stahování jsou potencionální zdroje nákazy.
V jakém souboru byl vir?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Re: Trojský kůň

#6 Příspěvek od mafka »

Tak sem to odinstaloval, projel Avastem, které virus nehlásil. Problém je v aktivátoru těch MSO který je (dle google infa) mylně brán jako trojan, nicméně sem office zase nahodil (s 30denní zkušební lhůtou prozatím).

Ostatní se zdá být v pořádku tedy? :)

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Trojský kůň

#7 Příspěvek od motji »

Nejde o to, zda je program hlášen mylně jako vir, jde o to, že je to nelegální :)


:arrow: Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem

:arrow: Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Re: Trojský kůň

#8 Příspěvek od mafka »

To samozřejmě vím, pokud je s tím problém co se týče pomoci tak si samozřejmě zkusím poradit sám, jen sem s tím nikdy předtím problém neměl (např když jsem kdysi měl stažené win xp).

Junkware:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 x64
Ran by Jiýˇ on Łt 22. 04. 2014 at 13:47:17,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 22. 04. 2014 at 13:59:53,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


AdwCleaner:

# AdwCleaner v3.200 - Report created 22/04/2014 at 14:04:29
# Updated 22/04/2014 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Jiří - JIRKA
# Running from : C:\Users\Jiří\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v28.0 (cs)

[ File : C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yfejzdkx.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [859 octets] - [22/04/2014 14:01:56]
AdwCleaner[S0].txt - [781 octets] - [22/04/2014 14:04:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [840 octets] ##########

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Trojský kůň

#9 Příspěvek od motji »

Mrkněte do pravidel, máme to tam napsáno :)
Tak, já vir nevidím, mělo by to být v pořádku :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mafka
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 15 Bře 2008 18:36

Re: Trojský kůň

#10 Příspěvek od mafka »

Dobře mockrát Vám děkuji, pravidla mrknu samozřejmě mě to netěší, svůj pc full legální mám ale někde holt není zbytí :oops:

Pěkný zbytek dne přeji :worship:

Odpovědět