Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Jozef
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 27 bře 2015 19:22

Prosím o kontrolu logu

#1 Příspěvek od Jozef »

Ďakujemm

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jozef at 2015-03-28 17:47:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 187 GB (62%) free of 300 GB
Total RAM: 8131 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:47:34, on 28. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Jozef\AppData\Local\Temp\InterActive.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files\trend micro\Jozef.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [explorer] C:\Users\Jozef\AppData\Local\Temp\InterActive.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Hry\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14353 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"taskhost.exe"
taskeng.exe {59C9C0C5-5C25-4D7A-AA63-8D35FB8B4792}
C:\Users\Jozef\AppData\Local\Temp\Rar$EXa0.040\PCMeterV4\PCMeterV0.4.exe
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Users\Jozef\AppData\Local\Temp\InterActive.exe"
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
"C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 3fd12ef7-28ea-46c3-b907-6c3d2066a679 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1862329037-32577995918011682621767055549-6468934781509256419-432457549273102295
\??\C:\Windows\system32\conhost.exe "-2005088678-421272628-1037210746-4795034631143424710-450061302-94146161895022211
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4476
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a03a098d-353d-4af0-9954-4a96f9f72bbf -SystemEventPortName:HostProcess-48217031-52c1-4e65-81d3-e494e29c3495 -IoCancelEventPortName:HostProcess-aa1b7086-b975-402c-90a8-0d3fdca10289 -NonStateChangingEventPortName:HostProcess-a635f4cd-5758-41f2-9148-6cd86e20cfd8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a6201ed5-0f15-4866-be9c-931fa827166b -DeviceGroupId:
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP PSC 1500 series#1401379690" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4944.0.1445119989\833654652" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40,48 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4788 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNoId/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4944 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4944.1.1081444385\516959954" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNoId/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4944 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4944.2.2050293001\607298585" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/EnabledNoId/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4944 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4944.4.1603198318\1355594200" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Jozef\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=sk --channel="4944.5.2042285244\1293309668" /prefetch:-390060480
"C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
"taskhost.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll" --lang=sk --channel="4944.12.1434611537\437717894" /prefetch:-390060480

"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
C:\Windows\system32\wbem\wmiprvse.exe
"C:\totalcmd\TOTALCMD64.EXE"
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe27_ Global\UsGthrCtrlFltPipeMssGthrPipe27 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Jozef\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job - C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job - C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d042b4aa9b5996.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfeb9bf45cc9c9.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042b4aafe89aa.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core1d042b4d3a9e65d.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA1d042b4d3df00e4.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default

prefs.js - "browser.search.useDBForOrder" - false
prefs.js - "browser.startup.homepage" - "http://www.yandex.ru/?win=148&clid=1989595"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default\searchplugins\
yandex.ru-121639.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10 886488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-02 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10 710864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-02-10 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-02 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"Cm108Sound"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Facebook Update"=C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-29 138096]
"explorer"=C:\Users\Jozef\AppData\Local\Temp\InterActive.exe [2014-09-14 972800]
"ISUSPM"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"Google Update"=C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe [2014-11-01 107912]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-11-27 466144]
"Zoner Photo Studio Autoupdate"=D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2014-12-19 458456]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jozef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-28 17:21:35 ----D---- C:\FRST
2015-03-27 19:32:37 ----D---- C:\Program Files\trend micro
2015-03-27 19:32:36 ----D---- C:\rsit
2015-03-27 05:27:36 ----A---- C:\Windows\system32\invagent.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\generaltel.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\devinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\appraiser.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepic.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepdu.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aeinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\acmigration.dll
2015-03-18 18:45:31 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 18:54:17 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 18:54:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 18:54:16 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 18:54:16 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\mf.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 18:54:12 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\winload.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\smss.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 18:54:07 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 18:54:07 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 18:53:52 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 18:53:52 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 18:53:51 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 18:53:51 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 18:53:45 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 18:53:45 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 18:53:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 18:53:44 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 18:53:40 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:53:37 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:53:36 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 18:53:33 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:53:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 18:53:32 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispgenco6434752.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispco6434752.dll

======List of files/folders modified in the last 1 month======

2015-03-28 17:47:33 ----D---- C:\Windows\Temp
2015-03-28 17:31:33 ----D---- C:\Windows\SysWOW64
2015-03-28 17:31:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-03-28 17:25:10 ----D---- C:\ProgramData\Origin
2015-03-28 17:23:01 ----D---- C:\Windows
2015-03-28 13:55:32 ----D---- C:\Windows\system32\config
2015-03-28 13:29:36 ----D---- C:\ProgramData\NVIDIA
2015-03-27 19:39:50 ----HD---- C:\ProgramData
2015-03-27 19:32:37 ----RD---- C:\Program Files
2015-03-27 17:17:12 ----D---- C:\Users\Jozef\AppData\Roaming\Yandex
2015-03-27 05:33:43 ----D---- C:\Users\Jozef\AppData\Roaming\Skype
2015-03-27 05:29:51 ----D---- C:\Windows\winsxs
2015-03-27 05:28:35 ----SD---- C:\Windows\system32\CompatTel
2015-03-27 05:28:35 ----D---- C:\Windows\system32\wbem
2015-03-27 05:28:35 ----D---- C:\Windows\system32\appraiser
2015-03-27 05:28:35 ----D---- C:\Windows\System32
2015-03-27 05:28:35 ----D---- C:\Windows\AppPatch
2015-03-27 05:28:18 ----SHD---- C:\Windows\Installer
2015-03-27 05:28:17 ----HD---- C:\Config.Msi
2015-03-27 05:28:15 ----RD---- C:\Program Files (x86)\Skype
2015-03-27 05:28:15 ----D---- C:\Program Files (x86)\Common Files
2015-03-27 05:28:09 ----D---- C:\ProgramData\Skype
2015-03-27 05:27:52 ----SHD---- C:\System Volume Information
2015-03-21 06:27:30 ----D---- C:\Windows\system32\Tasks
2015-03-21 06:27:30 ----D---- C:\Program Files (x86)\TeamViewer
2015-03-21 06:27:13 ----RSD---- C:\Windows\Fonts
2015-03-19 18:54:31 ----D---- C:\Windows\inf
2015-03-19 18:54:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-18 18:52:44 ----D---- C:\Windows\Microsoft.NET
2015-03-18 18:51:34 ----RSD---- C:\Windows\assembly
2015-03-18 18:45:30 ----D---- C:\Windows\system32\DriverStore
2015-03-18 18:44:49 ----D---- C:\Windows\system32\drivers
2015-03-18 18:44:48 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-18 18:38:39 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-03-18 18:37:37 ----D---- C:\Program Files\Microsoft Office 15
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 20:40:20 ----D---- C:\Windows\system32\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\system32\en-US
2015-03-11 20:40:20 ----D---- C:\Windows\system32\Dism
2015-03-11 20:40:20 ----D---- C:\Program Files\Windows Media Player
2015-03-11 20:40:20 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 20:40:19 ----D---- C:\Windows\system32\Boot
2015-03-11 20:40:18 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 20:40:17 ----D---- C:\Program Files\Internet Explorer
2015-03-11 20:40:16 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 20:34:33 ----D---- C:\Windows\system32\MRT
2015-03-11 20:30:53 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 18:53:11 ----D---- C:\Windows\system32\catroot2
2015-03-08 19:35:45 ----D---- C:\Windows\system32\NDF
2015-03-06 17:25:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-15 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-08-27 883928]
R3 USBPNPA;USB PnP Sound Device Interface; C:\Windows\system32\drivers\CM10864.sys [2009-11-18 1308160]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Users\Jozef\AppData\Local\Temp\tmpC1B8.tmp []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 ClickToRunSvc;Služba Klikni a spusti balíka Microsoft Office; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-02-10 2714800]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2014-07-12 58387104]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-08 76152]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-17 5436176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-10-30 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-17 119408]
S3 Origin Client Service;Origin Client Service; D:\Hry\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-05-16 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-05-16 5132888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2014-07-12 441504]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Jozef
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 27 bře 2015 19:22

Re: Prosím o kontrolu logu

#3 Příspěvek od Jozef »

# AdwCleaner v4.113 - Logfile created 28/03/2015 at 19:02:24
# Updated 22/03/2015 by Xplode
# Database : 2015-03-27.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Jozef - JOZEF-PC
# Running from : C:\Users\Jozef\Desktop\adwcleaner_4.113.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : WinRing0_1_2_0

***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v30.0 (sk)


-\\ Google Chrome v41.0.2272.101


-\\ Chromium v


-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [862 bytes] - [28/03/2015 19:01:30]
AdwCleaner[S0].txt - [792 bytes] - [28/03/2015 19:02:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [850 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Jozef
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 27 bře 2015 19:22

Re: Prosím o kontrolu logu

#5 Příspěvek od Jozef »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jozef at 2015-03-28 20:07:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 187 GB (62%) free of 300 GB
Total RAM: 8131 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:07:21, on 28. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Jozef\AppData\Local\Temp\InterActive.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\trend micro\Jozef.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [explorer] C:\Users\Jozef\AppData\Local\Temp\InterActive.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Hry\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14353 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
taskeng.exe {3BB61721-A2EC-41CE-8A5D-7B38516CAE57}
C:\Users\Jozef\AppData\Local\Temp\Rar$EXa0.040\PCMeterV4\PCMeterV0.4.exe
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 3fd12ef7-28ea-46c3-b907-6c3d2066a679 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "1857858119680765647796448309-20444608654257091081281292395-1184433702390676659
\??\C:\Windows\system32\conhost.exe "-1982424140-1161764504-718823887-160089252-560303933-1662122954993983057-2022166213
"C:\Users\Jozef\AppData\Local\Temp\InterActive.exe"
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
"C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
WLIDSvcM.exe 4088
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1061977a-ae5c-40f7-8de4-a2c24f331434 -SystemEventPortName:HostProcess-4782214f-0d93-4e78-9f05-e60f5eb39d1f -IoCancelEventPortName:HostProcess-b4d5984b-f660-47c5-ba58-53668ae03b67 -NonStateChangingEventPortName:HostProcess-8e6cb3d4-2c61-445d-8f71-dd053cb9b160 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:265af2ce-b8d7-4d33-b80f-cfcad7591347 -DeviceGroupId:
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP PSC 1500 series#1401379690" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6416.0.436249657\1462761180" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40,48 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4788 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNewRTO/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6416 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6416.2.1209831153\2015912150" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNewRTO/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6416 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6416.3.876376599\1630224365" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNewRTO/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6416 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6416.4.339994744\1839909516" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/EnabledNewRTO/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6416 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6416.5.400371505\1819623457" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Jozef\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=sk --channel="6416.6.533919442\327609532" /prefetch:-390060480
"C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {843FF0A2-E11B-49E5-BA76-67E29A52DAED}
taskeng.exe {CA906736-726F-4EA7-B29E-CEDBE65EF41A}
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jozef\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job - C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job - C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d042b4aa9b5996.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfeb9bf45cc9c9.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042b4aafe89aa.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core1d042b4d3a9e65d.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA1d042b4d3df00e4.job - C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default

prefs.js - "browser.search.useDBForOrder" - false
prefs.js - "browser.startup.homepage" - "http://www.yandex.ru/?win=148&clid=1989595"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default\searchplugins\
yandex.ru-121639.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10 886488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-02 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10 710864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-02-10 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-02 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"Cm108Sound"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Facebook Update"=C:\Users\Jozef\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-29 138096]
"explorer"=C:\Users\Jozef\AppData\Local\Temp\InterActive.exe [2014-09-14 972800]
"ISUSPM"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"Google Update"=C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe [2014-11-01 107912]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-11-27 466144]
"Zoner Photo Studio Autoupdate"=D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2014-12-19 458456]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jozef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-28 19:01:09 ----D---- C:\AdwCleaner
2015-03-28 17:21:35 ----D---- C:\FRST
2015-03-27 19:32:37 ----D---- C:\Program Files\trend micro
2015-03-27 19:32:36 ----D---- C:\rsit
2015-03-27 05:27:36 ----A---- C:\Windows\system32\invagent.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\generaltel.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\devinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\appraiser.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepic.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepdu.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aeinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\acmigration.dll
2015-03-18 18:45:31 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 18:54:17 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 18:54:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 18:54:16 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 18:54:16 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\mf.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 18:54:12 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\winload.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\smss.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 18:54:07 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 18:54:07 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 18:53:52 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 18:53:52 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 18:53:51 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 18:53:51 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 18:53:45 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 18:53:45 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 18:53:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 18:53:44 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 18:53:40 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:53:37 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:53:36 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 18:53:33 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:53:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 18:53:32 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispgenco6434752.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispco6434752.dll

======List of files/folders modified in the last 1 month======

2015-03-28 20:07:20 ----D---- C:\Windows\Temp
2015-03-28 19:57:03 ----D---- C:\Windows\system32\config
2015-03-28 19:03:07 ----D---- C:\ProgramData\NVIDIA
2015-03-28 19:02:35 ----D---- C:\Program Files (x86)\TeamViewer
2015-03-28 17:43:27 ----D---- C:\ProgramData\Origin
2015-03-28 17:31:33 ----D---- C:\Windows\SysWOW64
2015-03-28 17:31:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-03-28 17:23:01 ----D---- C:\Windows
2015-03-27 19:39:50 ----HD---- C:\ProgramData
2015-03-27 19:32:37 ----RD---- C:\Program Files
2015-03-27 17:17:12 ----D---- C:\Users\Jozef\AppData\Roaming\Yandex
2015-03-27 05:33:43 ----D---- C:\Users\Jozef\AppData\Roaming\Skype
2015-03-27 05:29:51 ----D---- C:\Windows\winsxs
2015-03-27 05:28:35 ----SD---- C:\Windows\system32\CompatTel
2015-03-27 05:28:35 ----D---- C:\Windows\system32\wbem
2015-03-27 05:28:35 ----D---- C:\Windows\system32\appraiser
2015-03-27 05:28:35 ----D---- C:\Windows\System32
2015-03-27 05:28:35 ----D---- C:\Windows\AppPatch
2015-03-27 05:28:18 ----SHD---- C:\Windows\Installer
2015-03-27 05:28:17 ----HD---- C:\Config.Msi
2015-03-27 05:28:15 ----RD---- C:\Program Files (x86)\Skype
2015-03-27 05:28:15 ----D---- C:\Program Files (x86)\Common Files
2015-03-27 05:28:09 ----D---- C:\ProgramData\Skype
2015-03-27 05:27:52 ----SHD---- C:\System Volume Information
2015-03-21 06:27:30 ----D---- C:\Windows\system32\Tasks
2015-03-21 06:27:13 ----RSD---- C:\Windows\Fonts
2015-03-19 18:54:31 ----D---- C:\Windows\inf
2015-03-19 18:54:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-18 18:52:44 ----D---- C:\Windows\Microsoft.NET
2015-03-18 18:51:34 ----RSD---- C:\Windows\assembly
2015-03-18 18:45:30 ----D---- C:\Windows\system32\DriverStore
2015-03-18 18:44:49 ----D---- C:\Windows\system32\drivers
2015-03-18 18:44:48 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-18 18:38:39 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-03-18 18:37:37 ----D---- C:\Program Files\Microsoft Office 15
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 20:40:20 ----D---- C:\Windows\system32\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\system32\en-US
2015-03-11 20:40:20 ----D---- C:\Windows\system32\Dism
2015-03-11 20:40:20 ----D---- C:\Program Files\Windows Media Player
2015-03-11 20:40:20 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 20:40:19 ----D---- C:\Windows\system32\Boot
2015-03-11 20:40:18 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 20:40:17 ----D---- C:\Program Files\Internet Explorer
2015-03-11 20:40:16 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 20:34:33 ----D---- C:\Windows\system32\MRT
2015-03-11 20:30:53 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 18:53:11 ----D---- C:\Windows\system32\catroot2
2015-03-08 19:35:45 ----D---- C:\Windows\system32\NDF
2015-03-06 17:25:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-15 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-08-27 883928]
R3 USBPNPA;USB PnP Sound Device Interface; C:\Windows\system32\drivers\CM10864.sys [2009-11-18 1308160]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Users\Jozef\AppData\Local\Temp\tmp7915.tmp []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 ClickToRunSvc;Služba Klikni a spusti balíka Microsoft Office; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-02-10 2714800]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2014-07-12 58387104]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-08 76152]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-17 5436176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-10-30 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-17 119408]
S3 Origin Client Service;Origin Client Service; D:\Hry\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-05-16 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-05-16 5132888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2014-07-12 441504]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Skype\Toolbars
C:\Users\Jozef\AppData\Local\Facebook\Update
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d042b4aa9b5996.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfeb9bf45cc9c9.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042b4aafe89aa.jo
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000Core1d042b4d3a9e65d.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-29158933-1303504615-777886238-1000UA1d042b4d3df00e4.job
C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default\searchplugins\yandex.ru-121639.xml


:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Jozef
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 27 bře 2015 19:22

Re: Prosím o kontrolu logu

#7 Příspěvek od Jozef »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jozef at 2015-03-28 20:48:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 189 GB (63%) free of 300 GB
Total RAM: 8131 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:48:04, on 28. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\trend micro\Jozef.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [explorer] C:\Users\Jozef\AppData\Local\Temp\InterActive.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Hry\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14066 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
taskeng.exe {A177276E-978F-49CA-B8D4-2773A9869773}
taskeng.exe {EE9A7B9B-5BE6-4308-A0A5-FB788AB01A89}
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 3fd12ef7-28ea-46c3-b907-6c3d2066a679 1
\??\C:\Windows\system32\conhost.exe "1689244158-756008867-47923688531139894-10112006751229162232-62409122050844759
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-17629345291427528991-274569710-1453550355814243137-15165693121996581784-975163794
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
WLIDSvcM.exe 2976
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-95855e77-598c-4747-be27-fcec2eec8112 -SystemEventPortName:HostProcess-177deb16-92a5-4494-a4c1-8cf924cfe98f -IoCancelEventPortName:HostProcess-24faadff-b2da-4089-a014-a786dbbeea7c -NonStateChangingEventPortName:HostProcess-b3d677ff-2adb-43e4-8fa1-52607d43a21f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d41bc6ba-f77c-408c-9acc-478277c427ce -DeviceGroupId:
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Windows\SysWOW64\rundll32.exe" C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
"C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"D:\Hry\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP PSC 1500 series#1401379690" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5836.0.87490936\442879234" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40,48 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4788 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=5836 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5836.2.1277257940\149390466" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=5836 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5836.3.590628167\1621454934" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=5836 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5836.4.420185716\1451763978" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_NonMonotonicity_Experiment/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=5836 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5836.5.1143414828\2050153752" /prefetch:673131151
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Jozef\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll" --lang=sk --channel="5836.6.1803159787\1568495202" /prefetch:-390060480
"C:\Users\Jozef\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Jozef\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042b4aafe89aa.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Jozef\AppData\Roaming\Mozilla\Firefox\Profiles\qwzadz46.default

prefs.js - "browser.search.useDBForOrder" - false
prefs.js - "browser.startup.homepage" - "http://www.yandex.ru/?win=148&clid=1989595"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10 886488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-02 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10 710864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-02-10 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-02 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"Cm108Sound"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\Hry\DTlite\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"explorer"=C:\Users\Jozef\AppData\Local\Temp\InterActive.exe []
"ISUSPM"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"Google Update"=C:\Users\Jozef\AppData\Local\Google\Update\GoogleUpdate.exe [2014-11-01 107912]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-11-27 466144]
"Zoner Photo Studio Autoupdate"=D:\HRY\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2014-12-19 458456]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jozef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-28 20:28:35 ----D---- C:\_OTM
2015-03-28 19:01:09 ----D---- C:\AdwCleaner
2015-03-28 17:21:35 ----D---- C:\FRST
2015-03-27 19:32:37 ----D---- C:\Program Files\trend micro
2015-03-27 19:32:36 ----D---- C:\rsit
2015-03-27 05:27:36 ----A---- C:\Windows\system32\invagent.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\generaltel.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\devinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\appraiser.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepic.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aepdu.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\aeinv.dll
2015-03-27 05:27:36 ----A---- C:\Windows\system32\acmigration.dll
2015-03-18 18:45:31 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-18 18:43:57 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 18:54:25 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 18:54:17 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 18:54:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 18:54:16 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 18:54:16 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 18:54:15 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\mf.dll
2015-03-11 18:54:14 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 18:54:12 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\winload.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 18:54:11 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 18:54:11 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\evr.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 18:54:10 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\smss.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 18:54:09 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 18:54:09 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 18:54:08 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 18:54:08 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 18:54:07 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 18:54:07 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 18:53:59 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 18:53:52 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 18:53:52 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 18:53:51 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 18:53:51 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 18:53:48 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 18:53:47 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 18:53:47 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 18:53:45 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 18:53:45 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 18:53:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 18:53:44 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 18:53:40 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 18:53:39 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:53:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 18:53:38 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:53:38 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:53:37 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:53:37 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 18:53:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:53:36 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:53:36 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:53:35 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:53:34 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 18:53:33 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:53:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 18:53:32 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispgenco6434752.dll
2015-03-07 10:56:22 ----A---- C:\Windows\system32\nvdispco6434752.dll

======List of files/folders modified in the last 1 month======

2015-03-28 20:48:02 ----D---- C:\Windows\Temp
2015-03-28 20:47:17 ----D---- C:\Windows\system32\config
2015-03-28 20:43:12 ----D---- C:\ProgramData\NVIDIA
2015-03-28 20:41:35 ----D---- C:\Windows\Prefetch
2015-03-28 20:41:21 ----D---- C:\Windows\Tasks
2015-03-28 20:28:36 ----RD---- C:\Program Files (x86)\Skype
2015-03-28 19:02:35 ----D---- C:\Program Files (x86)\TeamViewer
2015-03-28 17:43:27 ----D---- C:\ProgramData\Origin
2015-03-28 17:31:33 ----D---- C:\Windows\SysWOW64
2015-03-28 17:31:28 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-03-28 17:23:01 ----D---- C:\Windows
2015-03-27 19:39:50 ----HD---- C:\ProgramData
2015-03-27 19:32:37 ----RD---- C:\Program Files
2015-03-27 17:17:12 ----D---- C:\Users\Jozef\AppData\Roaming\Yandex
2015-03-27 05:33:43 ----D---- C:\Users\Jozef\AppData\Roaming\Skype
2015-03-27 05:29:51 ----D---- C:\Windows\winsxs
2015-03-27 05:28:35 ----SD---- C:\Windows\system32\CompatTel
2015-03-27 05:28:35 ----D---- C:\Windows\system32\wbem
2015-03-27 05:28:35 ----D---- C:\Windows\system32\appraiser
2015-03-27 05:28:35 ----D---- C:\Windows\System32
2015-03-27 05:28:35 ----D---- C:\Windows\AppPatch
2015-03-27 05:28:18 ----SHD---- C:\Windows\Installer
2015-03-27 05:28:17 ----HD---- C:\Config.Msi
2015-03-27 05:28:15 ----D---- C:\Program Files (x86)\Common Files
2015-03-27 05:28:09 ----D---- C:\ProgramData\Skype
2015-03-27 05:27:52 ----SHD---- C:\System Volume Information
2015-03-21 06:27:30 ----D---- C:\Windows\system32\Tasks
2015-03-21 06:27:13 ----RSD---- C:\Windows\Fonts
2015-03-19 18:54:31 ----D---- C:\Windows\inf
2015-03-19 18:54:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-18 18:52:44 ----D---- C:\Windows\Microsoft.NET
2015-03-18 18:51:34 ----RSD---- C:\Windows\assembly
2015-03-18 18:45:30 ----D---- C:\Windows\system32\DriverStore
2015-03-18 18:44:49 ----D---- C:\Windows\system32\drivers
2015-03-18 18:44:48 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-18 18:38:39 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-03-18 18:37:37 ----D---- C:\Program Files\Microsoft Office 15
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 20:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 17:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 17:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 20:40:20 ----D---- C:\Windows\system32\sk-SK
2015-03-11 20:40:20 ----D---- C:\Windows\system32\en-US
2015-03-11 20:40:20 ----D---- C:\Windows\system32\Dism
2015-03-11 20:40:20 ----D---- C:\Program Files\Windows Media Player
2015-03-11 20:40:20 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 20:40:19 ----D---- C:\Windows\system32\Boot
2015-03-11 20:40:18 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 20:40:17 ----D---- C:\Program Files\Internet Explorer
2015-03-11 20:40:16 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 20:34:33 ----D---- C:\Windows\system32\MRT
2015-03-11 20:30:53 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 18:53:11 ----D---- C:\Windows\system32\catroot2
2015-03-08 19:35:45 ----D---- C:\Windows\system32\NDF
2015-03-06 17:25:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-15 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-08-27 883928]
R3 USBPNPA;USB PnP Sound Device Interface; C:\Windows\system32\drivers\CM10864.sys [2009-11-18 1308160]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Users\Jozef\AppData\Local\Temp\tmp736A.tmp []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 ClickToRunSvc;Služba Klikni a spusti balíka Microsoft Office; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-02-10 2714800]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2014-07-12 58387104]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-08 76152]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-17 5436176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-10-30 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-10 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-17 119408]
S3 Origin Client Service;Origin Client Service; D:\Hry\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-05-16 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-05-16 5132888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2014-07-12 441504]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. PC by již měl být čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“